Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e2033333536.roa
File: 3137392e39362e3137362e302f32312d3332203d3e2033333536.roa (raw, json)
Hash identifier: Q+l74xcx3N8hcouOVLxOSsv7R3Bv1rCNL5QGk/EoPsM=
Subject key identifier: BD:D8:E4:F9:9D:C0:6B:D9:1D:27:7A:49:72:02:72:DA:40:21:72:87
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 10061FC10BF334F171F497EFFA671EFAE3592553
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e2033333536.roa
Signing time: Thu 06 Mar 2025 00:58:55 +0000
ROA not before: Thu 06 Mar 2025 00:53:55 +0000
ROA not after: Thu 05 Mar 2026 00:58:55 +0000
asID: 3356
IP address blocks: 179.96.176.0/21 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:06:1f:c1:0b:f3:34:f1:71:f4:97:ef:fa:67:1e:fa:e3:59:25:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Mar 6 00:53:55 2025 GMT
Not After : Mar 5 00:58:55 2026 GMT
Subject: CN=BDD8E4F99DC06BD91D277A49720272DA40217287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3d:bb:d9:6b:d3:9e:e1:b2:45:86:17:ee:8a:
f2:6e:68:ac:9e:d2:2c:ee:d5:b2:89:e8:20:a0:67:
d9:6b:a0:92:84:96:43:5f:65:5a:4e:07:fc:c9:1c:
cb:45:4d:0c:11:aa:cd:46:aa:df:fd:b6:82:1e:7c:
77:7d:0c:3c:20:b9:43:db:80:14:f0:e9:d8:4d:ba:
20:ca:19:84:38:70:ed:91:5c:fe:54:b4:bf:11:65:
99:b5:62:aa:bd:e3:8d:37:b9:7f:c5:a5:a4:6e:35:
60:7b:46:ae:3a:52:db:b0:6a:4b:69:df:cd:c8:c3:
b0:28:aa:0a:c6:99:a2:f7:46:57:a5:ac:5e:2e:db:
94:48:0c:36:17:e2:a5:e8:44:54:58:5e:d5:37:71:
f2:2b:53:f8:87:19:9e:f7:aa:d3:3d:b5:bb:c1:ac:
1c:a1:dc:c3:1a:3f:ca:26:4d:19:2a:cc:82:6c:64:
86:e3:57:f2:bd:76:54:b3:e1:5e:24:87:fb:1d:bb:
db:1f:fb:e3:38:67:4c:40:87:c2:bc:b2:9d:08:c6:
25:41:5d:7b:63:93:9e:54:fc:25:02:e5:02:2b:a5:
03:58:9a:2c:b0:ab:2d:05:43:df:93:8e:fd:01:e1:
b0:3d:d5:9a:dd:2d:cf:a7:c8:e5:7c:f2:09:ea:ee:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D8:E4:F9:9D:C0:6B:D9:1D:27:7A:49:72:02:72:DA:40:21:72:87
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3137392e39362e3137362e302f32312d3332203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.96.176.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:1a:d6:b4:22:f3:c7:30:2b:a8:ff:d4:6c:77:96:56:0c:b3:
6d:23:33:8b:4a:ce:0f:08:ec:6e:1f:1e:94:10:28:65:15:07:
a4:6e:28:6b:6d:f7:14:0c:ec:ac:e2:b7:98:24:53:2a:6e:d2:
77:0c:af:a3:78:93:56:49:95:3b:c2:95:0f:77:25:28:cd:fc:
f6:50:c9:68:34:1c:5b:39:ab:d8:b5:5b:9d:f3:30:33:22:23:
81:84:52:62:8e:47:8c:03:62:95:38:69:3d:d5:4f:10:ab:1d:
cc:b4:d5:2f:1b:43:05:77:64:f8:7c:e4:b1:56:98:7d:d4:77:
a9:c1:30:58:e2:0b:56:9c:11:51:3b:85:94:e8:c6:70:ad:0c:
c4:cd:36:0e:72:27:ec:b6:8c:20:12:37:b0:57:b5:89:4a:ba:
71:52:3d:b4:76:c4:f0:a6:bc:00:cb:23:71:cc:08:1f:94:25:
10:31:88:f6:dc:c8:29:19:26:af:d2:bf:81:12:7c:79:fb:67:
61:93:4f:cb:3d:cf:ab:e2:c4:56:4f:27:b9:a3:c0:49:29:fc:
00:cd:1c:3a:62:ec:9e:8a:df:b1:52:b0:ae:8d:d2:50:f4:2b:
36:42:5d:72:94:09:d7:cd:24:80:1b:6a:52:18:bc:44:04:4c:
92:fc:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:52 2025 by rpki-client