Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32322d3234203d3e20323730323835.roa
File: 3230312e37312e31362e302f32322d3234203d3e20323730323835.roa (raw, json)
Hash identifier: ksxJBrGNhebFWBTvZv7ZTM5qHDALGsZ9CYGjiIMG5r0=
Subject key identifier: AC:69:61:A7:A5:DB:E5:F2:72:F6:91:A7:EC:8B:1C:19:4E:27:E7:23
Certificate issuer: /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial: 53E04E478C4CC422454C97C3C751EE23426A3BFA
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32322d3234203d3e20323730323835.roa
Signing time: Tue 03 Jun 2025 01:07:48 +0000
ROA not before: Tue 03 Jun 2025 01:02:48 +0000
ROA not after: Tue 02 Jun 2026 01:07:48 +0000
asID: 270285
IP address blocks: 201.71.16.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e0:4e:47:8c:4c:c4:22:45:4c:97:c3:c7:51:ee:23:42:6a:3b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Validity
Not Before: Jun 3 01:02:48 2025 GMT
Not After : Jun 2 01:07:48 2026 GMT
Subject: CN=AC6961A7A5DBE5F272F691A7EC8B1C194E27E723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:ab:8f:c2:7f:0b:16:0c:82:a0:be:f9:cd:
cd:42:f1:72:7e:02:17:1a:13:91:eb:4b:c4:54:42:
e6:42:9a:15:40:bb:3b:8b:73:96:47:85:99:9d:92:
58:f0:61:0b:5c:4d:4e:6b:b5:d4:4f:6d:93:fc:e6:
4d:fe:a6:8f:4e:af:ba:fa:61:92:8e:c1:46:a4:09:
94:26:f8:87:20:99:b1:d7:bc:e4:2c:81:f4:f7:25:
08:c5:a8:10:32:c0:13:7e:5d:f7:d0:14:af:cc:08:
c7:b4:20:58:a1:5f:61:54:1d:5e:23:1c:70:3e:8d:
7b:a1:72:59:dd:0d:b4:e2:1e:fb:a1:f8:42:59:e0:
06:d3:9f:2f:5e:69:96:8f:63:57:33:13:5d:29:85:
e9:93:5d:ec:18:6b:cc:4f:a6:f2:e3:f3:30:2d:71:
28:3e:3e:2a:ae:4e:36:44:3b:70:a6:1a:53:8e:97:
ee:ef:d0:a0:64:e0:4d:65:ff:ae:6f:e1:23:85:a3:
35:5e:c3:1e:8b:cd:42:f6:6d:02:af:8f:34:dd:35:
b8:56:66:23:6d:16:e7:d9:1c:8e:79:7f:44:d4:4a:
3b:3d:08:9f:00:74:e5:dc:c3:a1:b9:0a:83:ea:c1:
f6:a7:29:f0:c7:38:9a:2c:7c:a8:3c:01:9a:e9:c4:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:61:A7:A5:DB:E5:F2:72:F6:91:A7:EC:8B:1C:19:4E:27:E7:23
X509v3 Authority Key Identifier:
keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32322d3234203d3e20323730323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.71.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:97:47:4a:79:b1:6f:3e:04:0c:41:bf:d8:47:7a:4a:ef:2f:
a0:48:36:be:f9:c7:f1:5c:53:0c:ce:8f:90:17:06:38:f7:13:
3d:0e:eb:f1:f7:cb:f0:3c:49:e0:fe:5a:25:36:89:cd:f4:ca:
a9:f1:c0:48:4a:8b:e4:11:79:6d:30:6b:43:ae:3a:2d:6a:c8:
e1:0e:f2:95:99:a5:8f:2f:21:9d:8e:9b:c6:8a:c1:4d:32:7d:
d6:72:c8:a8:5a:4e:e8:66:39:6a:8e:c5:a8:cb:8e:7d:b7:6d:
e2:9f:8e:c5:35:86:46:67:bd:38:16:4c:2e:3f:41:eb:70:9d:
1c:04:bf:6e:28:ee:0d:d6:a0:57:9e:17:6c:b2:aa:1d:6d:26:
77:50:a8:91:53:68:fc:e1:49:b2:00:93:92:90:88:34:78:94:
93:52:71:cb:b3:e2:99:db:90:71:63:f9:99:a2:25:0d:70:1e:
07:ef:86:cd:13:60:04:59:bb:19:f5:dc:eb:25:e8:91:a0:29:
b7:60:20:3f:58:a1:13:9a:5c:a8:17:35:df:32:c5:45:29:0c:
b5:11:9b:68:3f:09:8a:96:cd:f5:1b:b0:10:cc:c1:65:05:b4:
c0:eb:ec:15:1b:9b:5c:2e:2f:15:9d:9a:14:66:82:fe:d0:a9:
9d:a2:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:22:38 2025 by rpki-client