Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e302e302f32312d3332203d3e203232333831.roa
File: 3138372e3132302e302e302f32312d3332203d3e203232333831.roa (raw, json)
Hash identifier: CJUfFnWFHFtzIxCw/BllzyC2vdaUUfYbecNiviJKBic=
Subject key identifier: DA:6F:C1:D5:A3:27:41:8B:40:D9:FE:88:9F:4F:E4:72:19:45:6B:8A
Certificate issuer: /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial: 5BDAA54A272C8E7A1BA6854E6C8E0A21B7FAC036
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e302e302f32312d3332203d3e203232333831.roa
Signing time: Fri 07 Mar 2025 19:08:27 +0000
ROA not before: Fri 07 Mar 2025 19:03:27 +0000
ROA not after: Fri 06 Mar 2026 19:08:27 +0000
asID: 22381
IP address blocks: 187.120.0.0/21 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:da:a5:4a:27:2c:8e:7a:1b:a6:85:4e:6c:8e:0a:21:b7:fa:c0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Validity
Not Before: Mar 7 19:03:27 2025 GMT
Not After : Mar 6 19:08:27 2026 GMT
Subject: CN=DA6FC1D5A327418B40D9FE889F4FE47219456B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:66:4e:0c:84:b5:68:f9:10:d0:99:8f:27:
49:5b:d4:9f:4a:7a:0e:ce:43:70:67:fb:39:b8:2a:
8d:5f:8c:c4:c3:9d:bf:79:83:56:f8:95:02:b4:54:
9d:19:4e:39:ea:df:51:cc:70:b6:ae:44:5c:91:95:
bb:e6:d1:6b:ec:a4:25:0e:94:10:b1:12:2b:23:82:
25:b8:e5:30:c9:e4:54:61:d5:c7:b4:db:a5:13:2f:
f4:b2:fb:9b:c8:7f:62:98:ae:59:50:30:8e:b0:b5:
54:35:26:d7:50:54:ea:48:a5:fb:59:88:13:c5:07:
4d:c9:ed:ce:5d:6c:18:00:00:d3:54:21:bd:4f:23:
69:70:ae:04:45:63:32:71:3e:2c:3a:9d:3f:84:5b:
38:cf:03:49:59:f7:db:a8:3c:dc:97:d3:7c:62:fe:
53:a5:b2:eb:81:cb:97:9e:43:17:58:4b:19:ca:82:
8c:75:b9:42:0e:74:33:2c:70:ee:d2:de:14:30:16:
6c:60:e4:c5:70:78:4c:c5:22:b0:47:29:e1:98:db:
b6:5c:27:a6:ac:72:a6:55:4e:d3:2d:f0:01:45:70:
32:de:8e:28:ad:1b:c6:ba:7b:67:23:38:94:cf:f3:
d7:05:fa:54:98:f4:54:9e:b4:79:f8:1a:4b:c7:70:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:C1:D5:A3:27:41:8B:40:D9:FE:88:9F:4F:E4:72:19:45:6B:8A
X509v3 Authority Key Identifier:
keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3138372e3132302e302e302f32312d3332203d3e203232333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.120.0.0/21
Signature Algorithm: sha256WithRSAEncryption
98:97:a6:36:57:78:75:38:ba:b5:f0:c8:e9:e1:0b:b3:b2:e1:
bd:7c:b2:72:1c:8b:5d:99:ae:b8:5c:95:8c:6c:36:05:53:95:
9a:ea:75:26:2b:0e:c4:b9:97:4d:cc:04:a4:14:a4:fb:f6:c2:
83:15:45:a3:10:2f:cf:fe:33:37:37:61:e8:76:2d:f0:e3:80:
0f:66:ad:a3:6e:2c:df:35:bd:c6:54:e7:3d:86:20:ca:db:e5:
4a:a0:02:1c:cc:77:2b:ba:7f:3a:29:19:74:0e:aa:01:24:04:
13:92:4a:65:dc:ef:8a:69:57:5a:9e:2c:60:64:2d:3c:f4:ff:
92:cd:5e:6a:15:a5:74:c8:cf:fc:31:b9:16:b5:df:75:1e:af:
47:59:b3:ab:66:2c:06:3b:dc:03:79:c6:b2:68:67:77:42:59:
1c:ae:6f:c2:2c:23:60:3c:18:53:ba:d6:f6:a6:25:a6:73:cf:
2c:c9:77:02:be:13:f8:16:55:90:3b:b7:66:17:99:4d:31:18:
d3:c7:f1:ca:4c:6a:46:ec:5c:08:c2:7a:1c:9a:72:06:b1:ef:
71:e9:bc:f9:b0:a4:1a:e4:14:bd:dc:d5:50:ff:73:76:3d:38:
8a:8e:75:99:c9:30:a3:46:9a:e3:75:a7:c5:d2:45:7a:6e:e2:
73:de:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:37:51 2025 by rpki-client