Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/3139302e3130362e38382e302f32322d3234203d3e20323731303130.roa
File: 3139302e3130362e38382e302f32322d3234203d3e20323731303130.roa (raw, json)
Hash identifier: ANUbJF9yQLGp5BBPCLlnHuiyVW7zt2win1Orc01o6CE=
Subject key identifier: 28:C5:E9:E3:C7:CA:A0:90:69:6B:E9:EA:06:B4:4B:2F:19:18:48:48
Certificate issuer: /CN=C7925017EACBCBFDB8C96704D0075EE40B9E4267
Certificate serial: 3C5FF97877268B74FA0973C0DF485CB4FB0864F2
Authority key identifier: C7:92:50:17:EA:CB:CB:FD:B8:C9:67:04:D0:07:5E:E4:0B:9E:42:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.cer
Subject info access: rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/3139302e3130362e38382e302f32322d3234203d3e20323731303130.roa
Signing time: Thu 06 Mar 2025 12:09:52 +0000
ROA not before: Thu 06 Mar 2025 12:04:52 +0000
ROA not after: Thu 05 Mar 2026 12:09:52 +0000
asID: 271010
IP address blocks: 190.106.88.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5f:f9:78:77:26:8b:74:fa:09:73:c0:df:48:5c:b4:fb:08:64:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7925017EACBCBFDB8C96704D0075EE40B9E4267
Validity
Not Before: Mar 6 12:04:52 2025 GMT
Not After : Mar 5 12:09:52 2026 GMT
Subject: CN=28C5E9E3C7CAA090696BE9EA06B44B2F19184848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:fd:f2:08:46:ad:4d:21:80:8b:c8:ec:ba:be:
78:20:1a:eb:9e:62:d2:24:f6:9f:1f:ca:37:32:dd:
c6:a7:76:3c:65:c7:96:15:48:fe:2b:32:ea:e7:2e:
36:69:2c:e2:0a:0a:51:cc:67:b3:e9:6f:2c:0f:d1:
26:ae:8d:f7:40:05:30:ca:90:fc:1c:37:42:d4:fe:
7e:39:df:63:43:62:5e:c4:59:cb:58:f8:57:61:c5:
a6:27:a5:0d:84:96:d9:43:80:7b:98:b4:1b:9a:6c:
a1:cb:a0:fa:e1:ac:87:cf:8f:db:4d:ba:4a:01:b1:
ac:50:a4:fa:be:d0:ef:1a:f2:52:2c:0b:6b:09:ae:
47:39:65:78:3a:e4:d9:e7:c8:dc:e8:22:e6:08:55:
e0:2f:45:44:89:e9:56:a9:ee:1a:07:fe:7b:aa:58:
03:92:65:f7:1d:e3:70:cd:44:d7:1a:2b:13:e5:9d:
d3:42:6e:ed:e1:1f:2b:83:e3:fb:6c:6e:b3:a8:c4:
75:c4:cd:5d:15:7e:4f:07:1e:09:e1:96:6d:b2:f2:
95:47:3c:d2:30:82:8c:51:7d:ec:97:cf:f3:2c:d9:
27:5f:f8:5b:73:fc:4c:f6:9c:4a:22:82:41:d8:2b:
f1:66:bd:c4:4a:9d:65:fa:cb:3c:a2:e0:6b:d0:b0:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:E9:E3:C7:CA:A0:90:69:6B:E9:EA:06:B4:4B:2F:19:18:48:48
X509v3 Authority Key Identifier:
keyid:C7:92:50:17:EA:CB:CB:FD:B8:C9:67:04:D0:07:5E:E4:0B:9E:42:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/3139302e3130362e38382e302f32322d3234203d3e20323731303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.106.88.0/22
Signature Algorithm: sha256WithRSAEncryption
96:2c:5f:dc:89:d7:8a:37:a7:d0:11:a9:00:e3:fc:78:b7:3b:
c4:a5:0f:00:07:5f:cd:f6:7c:cf:60:ad:fc:9a:b6:c7:23:13:
5e:02:e8:74:62:68:37:43:06:46:c0:09:4e:4b:90:37:fe:15:
f0:42:51:3b:e1:21:19:ae:8c:24:21:d0:17:9e:ff:54:a0:83:
49:bf:1d:c7:1f:f4:fb:ed:9d:73:bd:b0:71:5a:bc:de:2e:de:
d8:9a:1e:91:01:aa:87:82:c5:5f:3a:69:c0:6f:76:4d:5a:f9:
99:9c:64:b0:41:b4:29:21:15:e6:62:1a:49:f5:1e:b2:26:98:
43:f8:12:e9:f0:28:27:43:66:09:fa:5b:c4:62:02:68:d1:9b:
ea:78:16:6b:09:ce:dd:10:46:2f:37:b5:63:6b:01:40:09:65:
ba:4a:03:86:17:86:52:aa:d7:cd:37:bf:09:17:e5:5d:6d:fb:
65:a3:b2:d8:01:c2:3c:0c:52:ee:df:02:45:43:9d:e1:1e:96:
78:4f:c5:af:89:07:e3:e6:5f:d5:ba:ac:e8:54:d1:ec:79:ef:
c3:0e:a7:b5:a3:e9:fd:dc:4a:93:d9:eb:c0:08:d9:94:03:b8:
ea:f8:0b:ab:ca:72:b8:47:ce:fc:17:95:e0:d7:ef:1b:86:7e:
ae:c1:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:32:37 2025 by rpki-client