Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133312e3130302e39362e302f32322d3234203d3e203238323234.roa
File: 3133312e3130302e39362e302f32322d3234203d3e203238323234.roa (raw, json)
Hash identifier: HaMGE6c3YXvWO9HLEPrOiWaAxUU+jRPr08u3dkpmsDY=
Subject key identifier: 4A:1F:D6:45:F1:36:D2:45:27:45:F6:B6:F7:7B:49:5E:37:E7:0A:10
Certificate issuer: /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial: 3C08CA8478FA25EB12E7FC4159AF6D722A2789BE
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133312e3130302e39362e302f32322d3234203d3e203238323234.roa
Signing time: Fri 08 Nov 2024 18:36:57 +0000
ROA not before: Fri 08 Nov 2024 18:31:57 +0000
ROA not after: Fri 07 Nov 2025 18:36:57 +0000
asID: 28224
IP address blocks: 131.100.96.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:08:ca:84:78:fa:25:eb:12:e7:fc:41:59:af:6d:72:2a:27:89:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Validity
Not Before: Nov 8 18:31:57 2024 GMT
Not After : Nov 7 18:36:57 2025 GMT
Subject: CN=4A1FD645F136D2452745F6B6F77B495E37E70A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:7a:f1:32:b0:9e:b2:74:0c:ee:de:e4:c9:
cd:7b:de:ff:8c:3f:52:c5:87:4d:44:c9:51:bc:8c:
48:bf:b5:77:e9:84:ec:3f:b3:d6:31:1b:b4:45:08:
56:da:16:72:96:a2:58:de:50:58:29:cf:bb:6e:29:
33:4b:c8:e9:92:1f:96:88:f0:39:31:80:12:ce:9b:
c9:47:ba:d7:c9:89:8f:02:ea:14:c9:9b:7d:6e:9d:
e7:93:de:26:56:f0:4c:b9:6a:9a:1f:3e:c7:f5:74:
0b:5f:88:78:e6:32:9d:bc:8a:01:67:a4:a2:a8:88:
89:fa:c9:e3:fc:16:56:4a:0b:55:65:b4:d6:4f:8f:
2b:49:be:f5:6b:05:c5:7c:5f:ea:d6:71:79:bb:30:
c0:65:19:dd:c5:85:90:36:66:32:27:c4:71:75:13:
10:73:5b:e6:87:e4:cf:ac:17:7d:13:d3:72:ca:da:
30:83:d5:73:8c:7b:94:19:c5:9c:fb:20:91:aa:81:
4f:59:62:87:ce:92:a6:fe:89:3b:72:5f:66:bc:36:
5c:94:f5:47:ff:65:70:14:00:9a:df:ae:cc:c3:a9:
c9:e0:52:b8:2f:6b:e7:50:b5:96:47:14:78:c1:44:
ca:b7:f1:7b:13:c6:e6:5e:61:65:80:8c:01:df:81:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1F:D6:45:F1:36:D2:45:27:45:F6:B6:F7:7B:49:5E:37:E7:0A:10
X509v3 Authority Key Identifier:
keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3133312e3130302e39362e302f32322d3234203d3e203238323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:7b:55:d0:29:20:98:c7:00:e2:80:dc:62:b3:ed:16:92:7e:
9a:e5:61:57:be:cb:79:24:d1:a2:f7:e3:78:5d:fd:fb:6c:52:
63:b6:79:48:dc:27:66:3b:c9:f2:25:68:7b:02:a8:55:38:94:
92:08:ad:4a:81:dd:56:4c:92:eb:7d:87:ff:98:2b:36:7a:f3:
6c:40:21:9c:22:47:f7:7f:6d:95:ea:d5:84:2b:90:d6:da:f8:
eb:57:a1:64:51:17:58:69:3e:a8:3d:73:47:0e:9a:9a:d1:68:
ab:61:1e:7d:00:93:fb:17:bf:9f:0e:d8:27:4b:fc:1f:88:17:
6d:37:ca:bc:af:b9:f5:3e:c9:88:d9:09:96:69:72:90:13:f4:
60:bb:3b:f5:15:96:02:4a:8c:9f:da:97:97:39:a8:06:b1:36:
47:9e:d4:3c:86:b7:a7:70:21:26:7a:3a:5a:d4:35:b1:bf:6a:
0d:6f:59:8b:7b:7b:0c:a1:e5:fc:15:83:eb:0a:20:e8:28:5b:
10:9b:e5:9a:1f:46:62:a3:17:03:73:81:8d:61:1b:99:32:d3:
46:d5:cd:df:1f:ae:e8:b7:b5:ba:1b:a1:4e:1b:c3:f8:33:b2:
16:f1:9b:36:c0:db:33:a8:71:fb:be:ed:b0:51:68:7b:7a:a2:
e7:4a:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:23 2025 by rpki-client