Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3233362e302e302f32302d3234203d3e203238313436.roa
File: 3138362e3233362e302e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier: cjtxTc8qUT1jzo4XkH2BTp+tqgc908MxTJWSxuPS3pg=
Subject key identifier: 75:2C:44:AF:C8:5F:95:AC:62:64:0C:06:42:58:D7:E1:9D:7B:C2:BA
Certificate issuer: /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial: 40BE27D60D9D011BB66FBBDD2352D99DF34616C4
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3233362e302e302f32302d3234203d3e203238313436.roa
Signing time: Fri 08 Nov 2024 18:32:08 +0000
ROA not before: Fri 08 Nov 2024 18:27:08 +0000
ROA not after: Fri 07 Nov 2025 18:32:08 +0000
asID: 28146
IP address blocks: 186.236.0.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:be:27:d6:0d:9d:01:1b:b6:6f:bb:dd:23:52:d9:9d:f3:46:16:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Validity
Not Before: Nov 8 18:27:08 2024 GMT
Not After : Nov 7 18:32:08 2025 GMT
Subject: CN=752C44AFC85F95AC62640C064258D7E19D7BC2BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:da:0b:cc:05:4b:57:cd:d9:79:68:b3:81:
10:29:a5:69:87:c0:1a:cc:5f:fe:e7:d6:0e:29:ea:
08:d3:fb:6e:24:74:37:79:37:73:10:92:b0:05:44:
f2:b5:de:c2:8f:79:d9:b7:36:18:03:37:2c:8a:22:
e6:b6:fe:f2:5c:c7:64:3c:1e:7e:e9:4f:49:e6:a5:
70:4f:fd:c7:14:b7:b7:32:ce:7c:77:cd:9a:e5:c4:
95:46:8c:0f:21:c7:2e:a3:c7:1e:8a:ac:6f:07:07:
20:0b:07:ec:96:f4:80:2c:f7:01:10:9b:db:7d:4e:
91:f2:75:91:b9:7f:6a:65:6d:99:64:a8:bb:89:1e:
28:ea:87:5d:4d:b8:50:9b:c1:c8:54:82:c8:72:90:
5f:3e:ec:ac:59:62:aa:60:33:81:f6:74:63:3e:43:
fc:82:63:ba:45:a4:6b:c6:e6:07:cc:7c:04:d8:1e:
d4:c5:7a:b2:c5:20:07:c7:33:35:a0:65:3d:f2:6a:
a9:f4:c2:4c:8a:e4:8d:c7:5b:d9:2d:01:bb:10:10:
ef:cf:1f:d1:df:4a:94:5f:c4:0c:e9:84:d9:67:d3:
31:55:52:d2:9b:09:02:a9:42:33:a9:5d:8a:6a:47:
bb:04:c0:83:da:bc:7a:bc:99:af:83:8b:eb:0a:b4:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2C:44:AF:C8:5F:95:AC:62:64:0C:06:42:58:D7:E1:9D:7B:C2:BA
X509v3 Authority Key Identifier:
keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138362e3233362e302e302f32302d3234203d3e203238313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
42:11:0f:6c:e4:fb:fc:22:27:c3:f2:6e:45:a7:89:2d:53:d0:
c5:49:9f:16:28:7d:13:ce:1b:a5:5f:88:9b:82:60:0e:ed:74:
e8:cc:36:9c:b3:2c:40:0b:98:db:a2:a9:15:1a:26:73:96:be:
de:91:24:2a:a1:e0:d5:6a:81:54:43:e9:63:c8:2a:0b:6c:f3:
bf:a2:06:18:31:d4:af:ac:00:e1:3d:f6:9e:60:67:fe:7f:99:
78:e5:a0:2e:73:68:42:f6:97:97:21:01:e9:fa:0f:02:e2:18:
53:b9:22:60:b1:a0:13:7b:33:d4:ba:0c:ad:f3:8c:93:c8:7f:
ef:ee:33:53:34:cc:3b:54:2f:b9:9a:25:20:1a:63:74:9e:7f:
b6:ab:01:42:af:2a:0e:d5:a0:5e:53:f1:ee:4b:f9:de:69:f1:
89:3a:62:7b:07:6d:96:89:09:e2:d2:0e:73:f5:f6:15:e5:72:
03:a5:72:ef:38:86:fe:b9:a2:08:9d:51:04:8f:70:9c:e9:64:
d8:28:0f:d2:24:ef:ad:53:fe:be:fc:d1:88:96:b1:76:75:62:
53:cf:5c:99:1f:9c:7d:f4:a3:7f:bb:7b:35:f2:d1:91:3b:9f:
73:9d:0f:75:5b:a3:c8:c6:f5:9c:37:a0:fa:ed:5b:e6:85:78:
f9:03:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:34 2025 by rpki-client