Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
File: 3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa (raw, json)
Hash identifier: tZnLd5eTkFbLRSQ5YqL5kRQ/Xv4229knGvkOKKREeXU=
Subject key identifier: 23:EC:B9:A8:FA:59:6E:02:75:A6:07:A5:7B:E2:A2:14:9F:52:B2:7A
Certificate issuer: /CN=77570FAC77508AD3070A2732DBD19271C2614647
Certificate serial: 189B50D1D516A584D45423F8689CE3890444DFF2
Authority key identifier: 77:57:0F:AC:77:50:8A:D3:07:0A:27:32:DB:D1:92:71:C2:61:46:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77570FAC77508AD3070A2732DBD19271C2614647.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
Signing time: Sat 08 Feb 2025 22:58:02 +0000
ROA not before: Sat 08 Feb 2025 22:53:02 +0000
ROA not after: Sat 07 Feb 2026 22:58:02 +0000
asID: 262820
IP address blocks: 138.117.120.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:9b:50:d1:d5:16:a5:84:d4:54:23:f8:68:9c:e3:89:04:44:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77570FAC77508AD3070A2732DBD19271C2614647
Validity
Not Before: Feb 8 22:53:02 2025 GMT
Not After : Feb 7 22:58:02 2026 GMT
Subject: CN=23ECB9A8FA596E0275A607A57BE2A2149F52B27A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:9d:b8:25:4b:53:6f:54:3c:51:cf:7e:8f:
75:83:ee:23:f2:19:d2:c0:a6:8b:1e:dd:c5:d8:08:
5a:6a:8d:c1:2c:7b:a4:0d:b8:18:ec:ff:a4:1b:56:
02:b1:33:8d:9d:da:f0:ff:8a:9e:4e:10:b7:9d:ce:
cd:f7:46:0b:d3:49:d4:fe:5a:96:5e:32:c3:fb:fe:
18:b3:db:42:b0:8b:88:1c:33:06:5c:ba:51:8d:cd:
90:26:6b:7d:1b:c2:e4:61:cc:37:d5:05:59:4d:59:
ef:c9:b5:7b:6a:aa:f2:fc:bd:b5:16:f0:78:3d:38:
d1:99:57:f4:c1:7b:71:18:fe:6e:9f:63:c1:cd:cb:
9f:5b:a8:59:47:75:f6:e4:65:df:fb:66:10:01:87:
2b:39:1b:71:3e:1c:74:1d:03:0f:bb:17:dd:a0:e5:
24:76:ae:4f:4f:c6:78:ae:14:d5:68:ea:2e:f7:9b:
08:0b:31:91:bf:fa:0e:f9:42:5a:d4:ec:01:58:38:
56:50:3e:1c:58:f4:31:0b:01:23:ee:9e:21:d2:62:
3b:3d:8d:ac:17:3f:a1:c2:f8:8f:ef:0d:98:56:95:
db:9d:95:aa:79:8e:55:8c:17:52:fc:86:92:51:5d:
75:72:4a:5d:7e:dd:43:b4:d5:04:06:91:05:9b:e2:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EC:B9:A8:FA:59:6E:02:75:A6:07:A5:7B:E2:A2:14:9F:52:B2:7A
X509v3 Authority Key Identifier:
keyid:77:57:0F:AC:77:50:8A:D3:07:0A:27:32:DB:D1:92:71:C2:61:46:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/77570FAC77508AD3070A2732DBD19271C2614647.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77570FAC77508AD3070A2732DBD19271C2614647.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:e3:22:fc:d7:58:f3:5d:d9:8e:4f:04:3d:e5:37:f1:99:1a:
2e:35:04:0b:be:da:66:9e:1d:f5:0f:0a:e3:98:f8:53:6e:c7:
4b:e8:63:c5:96:8a:d7:a1:69:32:d2:a2:a5:2c:e3:d6:9d:1b:
76:ae:ab:0c:8c:bf:9d:59:3b:e3:ff:bd:00:28:6f:7c:91:fa:
1d:9e:ec:f1:96:09:5e:3e:dd:e9:08:91:78:71:99:dc:23:4d:
dd:b9:17:5d:4b:50:30:48:01:c1:d8:1f:0e:a8:e2:48:3a:bd:
64:e6:c9:0e:cd:a4:1e:0e:ca:11:07:c5:2b:9f:0e:cc:69:f6:
65:36:ad:6a:ad:b5:a5:1a:f3:9d:f3:1e:ff:ea:92:6a:b0:ce:
df:38:58:40:a9:e2:29:87:06:2e:41:f0:52:06:eb:84:c5:f7:
5a:71:48:5a:b0:c1:03:4b:dd:2e:18:46:c0:26:97:ea:01:fb:
95:70:cc:d7:71:c4:17:e9:d6:8c:5e:77:02:a3:5b:b1:60:50:
33:37:28:66:05:b2:fd:8c:ac:89:5a:1c:28:57:f0:5b:1e:d6:
0b:03:ad:92:1c:42:0f:bb:58:d7:c6:35:1e:75:63:12:a1:08:
de:55:5b:ce:c5:b8:b1:30:d8:a8:c3:b5:9b:07:3c:2b:f6:ae:
04:db:59:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:32:38 2025 by rpki-client