Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32322d3232203d3e20323730373933.roa
File: 3230312e3135392e3136302e302f32322d3232203d3e20323730373933.roa (raw, json)
Hash identifier: vpcXt4T8ie6oCo48s/l7O4vjOOtlA0FduwB1czyctFc=
Subject key identifier: FF:C3:99:4A:18:DD:2B:18:EA:D3:C3:1F:A2:A7:EA:3C:D6:48:3C:AC
Certificate issuer: /CN=144DB8D5072DA69BE11C1887C1F907F9E34C2010
Certificate serial: 5B02D6D9C6C20B63C7B11A9E0A1FC073117AA0ED
Authority key identifier: 14:4D:B8:D5:07:2D:A6:9B:E1:1C:18:87:C1:F9:07:F9:E3:4C:20:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144DB8D5072DA69BE11C1887C1F907F9E34C2010.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32322d3232203d3e20323730373933.roa
Signing time: Mon 10 Feb 2025 20:19:11 +0000
ROA not before: Mon 10 Feb 2025 20:14:11 +0000
ROA not after: Mon 09 Feb 2026 20:19:11 +0000
asID: 270793
IP address blocks: 201.159.160.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:02:d6:d9:c6:c2:0b:63:c7:b1:1a:9e:0a:1f:c0:73:11:7a:a0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144DB8D5072DA69BE11C1887C1F907F9E34C2010
Validity
Not Before: Feb 10 20:14:11 2025 GMT
Not After : Feb 9 20:19:11 2026 GMT
Subject: CN=FFC3994A18DD2B18EAD3C31FA2A7EA3CD6483CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4b:c1:61:9f:dc:b0:41:d7:fe:c4:e6:04:07:
3f:ad:80:56:35:4e:3f:44:99:bd:6f:5c:e2:94:26:
d6:a4:07:03:c0:eb:98:58:2c:36:10:f5:08:58:8f:
3d:99:20:b6:b1:90:66:d2:73:b8:0b:72:9a:2a:d8:
68:75:aa:28:6a:22:1c:a2:3a:41:6b:43:91:a1:a2:
ab:ae:3b:f7:43:b9:ee:ce:dc:0e:5e:9a:f8:bc:0d:
6c:1b:db:84:77:af:70:74:79:a1:f8:c0:69:35:16:
f0:4a:b1:d1:02:7f:4f:96:3e:54:aa:98:f1:de:fa:
d1:53:95:89:25:1c:5a:aa:06:07:67:59:cd:18:02:
5a:8d:49:cc:75:24:68:0b:3d:66:54:35:b2:1c:02:
ac:ce:0c:26:35:e8:db:7b:84:9b:a7:c6:31:83:89:
af:18:d5:65:d4:74:80:d8:2d:c3:4b:29:0b:26:6e:
2b:f2:f9:fa:5e:34:ff:6c:92:bc:c6:a6:48:41:f0:
1c:08:80:5b:63:f2:e7:7e:38:f4:fe:47:96:af:62:
d3:1d:f3:68:cf:78:ce:f3:19:62:c7:d9:d2:8e:54:
83:93:0f:2d:e4:53:e9:13:11:8f:f2:9a:4a:8f:8e:
f7:9a:02:13:a1:8c:c1:b0:38:75:2a:0c:06:42:f6:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:99:4A:18:DD:2B:18:EA:D3:C3:1F:A2:A7:EA:3C:D6:48:3C:AC
X509v3 Authority Key Identifier:
keyid:14:4D:B8:D5:07:2D:A6:9B:E1:1C:18:87:C1:F9:07:F9:E3:4C:20:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/144DB8D5072DA69BE11C1887C1F907F9E34C2010.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/144DB8D5072DA69BE11C1887C1F907F9E34C2010.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32322d3232203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.160.0/22
Signature Algorithm: sha256WithRSAEncryption
35:d5:45:75:ac:4c:08:51:33:d3:c3:11:d2:3d:d6:e7:8a:03:
e9:45:b8:03:de:80:2d:d9:ce:c3:14:4b:70:6d:75:74:dc:f1:
db:4d:31:4a:74:ca:6e:b4:4f:a7:90:51:48:c9:7c:3b:d1:04:
80:7f:7c:74:6a:d4:c1:94:1b:68:aa:ae:20:b1:84:94:f0:e6:
b4:4e:da:4f:cd:4a:51:c9:d9:5e:b2:c8:81:14:a5:95:b6:e8:
fb:35:0c:50:61:37:94:50:36:66:19:74:db:76:0c:e3:16:07:
fc:36:cc:64:19:56:68:3f:e0:cd:19:10:99:77:4f:d4:87:9f:
b5:79:84:a9:8b:c1:73:2d:6f:94:fb:f5:43:bc:eb:5d:b6:e7:
a3:4b:d4:57:ea:86:e1:93:d9:4d:f2:b4:e4:70:d9:ac:90:ca:
ac:87:5a:48:77:c3:9f:ac:c9:ce:c7:16:08:ae:42:60:1f:5c:
8f:c4:aa:52:78:fc:a1:87:11:ed:dc:65:fd:c7:18:ee:76:35:
2a:92:34:af:24:4c:59:d1:2c:46:7d:1e:45:b5:c2:42:54:5c:
45:61:1b:47:47:da:c4:63:58:d3:e9:2a:ab:9c:fc:dd:fa:eb:
25:0d:7e:1b:1d:21:46:e7:ee:82:bc:be:28:68:d7:2e:c2:4d:
0d:df:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:09 2025 by rpki-client