Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa
File: 3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier: QmNF8EOjsRpcO+Rx14pV89/qkOE2/aKsEjwP0TucUV0=
Subject key identifier: 94:26:4C:17:EF:CA:42:94:FC:C1:16:40:F9:D0:32:27:AC:7C:43:E0
Certificate issuer: /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial: 696146331D67DCF39396974F66DB6417124BE0E8
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa
Signing time: Wed 03 Jul 2024 12:49:56 +0000
ROA not before: Wed 03 Jul 2024 12:44:56 +0000
ROA not after: Wed 02 Jul 2025 12:49:56 +0000
asID: 52871
IP address blocks: 201.157.208.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:61:46:33:1d:67:dc:f3:93:96:97:4f:66:db:64:17:12:4b:e0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Validity
Not Before: Jul 3 12:44:56 2024 GMT
Not After : Jul 2 12:49:56 2025 GMT
Subject: CN=94264C17EFCA4294FCC11640F9D03227AC7C43E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:db:ff:59:9d:9d:11:d7:77:ab:d9:6c:36:
bc:9c:af:f3:43:cb:84:0e:69:66:f9:40:a4:7b:65:
17:a8:43:c0:09:67:51:d9:eb:65:f9:50:00:44:26:
8b:3a:c7:f1:9e:5a:e3:ba:e3:9d:06:c1:5c:b8:a4:
31:ed:f0:f3:9a:0a:71:9a:cb:04:ff:c6:6f:81:78:
7c:d4:4e:5a:d8:58:1d:25:1b:2a:76:fa:13:10:6b:
7d:eb:ac:f6:1e:65:5e:25:c6:be:ab:b4:1f:bc:b7:
dc:e8:84:0d:eb:a9:ef:89:5b:e6:42:70:0a:15:48:
a8:ef:93:db:53:1b:9b:53:4b:65:34:12:79:d9:81:
d7:38:97:49:ba:7a:60:fe:45:5a:64:dc:b1:27:87:
3a:ae:30:41:fe:7f:da:a6:87:ce:68:6f:97:97:27:
0b:d6:c2:44:d2:22:77:b3:0e:f9:a3:07:14:17:59:
5e:01:a6:21:cd:73:44:9f:47:0d:e1:43:ed:b4:65:
ed:de:98:df:24:2f:0e:58:f3:08:14:3c:1b:b2:96:
07:57:46:17:6d:bc:f5:36:8f:ad:40:42:8e:6e:09:
ee:59:3b:01:dd:51:e0:d5:79:93:14:f5:4f:4f:e6:
19:f9:3f:15:78:6e:3b:28:1d:01:f4:38:c4:2d:38:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:26:4C:17:EF:CA:42:94:FC:C1:16:40:F9:D0:32:27:AC:7C:43:E0
X509v3 Authority Key Identifier:
keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32342d3234203d3e203532383731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:92:3c:76:16:f2:b8:da:9f:47:b0:9d:03:8c:3c:fb:d5:d2:
cc:64:ed:70:10:b2:e3:c5:d8:31:04:5a:9b:61:e1:6e:1c:5a:
f5:16:5b:9e:86:b9:6e:4e:53:9c:cc:30:90:e4:cf:0e:6a:77:
df:61:3d:1e:0e:6e:fc:69:4a:b0:64:f1:3e:71:5f:2a:bd:c4:
cb:50:88:e3:38:e3:0e:27:72:be:1f:40:ef:6a:0b:d1:f7:d3:
e8:85:91:99:c7:a8:fb:d4:1f:be:57:a7:98:b6:94:7d:da:ef:
01:c2:63:82:63:06:be:e8:b5:0f:1b:16:b7:f5:a1:2d:f4:b4:
d7:cb:95:34:b9:0f:bb:52:ee:a1:9d:1c:ab:8b:bd:2d:7e:50:
c0:98:db:76:67:9a:0f:ec:eb:84:0c:a6:fe:af:0c:83:79:6f:
84:f9:0a:ff:21:14:9c:1e:a7:96:0f:74:d1:07:28:7c:d9:cc:
c9:45:5e:d5:db:5b:57:3a:34:76:9b:3f:a0:8e:46:73:b9:54:
b5:ab:06:6d:8f:74:36:1c:71:ea:06:aa:be:a3:b4:2c:84:6e:
f4:2b:6a:46:20:7a:f3:00:f0:82:22:07:fc:c3:b2:87:43:10:
72:2a:3a:73:9d:9c:9c:70:17:99:38:c5:ed:45:27:75:92:e1:
98:5f:ee:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:51:10 2025 by rpki-client