Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa
File: 3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier: cXJkZXdhlAtya4Qf2KMEW6r+e9/QgKvEO+2UEufUI9E=
Subject key identifier: F1:4F:0D:FC:96:B5:8E:AC:F8:80:F2:6D:F0:F3:D3:09:68:1B:F0:22
Certificate issuer: /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial: 13BB9F8726255138FB9FC0C4D1A3A98CC88CA7A0
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa
Signing time: Wed 05 Mar 2025 23:40:25 +0000
ROA not before: Wed 05 Mar 2025 23:35:25 +0000
ROA not after: Wed 04 Mar 2026 23:40:25 +0000
asID: 52871
IP address blocks: 201.157.194.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:bb:9f:87:26:25:51:38:fb:9f:c0:c4:d1:a3:a9:8c:c8:8c:a7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Validity
Not Before: Mar 5 23:35:25 2025 GMT
Not After : Mar 4 23:40:25 2026 GMT
Subject: CN=F14F0DFC96B58EACF880F26DF0F3D309681BF022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a2:94:d6:6a:ef:d8:3a:99:05:68:a9:ad:29:
d8:7f:36:83:92:67:b3:4c:11:f8:b5:c6:19:a7:3f:
7c:4a:fc:6c:91:14:f2:f8:94:31:57:b9:d4:91:ab:
53:29:c1:c2:d4:47:91:d9:99:4a:01:f9:74:35:4f:
fa:cb:49:23:49:99:13:e5:b9:4c:50:01:b9:cc:5c:
91:49:cc:07:f2:81:0f:c8:3a:23:65:fb:5b:ff:cd:
65:ce:ce:31:d2:a4:d9:35:4c:e6:19:96:15:eb:8f:
df:32:60:d1:0c:ec:95:59:7f:f1:60:d5:da:1c:6e:
89:39:b8:08:5d:1e:4e:bf:6f:0e:48:7b:f6:8a:a0:
41:dc:6f:85:95:e9:7b:e9:05:f4:0c:12:f6:9a:5d:
c9:e7:5c:a7:5a:9b:ca:02:84:c1:8b:25:39:d6:15:
0c:33:4b:d2:1f:e1:69:b8:fe:4d:bc:79:c6:0e:e1:
45:92:d4:c8:93:a5:a7:dd:e0:35:21:d3:3c:d3:0d:
d1:24:31:4c:9c:4d:83:d7:06:ab:3c:88:f0:1c:6e:
eb:df:c4:42:96:ba:41:1e:1d:05:ca:e9:4d:6e:d7:
62:1e:52:5e:35:7d:5f:ac:f5:8f:08:49:1c:7f:0a:
e8:2c:f2:fe:b4:71:43:db:4c:c6:fd:d6:ef:a0:fa:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:0D:FC:96:B5:8E:AC:F8:80:F2:6D:F0:F3:D3:09:68:1B:F0:22
X509v3 Authority Key Identifier:
keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3139342e302f32332d3234203d3e203532383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.157.194.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:0a:50:3a:84:6d:54:4b:ac:36:58:fd:bc:1a:fa:2f:a1:1c:
7b:d7:b1:f6:80:81:47:f3:2e:09:d8:18:21:c4:a4:c4:52:5a:
97:c4:7d:c7:b6:ad:81:89:32:f7:60:06:ee:9a:ee:2d:e3:ac:
a3:23:57:a6:88:b2:cc:a0:f2:2f:20:48:58:fa:62:61:0e:d3:
3b:23:76:15:f0:b1:e0:40:3e:ea:53:b8:64:4e:b6:58:6b:ab:
fc:94:c1:cf:ab:36:32:73:7e:b7:a3:a8:77:fa:14:5a:53:30:
35:f4:50:12:c6:c6:16:55:30:6e:5b:0f:a4:50:bb:d1:6c:3f:
4d:5c:06:31:a5:88:4f:61:06:f8:dc:3d:3b:a1:70:d1:5b:5d:
e5:93:b0:72:94:7a:84:aa:e4:3f:95:47:3f:ce:75:8a:89:4e:
0a:eb:6c:e0:c8:1c:ec:f0:7c:92:d9:d0:af:10:d8:98:3d:d6:
0d:76:9a:8e:3e:64:ed:b8:f2:9f:32:27:ad:6b:ba:f4:5a:d1:
4a:d5:1a:8f:eb:37:38:29:52:97:89:b9:05:0e:6e:cf:92:25:
82:01:45:ca:a7:8a:74:d6:ea:26:5e:2e:d3:39:9a:40:32:93:
a9:db:d6:c7:ba:eb:f1:9e:44:ce:c8:16:ac:11:67:5b:28:ef:
c8:bf:76:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:55:03 2025 by rpki-client