Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3230203d3e203238323338.roa
File: 3138362e3231362e3232342e302f32302d3230203d3e203238323338.roa (raw, json)
Hash identifier: FQUvjkPllxyH4BKrzECdySkIMFhwrBhbrZ0TYNWJ8ag=
Subject key identifier: C8:A6:E6:B9:F7:60:BA:40:3A:73:97:D0:94:15:A7:80:4B:D2:71:CB
Certificate issuer: /CN=CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E
Certificate serial: 2FC3162F68E89C9A7921CAB6A95B5774FCE6D474
Authority key identifier: CD:30:B1:01:39:C2:FD:27:FD:78:AA:A0:33:9B:7B:F9:7C:F0:7B:2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3230203d3e203238323338.roa
Signing time: Wed 02 Apr 2025 18:51:18 +0000
ROA not before: Wed 02 Apr 2025 18:46:18 +0000
ROA not after: Wed 01 Apr 2026 18:51:18 +0000
asID: 28238
IP address blocks: 186.216.224.0/20 maxlen: 20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c3:16:2f:68:e8:9c:9a:79:21:ca:b6:a9:5b:57:74:fc:e6:d4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E
Validity
Not Before: Apr 2 18:46:18 2025 GMT
Not After : Apr 1 18:51:18 2026 GMT
Subject: CN=C8A6E6B9F760BA403A7397D09415A7804BD271CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:4b:d5:45:73:81:d5:c3:b4:9b:50:74:16:
11:c7:5d:0a:23:60:86:de:79:b6:54:da:96:67:6e:
14:9a:23:c1:b2:61:f6:ce:f8:8b:05:91:16:c4:96:
a6:5f:eb:e3:93:a8:36:4a:67:78:1b:45:7d:b1:5f:
17:cd:f7:74:86:0e:31:16:b3:b4:f6:12:7a:eb:21:
b0:a7:0c:db:a6:bd:79:08:11:75:5d:a4:ad:94:c1:
1c:67:38:a3:16:5c:0e:8f:8a:37:94:af:b5:af:76:
e6:d7:8c:a4:b5:57:43:c2:20:88:47:00:0a:44:10:
ef:48:05:f5:93:7b:dd:6f:8d:71:61:a7:a7:43:bc:
d9:d7:d3:5f:ce:5f:fc:52:b3:46:d2:fb:4e:94:e8:
0a:27:b7:25:60:4d:73:ac:43:78:3b:ef:9f:29:7a:
a6:63:a2:c1:ac:b1:6e:5e:c8:85:50:00:82:27:55:
9b:3b:68:3f:95:fc:61:38:3e:03:e1:bd:78:54:a1:
37:4c:d5:02:37:c3:8f:14:7c:0f:d1:8a:31:d0:02:
58:49:d3:78:12:b5:00:9c:7b:05:38:60:d2:fd:b9:
a1:bd:a1:85:79:7a:6d:2d:51:ec:83:0c:ce:59:d8:
e8:a1:a1:48:f6:0b:1a:cb:27:b3:0d:4d:af:fc:09:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A6:E6:B9:F7:60:BA:40:3A:73:97:D0:94:15:A7:80:4B:D2:71:CB
X509v3 Authority Key Identifier:
keyid:CD:30:B1:01:39:C2:FD:27:FD:78:AA:A0:33:9B:7B:F9:7C:F0:7B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD30B10139C2FD27FD78AAA0339B7BF97CF07B2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3230203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.216.224.0/20
Signature Algorithm: sha256WithRSAEncryption
22:9a:d9:dd:80:e9:96:4b:00:dd:1a:3f:46:7d:68:e0:4a:84:
73:c5:0b:c2:38:20:42:f8:2b:09:03:3f:c4:5b:46:53:ba:0b:
dd:09:19:a6:ac:ef:4f:18:91:cf:70:10:2e:5f:27:d6:78:3a:
65:c7:58:05:b0:c3:4b:c3:79:30:97:a4:a1:cd:66:8d:bc:e5:
d6:91:62:f0:99:74:12:76:09:22:83:68:91:78:63:0b:ca:6e:
19:47:99:0a:29:e3:d6:13:15:36:ae:0c:54:10:38:96:3c:09:
a4:3f:80:99:84:9e:e4:d5:4e:86:f3:cf:da:1c:01:c9:5f:c7:
79:21:96:d0:b0:75:34:b7:ff:39:13:5a:87:54:5b:35:43:4d:
06:37:cb:c5:c7:29:d9:26:e7:25:d8:70:1b:7a:6a:51:6a:32:
f0:ee:d9:a4:77:bc:7c:2b:ae:da:ed:64:ee:29:7c:0b:3a:43:
7a:be:28:8a:53:9f:e3:34:45:f7:79:74:1b:a5:f1:c1:51:4f:
ce:5c:a1:d9:dc:68:cf:03:5e:0d:b1:2d:ab:01:e5:0a:1a:6b:
7b:57:28:c2:24:48:31:c0:64:1c:b2:db:bc:f9:01:47:fe:90:
a5:5d:d7:16:2e:7b:b2:fa:ed:ea:dc:80:ce:f2:6c:b8:62:64:
06:3f:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:02:15 2025 by rpki-client