Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/3137372e3132392e3232302e302f32322d3332203d3e20323731363434.roa
File: 3137372e3132392e3232302e302f32322d3332203d3e20323731363434.roa (raw, json)
Hash identifier: 9H3ps6j6+kvwZWmTRsFqWwRW0HcpANLfb1T3z4MIh+g=
Subject key identifier: 6E:E8:84:29:B2:E5:4F:2C:86:82:C2:19:93:9D:B9:F8:66:2C:6A:88
Certificate issuer: /CN=7929879A21113C589C2E8B64239D988084A6FEBF
Certificate serial: 26FC70D645C870C9CC2369C4ED29F61DBF3AA637
Authority key identifier: 79:29:87:9A:21:11:3C:58:9C:2E:8B:64:23:9D:98:80:84:A6:FE:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7929879A21113C589C2E8B64239D988084A6FEBF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/3137372e3132392e3232302e302f32322d3332203d3e20323731363434.roa
Signing time: Fri 16 Aug 2024 19:25:54 +0000
ROA not before: Fri 16 Aug 2024 19:20:54 +0000
ROA not after: Fri 15 Aug 2025 19:25:54 +0000
asID: 271644
IP address blocks: 177.129.220.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:fc:70:d6:45:c8:70:c9:cc:23:69:c4:ed:29:f6:1d:bf:3a:a6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7929879A21113C589C2E8B64239D988084A6FEBF
Validity
Not Before: Aug 16 19:20:54 2024 GMT
Not After : Aug 15 19:25:54 2025 GMT
Subject: CN=6EE88429B2E54F2C8682C219939DB9F8662C6A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:ca:c9:bd:bc:03:37:cf:6a:6a:d4:cb:ff:
47:35:14:8a:88:47:10:d1:da:2b:6c:d2:a8:31:17:
85:be:7b:78:5f:48:0c:39:cd:fa:5b:f0:55:60:30:
65:4b:63:6b:3d:28:24:d4:c8:54:4e:d0:24:fe:ef:
2a:51:29:7a:27:df:0c:9d:a0:38:75:bb:2f:61:7a:
10:3d:13:aa:d7:f3:ae:49:2f:ae:9d:81:6b:19:64:
c6:c9:8d:b2:3e:2b:8e:ca:12:37:de:ff:cb:74:19:
d6:f1:5d:b5:c4:9d:99:28:5f:52:f1:53:20:4b:0b:
06:50:8f:80:49:b6:48:e6:6f:48:07:31:d5:ca:64:
0d:7c:48:ac:f5:3b:87:e0:09:9b:0c:e8:50:0b:71:
2e:2f:cc:93:27:19:59:b3:59:66:9a:35:0c:40:45:
aa:e2:2f:31:81:40:31:ab:83:f6:a9:9c:60:c1:18:
1a:47:5c:4f:b2:42:65:17:65:d6:b0:04:13:12:9a:
70:8b:a7:e3:d5:d6:17:36:17:ac:3f:f7:7c:42:63:
61:cd:22:76:ff:56:6c:2e:45:b1:fa:36:2c:f3:20:
ca:48:a6:a7:e7:e3:53:37:55:9a:85:ba:58:0c:85:
c4:fa:24:1d:b5:07:8b:83:c0:5b:ac:14:fb:9c:f2:
da:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:84:29:B2:E5:4F:2C:86:82:C2:19:93:9D:B9:F8:66:2C:6A:88
X509v3 Authority Key Identifier:
keyid:79:29:87:9A:21:11:3C:58:9C:2E:8B:64:23:9D:98:80:84:A6:FE:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/7929879A21113C589C2E8B64239D988084A6FEBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7929879A21113C589C2E8B64239D988084A6FEBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/3137372e3132392e3232302e302f32322d3332203d3e20323731363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.220.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:b3:39:a0:0a:fc:1b:40:89:a0:dc:50:aa:19:1f:d8:21:e8:
1f:c3:32:97:e5:2d:a1:01:b7:26:c8:03:90:22:f9:29:5f:76:
cf:1b:33:78:4b:4b:47:49:5a:97:72:75:cf:46:96:7e:96:64:
6c:9d:69:ea:2c:01:7e:37:a0:10:74:31:77:64:ab:5e:50:e4:
2d:8e:90:13:06:f6:0c:c6:48:f9:90:e3:91:d9:f6:4f:a1:21:
5b:a2:81:f3:64:3a:74:a6:b2:b9:60:f9:ce:9c:fe:85:6f:7c:
53:70:03:69:29:c8:90:57:73:03:d9:1c:60:35:f8:1e:d1:c2:
e7:4a:66:10:1e:67:e2:bf:db:87:4b:df:72:b2:2a:7a:a7:b0:
17:77:b2:de:42:f0:f9:d1:0b:8c:6e:c5:f3:53:2a:81:f1:0f:
65:a2:40:d4:63:d2:67:f9:23:4f:db:6e:26:3f:34:42:6a:1b:
76:19:38:12:f6:36:11:b2:b6:fd:27:48:8c:1d:87:36:19:47:
da:76:2e:15:99:b9:28:f7:b6:0a:5a:fb:d9:9a:05:64:15:2e:
7d:4a:ff:c8:c3:75:d1:e6:0b:c7:31:54:e1:59:83:44:4d:d7:
ac:44:14:f6:02:dd:e8:9f:64:fc:d3:ed:1c:76:aa:c5:bd:77:
5d:28:03:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:53 2025 by rpki-client