Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
File: 3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier: 76Cz+FKbsVQW5MBl2yfLLJ8mPHpl1XsgV+UqQA8j0ic=
Subject key identifier: D5:A8:3F:5F:31:5E:31:0A:CA:C5:C3:00:C8:C8:FA:11:47:83:A3:74
Certificate issuer: /CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Certificate serial: 18472C3A520D48A8BAEA86CDE94B883899F01DAB
Authority key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
Signing time: Tue 14 Jan 2025 15:48:49 +0000
ROA not before: Tue 14 Jan 2025 15:43:49 +0000
ROA not after: Tue 13 Jan 2026 15:48:49 +0000
asID: 265393
IP address blocks: 168.194.164.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:47:2c:3a:52:0d:48:a8:ba:ea:86:cd:e9:4b:88:38:99:f0:1d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Validity
Not Before: Jan 14 15:43:49 2025 GMT
Not After : Jan 13 15:48:49 2026 GMT
Subject: CN=D5A83F5F315E310ACAC5C300C8C8FA114783A374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:c4:ef:e6:4a:9f:d8:26:d8:fa:ae:ea:25:
80:cb:9f:d0:5b:d2:8f:c2:1c:2f:ec:6f:69:f2:ff:
cd:5d:df:f9:5a:d7:4a:01:7d:ff:aa:f9:84:cd:e6:
8c:fc:69:ed:ed:b6:f3:f8:82:d2:7d:58:aa:19:bf:
c2:60:a2:8d:18:9c:a2:ac:9e:0b:e1:66:7a:27:20:
88:64:31:6c:49:e2:b4:9b:77:19:80:35:59:67:f5:
ff:19:f9:f4:5f:05:97:1a:f9:de:ee:8f:f0:7c:d7:
24:5f:23:51:6d:23:a1:ec:9a:e2:bb:ce:cd:9e:8c:
fc:08:1e:a2:98:ce:2c:44:1b:dd:3d:86:02:30:c4:
47:3e:79:bf:17:37:92:8f:0a:ff:f2:cc:bc:45:84:
5f:a8:b7:e4:1a:bb:d6:37:b1:74:ba:fe:3b:a9:5f:
bc:d8:ba:03:fb:81:2f:85:72:55:da:ce:d2:5e:d2:
29:4b:25:e6:d3:76:57:01:52:a6:3f:3b:fd:9d:9a:
24:3d:84:e0:fa:82:c5:7a:2a:79:c2:38:ff:04:2a:
f4:d8:77:81:6b:29:f5:09:94:80:a1:d9:d0:40:86:
94:4d:50:a9:b0:2a:af:ae:69:57:4f:9b:41:6a:26:
e2:28:06:f9:ae:83:83:81:2f:a9:ac:d3:e4:f7:bd:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A8:3F:5F:31:5E:31:0A:CA:C5:C3:00:C8:C8:FA:11:47:83:A3:74
X509v3 Authority Key Identifier:
keyid:1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.164.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:c5:13:3f:0d:fd:83:1d:e0:85:d0:be:59:47:fb:bb:ae:11:
c1:f1:f5:bd:df:89:37:7a:d7:76:3f:a5:1c:78:54:3a:c1:08:
03:1f:a7:84:e4:0e:6a:b8:d1:9e:c7:e3:1b:22:c8:af:8c:69:
1c:db:f1:d7:36:36:9c:5e:bc:ac:59:e0:02:00:ac:d7:d5:de:
c9:73:f8:75:e2:8b:f8:49:10:3c:7d:67:63:39:38:35:60:ac:
5e:a3:d8:fb:d3:80:5d:92:63:a2:c7:bf:2a:72:61:5b:20:88:
96:09:57:19:fc:64:42:a8:0f:a6:73:78:cc:93:2d:79:40:94:
1e:37:9f:cd:8d:a8:a1:61:57:1e:28:04:96:92:a7:0b:4d:e6:
5c:00:b4:e4:46:5b:2a:da:6f:2a:fd:a6:2b:05:3e:c6:7a:15:
95:fa:da:58:4c:bf:3b:e2:12:41:2d:22:89:fd:a2:d1:60:1f:
83:3e:2a:50:83:42:1c:3e:be:c3:96:ff:94:96:32:b5:c9:ab:
76:54:6d:20:67:6d:dc:3e:8d:b0:a7:5b:ec:28:41:a1:3c:42:
4c:16:89:0f:6c:e4:2c:a9:d9:19:6e:bd:8e:b1:6e:0b:d4:a8:
26:7a:83:d8:88:81:be:b0:7b:14:30:f9:59:cd:7a:91:60:db:
b2:32:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:48 2025 by rpki-client