Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/34352e3137362e3131322e302f32322d3332203d3e20323639303335.roa
File: 34352e3137362e3131322e302f32322d3332203d3e20323639303335.roa (raw, json)
Hash identifier: luM9TW+Lb9C+JpEF47YWS+l4c8VYneu2ecf9lUMkjZo=
Subject key identifier: B9:D5:D2:A7:7E:B5:C8:7B:0E:3E:E1:3E:A9:0C:DE:C5:DA:F5:BB:7B
Certificate issuer: /CN=CCB3B2CED2C6B0381EE0E27042C658F4289239B8
Certificate serial: 7078C6A91BCB8A6DB165D1A0B25505B5AB15D140
Authority key identifier: CC:B3:B2:CE:D2:C6:B0:38:1E:E0:E2:70:42:C6:58:F4:28:92:39:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCB3B2CED2C6B0381EE0E27042C658F4289239B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/34352e3137362e3131322e302f32322d3332203d3e20323639303335.roa
Signing time: Thu 19 Dec 2024 23:05:20 +0000
ROA not before: Thu 19 Dec 2024 23:00:20 +0000
ROA not after: Thu 18 Dec 2025 23:05:20 +0000
asID: 269035
IP address blocks: 45.176.112.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:78:c6:a9:1b:cb:8a:6d:b1:65:d1:a0:b2:55:05:b5:ab:15:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB3B2CED2C6B0381EE0E27042C658F4289239B8
Validity
Not Before: Dec 19 23:00:20 2024 GMT
Not After : Dec 18 23:05:20 2025 GMT
Subject: CN=B9D5D2A77EB5C87B0E3EE13EA90CDEC5DAF5BB7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:49:a7:b3:27:ab:3a:52:ea:3c:21:bb:b8:
24:ed:88:da:37:2c:c7:0d:68:a0:76:ed:bd:fb:25:
d5:04:0d:dc:12:3a:ce:27:ed:61:ca:27:75:b6:7e:
60:b9:b6:e2:ad:a5:52:00:f2:23:83:44:95:ef:d9:
e8:26:43:19:8d:b1:8d:1a:c6:ac:aa:6a:35:b8:c1:
c1:e5:99:3a:36:c7:fa:79:28:3a:2f:0a:8e:af:78:
2e:2d:20:2f:66:37:4b:79:ea:73:f7:c9:77:c4:4e:
4b:99:00:3b:14:0c:f7:aa:e4:85:d8:5f:67:5f:75:
79:67:7c:23:5b:e7:94:ac:d1:44:59:0e:73:2e:04:
65:f0:b1:2b:9b:f9:86:2b:d2:96:ab:89:d5:9e:d4:
d3:fd:44:a8:24:88:97:9d:24:d7:07:23:a3:2a:a0:
d6:0c:72:39:5c:49:a8:94:2b:47:df:ae:70:a5:4a:
6a:90:cb:de:92:fa:ba:a9:51:e3:1a:2d:cf:71:12:
eb:c9:b3:dc:1c:aa:6e:6c:73:d9:27:e6:52:66:b5:
34:9b:0c:c7:bf:a3:e8:06:00:67:63:1a:90:32:a5:
18:b3:80:08:93:8e:a0:f4:f0:26:43:df:75:fc:d8:
b8:bf:6d:1d:8f:51:c5:85:bb:b4:24:cb:0a:3a:e0:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D5:D2:A7:7E:B5:C8:7B:0E:3E:E1:3E:A9:0C:DE:C5:DA:F5:BB:7B
X509v3 Authority Key Identifier:
keyid:CC:B3:B2:CE:D2:C6:B0:38:1E:E0:E2:70:42:C6:58:F4:28:92:39:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/CCB3B2CED2C6B0381EE0E27042C658F4289239B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCB3B2CED2C6B0381EE0E27042C658F4289239B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FqwjYYVWjJVmvFnECBddBmPv335u5T7qeQzGxBU13u5/0/34352e3137362e3131322e302f32322d3332203d3e20323639303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.112.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:c8:18:b8:50:e6:16:cf:87:19:fc:0a:40:ea:f9:09:da:cf:
2a:ac:54:7e:f2:8a:93:d4:13:ec:d8:fa:49:a1:00:26:be:f1:
14:40:41:7f:ac:21:4a:18:0f:ca:a0:ec:fa:f6:3c:fb:f8:3e:
30:64:1e:e6:cd:46:e6:b9:5f:2f:12:47:63:95:ef:6a:fc:9b:
60:73:97:eb:9a:75:cd:bb:7a:99:2b:81:32:ad:ce:7a:3f:02:
71:39:fa:2f:23:99:84:a2:3a:3f:36:fd:28:04:2d:60:59:b9:
70:df:bd:74:7d:3c:04:e2:1e:07:e3:6e:51:ec:8b:7e:90:8f:
b0:9f:39:05:b3:7e:c0:1b:e8:aa:4e:7c:fd:9e:10:43:2d:de:
28:06:b6:6b:52:8c:31:66:3f:2d:76:72:3b:86:9b:73:a2:00:
77:be:d8:4e:85:67:b2:59:fd:2f:a9:c1:d9:9d:4c:d8:63:b0:
b0:16:47:76:c3:52:21:bf:bc:5a:84:37:06:1b:41:7f:f5:3d:
4b:9a:04:52:1b:43:6d:bb:d4:16:23:15:6b:6b:1e:92:7c:c5:
ea:3e:71:3c:b0:4f:09:2e:f3:d9:b3:78:d5:42:fe:03:73:39:
0f:57:46:4f:0d:ad:17:f0:27:f3:52:4a:20:ec:47:59:e3:1c:
e0:20:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:01:13 2025 by rpki-client