Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/3136372e3235302e3132342e302f32332d3233203d3e20323732373137.roa
File: 3136372e3235302e3132342e302f32332d3233203d3e20323732373137.roa (raw, json)
Hash identifier: J5oQQHO7tXTNHLCyQFT3DJ51cihX1KBmowbQIrT+pdE=
Subject key identifier: 8A:F0:2A:CB:57:2A:65:28:D0:A0:64:7C:6C:31:8E:B4:0B:C0:F3:CF
Certificate issuer: /CN=41692467D51C0CDCAE5CFACADB17B6B148A848D7
Certificate serial: 767FF17D3A2E96A49A16C16BDAF93F0747DC6C64
Authority key identifier: 41:69:24:67:D5:1C:0C:DC:AE:5C:FA:CA:DB:17:B6:B1:48:A8:48:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41692467D51C0CDCAE5CFACADB17B6B148A848D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/3136372e3235302e3132342e302f32332d3233203d3e20323732373137.roa
Signing time: Tue 16 Apr 2024 12:54:28 +0000
ROA not before: Tue 16 Apr 2024 12:49:28 +0000
ROA not after: Tue 15 Apr 2025 12:54:28 +0000
asID: 272717
IP address blocks: 167.250.124.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7f:f1:7d:3a:2e:96:a4:9a:16:c1:6b:da:f9:3f:07:47:dc:6c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41692467D51C0CDCAE5CFACADB17B6B148A848D7
Validity
Not Before: Apr 16 12:49:28 2024 GMT
Not After : Apr 15 12:54:28 2025 GMT
Subject: CN=8AF02ACB572A6528D0A0647C6C318EB40BC0F3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:0b:5e:54:85:96:d2:a6:a5:ba:df:1d:62:
6d:5c:e4:d6:73:cf:66:9c:46:c0:be:c9:72:44:dd:
51:57:bf:93:3a:22:56:07:ad:67:69:68:f3:10:5a:
30:03:91:57:4f:72:d7:4c:61:c7:5e:62:1d:5e:ef:
55:87:56:2f:86:c1:b8:f3:77:8c:09:39:1d:4c:d1:
65:72:c5:0b:03:23:4a:09:62:92:b2:eb:60:30:64:
3c:c0:aa:81:ad:78:62:f9:66:1d:2d:81:0d:79:fb:
a2:09:4c:5f:2d:56:cd:6a:e8:01:35:23:d3:67:32:
05:da:cc:1a:4f:a6:b2:32:42:9b:f5:20:2c:85:6b:
e3:27:ef:2f:39:fb:aa:43:45:bc:b2:5f:12:dc:4b:
9b:31:43:4b:6e:a5:f8:49:6b:6d:cc:48:20:09:83:
3a:c6:11:a5:9f:ad:41:55:5f:e0:38:03:71:2e:bf:
95:ea:1d:1c:8e:23:a4:12:fb:ff:8b:4e:b9:32:15:
07:23:0d:b4:e1:0f:69:92:52:f6:cc:4c:77:12:c4:
50:21:5f:4d:f8:db:42:d4:a4:2d:58:04:76:05:0a:
0d:2e:30:59:71:41:35:9c:18:f5:a9:66:1d:bb:b4:
d3:dc:11:73:18:93:12:1a:56:e1:d2:3a:b4:6b:45:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F0:2A:CB:57:2A:65:28:D0:A0:64:7C:6C:31:8E:B4:0B:C0:F3:CF
X509v3 Authority Key Identifier:
keyid:41:69:24:67:D5:1C:0C:DC:AE:5C:FA:CA:DB:17:B6:B1:48:A8:48:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/41692467D51C0CDCAE5CFACADB17B6B148A848D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41692467D51C0CDCAE5CFACADB17B6B148A848D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/0/3136372e3235302e3132342e302f32332d3233203d3e20323732373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.124.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:b6:08:30:e8:04:b1:1c:9d:50:b5:79:04:81:28:bf:ba:89:
24:a2:a5:65:e3:2e:22:f4:4a:1e:bf:3e:fe:4b:38:4c:bc:0d:
16:0f:90:35:9b:e5:ab:c8:f1:47:e9:76:50:7a:dd:2b:4d:b0:
ad:b0:4d:93:a9:69:79:f1:c3:d5:a1:1a:45:aa:bf:86:3c:42:
d6:5a:99:1d:39:71:f8:0f:e1:0b:98:26:e5:fa:f6:ff:bb:11:
81:4d:1e:9e:82:f6:49:ec:37:d6:77:74:09:74:ab:65:0d:70:
e7:98:2c:b8:f3:0b:5a:64:16:a2:98:da:80:a2:3a:cb:d5:92:
5d:bb:fb:1a:bc:72:21:5a:a4:1a:5c:21:57:dc:0b:79:e5:7a:
ef:8d:f9:e2:7c:02:93:be:04:d7:fa:8c:6d:99:85:d3:05:cf:
f3:0a:1f:65:09:1d:59:ae:12:c2:fd:00:2f:c8:ef:e8:f0:84:
18:5c:a0:9f:19:67:57:c7:54:05:e6:5e:3d:4c:d7:e5:b1:ba:
55:97:3e:a0:77:d8:0f:30:1b:f0:9b:eb:14:a8:b7:28:2d:6e:
6d:46:49:d6:33:7d:be:ba:00:99:88:2e:40:fd:58:88:80:72:
88:5e:4a:97:46:9f:d7:3e:dd:65:2b:42:bc:ac:70:71:08:04:
73:b9:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:20 2025 by rpki-client