Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32312e302f32342d3234203d3e20323639363634.roa
File: 34352e3139312e32312e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier: a0VEnEY8/Fh3qhP5uDLrIiobeyNUo3oT9Lj3SSSCy28=
Subject key identifier: 4F:2F:70:EF:A8:A7:14:A6:DF:B7:88:D4:84:A0:CB:4E:B3:39:7B:F7
Certificate issuer: /CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Certificate serial: 2794ED087F656F0F8E7508E0C3B6455958F434A5
Authority key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32312e302f32342d3234203d3e20323639363634.roa
Signing time: Mon 07 Apr 2025 19:56:49 +0000
ROA not before: Mon 07 Apr 2025 19:51:49 +0000
ROA not after: Mon 06 Apr 2026 19:56:49 +0000
asID: 269664
IP address blocks: 45.191.21.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:94:ed:08:7f:65:6f:0f:8e:75:08:e0:c3:b6:45:59:58:f4:34:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Validity
Not Before: Apr 7 19:51:49 2025 GMT
Not After : Apr 6 19:56:49 2026 GMT
Subject: CN=4F2F70EFA8A714A6DFB788D484A0CB4EB3397BF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:93:d8:85:b0:7e:5a:94:0c:e1:ef:ec:70:
de:72:e8:06:88:4a:d6:fb:d4:9c:2c:b4:de:85:6d:
c3:ca:9c:8c:e5:62:32:01:a2:ec:db:e9:28:91:52:
61:53:3a:4a:51:a2:99:e2:fb:3e:4a:84:87:a0:70:
39:e0:26:0f:bd:43:f0:54:88:a7:4b:a4:30:7a:cf:
7a:e0:34:fe:ee:d4:91:b2:8f:e2:81:f5:ea:6f:01:
e5:12:c1:d5:2e:44:dd:86:b2:db:a1:27:00:e7:e9:
fe:c4:ab:9e:d4:22:e9:6d:0c:05:26:0b:80:e3:9d:
7b:68:e2:c2:fb:58:8c:be:ee:a3:73:4f:35:22:fc:
5e:2b:33:62:4e:91:47:7b:2c:83:a3:a8:65:42:4d:
d2:a1:20:f1:fb:77:59:a9:2c:ef:7e:d2:18:61:b1:
d7:2b:f2:6d:da:24:00:29:ca:f6:d0:80:a7:86:c1:
83:38:bc:f9:0c:42:2c:0a:16:2c:fb:88:11:1d:5c:
39:aa:ba:a5:04:f3:ab:d5:c0:87:f5:aa:f1:15:a1:
98:d7:d3:07:b8:61:ad:41:40:96:f5:a5:1b:d2:bd:
38:20:a0:82:9e:c1:fe:3b:20:f1:d3:db:44:00:75:
ed:e7:87:b7:bf:a3:3e:90:20:89:ed:d7:1a:f1:9e:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:70:EF:A8:A7:14:A6:DF:B7:88:D4:84:A0:CB:4E:B3:39:7B:F7
X509v3 Authority Key Identifier:
keyid:4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32312e302f32342d3234203d3e20323639363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:df:b0:3f:51:48:c0:b7:d9:f8:8a:7f:55:7b:2b:8a:52:fd:
93:3d:fe:68:b7:db:b4:4b:85:51:63:c7:e6:05:4b:d5:17:1c:
6d:3d:b4:5b:af:e3:f6:d6:c1:b2:74:ed:73:0d:af:94:f9:96:
02:3f:65:1b:78:e2:ce:2b:4e:6e:ed:ee:dd:8c:95:d5:54:7d:
bd:1f:c6:5c:59:04:46:05:1d:34:e6:06:41:d6:b9:c6:91:15:
5c:8f:de:c9:c4:a0:bf:d0:07:c2:8d:de:eb:47:aa:bd:4d:f2:
cd:f0:e8:1f:99:47:71:08:97:d7:0b:fe:6a:cd:19:6d:9e:1a:
46:1a:ab:c8:d3:92:32:ea:01:ac:1f:43:71:38:eb:a8:32:4d:
42:bc:c1:15:ad:ed:a9:19:d3:64:f0:26:47:79:80:c5:af:fc:
13:72:d6:5c:50:e4:eb:a5:d9:94:6e:0f:4c:a7:66:3d:13:5f:
17:a7:9b:a1:fc:45:25:77:9a:01:fd:3a:d7:23:a2:cb:19:59:
56:e0:3c:b2:9f:81:40:45:b1:f1:c8:69:8e:ae:a7:9b:9e:ee:
ef:72:3d:9b:1d:a1:e1:ef:ea:73:52:a6:24:e6:a4:47:b3:74:
06:68:d9:e4:60:fd:20:19:d1:5b:78:20:05:c7:39:79:ae:ac:
b2:76:64:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:29:43 2025 by rpki-client