Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135352e302f32342d3234203d3e20323632343939.roa
File: 3137372e36362e3135352e302f32342d3234203d3e20323632343939.roa (raw, json)
Hash identifier: SXqNZDQVkOYnhirJ+le7mTwCQqPy4Nbg4Z5FSElxc/I=
Subject key identifier: 24:C1:CA:D9:84:48:D0:00:37:AC:90:EA:24:5D:3B:99:32:EE:C3:9F
Certificate issuer: /CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Certificate serial: 2503058C2F08041B80445A094EE5AE24DBEE5E62
Authority key identifier: 58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135352e302f32342d3234203d3e20323632343939.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 262499
IP address blocks: 177.66.155.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:03:05:8c:2f:08:04:1b:80:44:5a:09:4e:e5:ae:24:db:ee:5e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=24C1CAD98448D00037AC90EA245D3B9932EEC39F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:ef:d0:2f:47:b1:3f:12:0e:11:dc:47:f2:
6c:92:0e:61:d2:6b:c2:44:2e:83:83:9e:b1:07:53:
13:3c:05:b1:38:3d:fe:35:6a:ca:ee:c8:df:c9:6c:
28:75:2c:1e:2d:b7:5e:ef:19:81:a6:30:44:b0:02:
7f:01:19:f1:d5:3f:e9:46:47:d3:c0:e6:08:06:82:
64:d0:7a:5f:87:d6:66:3e:f5:4d:49:91:c1:55:b4:
bc:dc:bc:47:3d:5f:b9:8b:58:31:f6:83:e6:cb:49:
01:ee:06:47:ec:d5:cd:f9:79:31:df:96:df:18:c2:
3d:d9:5c:a4:0a:7b:08:49:43:97:13:38:df:2d:95:
bc:7b:69:1f:80:65:58:de:f7:cb:0a:97:0e:9a:ef:
ed:30:dc:51:da:b6:28:6f:22:25:41:4d:bd:f0:9f:
17:f9:14:3e:0c:13:56:1b:b3:c4:f2:dd:d5:55:f3:
dd:d6:56:72:b7:9b:63:14:03:a1:2a:91:73:77:cc:
1c:ad:12:42:85:ca:8f:ac:27:5a:50:12:ff:52:52:
56:92:62:14:37:8d:3d:69:cc:02:28:37:75:cb:4d:
2a:3e:63:06:13:61:68:b9:8e:d2:bf:36:45:74:99:
74:0b:95:c0:9a:4f:ff:d8:15:57:64:d7:12:d9:6e:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:CA:D9:84:48:D0:00:37:AC:90:EA:24:5D:3B:99:32:EE:C3:9F
X509v3 Authority Key Identifier:
keyid:58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135352e302f32342d3234203d3e20323632343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.155.0/24
Signature Algorithm: sha256WithRSAEncryption
91:52:ee:c8:03:34:dc:33:00:84:9e:7b:eb:ed:32:14:6a:e5:
be:72:d6:f5:12:da:4f:0a:3f:27:74:12:f8:86:b1:fd:1f:df:
3f:f5:70:9a:5b:b6:d0:5a:41:37:47:f0:1f:7e:7d:54:61:54:
b8:f6:eb:aa:db:b3:b3:53:fc:8a:98:51:81:9b:22:23:47:90:
bc:2f:3f:c9:55:42:c8:a0:44:5e:7b:f2:cc:36:14:1e:b3:75:
55:bc:06:04:f9:e0:99:38:9f:b0:18:23:15:07:ee:90:16:ca:
9c:f2:8c:a3:61:dc:01:49:a2:19:e2:80:3c:32:81:a6:6c:c7:
7d:7c:ca:91:11:fd:4d:21:85:94:21:62:09:17:d0:6a:f3:a4:
f8:40:7f:4e:4b:0d:af:ab:65:a6:ad:3d:80:08:81:b2:95:c3:
80:94:f9:bb:3c:17:1e:a4:4a:2f:6f:cd:85:14:c1:33:aa:2c:
85:97:b1:e1:cc:cf:e2:9f:33:f3:38:53:cc:79:bc:d1:30:40:
85:53:8d:fa:b0:33:97:12:70:43:a0:15:d8:a7:49:1a:53:c1:
92:35:d9:4a:31:77:da:b7:38:77:eb:1e:f2:5d:a5:15:17:a0:
24:b7:86:70:0e:ed:80:60:71:24:b5:bb:3e:15:4f:dd:fe:af:
7e:bb:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:51:35 2025 by rpki-client