Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
File: 3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier: YoWWAF8zPgRfE450en9SsMwoQZRmdsll7DdecqyEuXE=
Subject key identifier: 04:F6:35:C6:CE:09:7A:59:C6:40:F2:59:28:38:95:AC:41:FF:00:89
Certificate issuer: /CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Certificate serial: 402EBFFE6A0E615CE6A6C932AE218F5697FDA4F1
Authority key identifier: C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
Signing time: Mon 07 Apr 2025 20:01:47 +0000
ROA not before: Mon 07 Apr 2025 19:56:47 +0000
ROA not after: Mon 06 Apr 2026 20:01:47 +0000
asID: 270793
IP address blocks: 201.159.160.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:2e:bf:fe:6a:0e:61:5c:e6:a6:c9:32:ae:21:8f:56:97:fd:a4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Validity
Not Before: Apr 7 19:56:47 2025 GMT
Not After : Apr 6 20:01:47 2026 GMT
Subject: CN=04F635C6CE097A59C640F259283895AC41FF0089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:90:43:76:41:45:cb:9d:ff:91:b6:d2:a8:
0d:12:f1:95:71:05:0e:f1:cf:18:08:d4:0d:f8:cf:
95:b1:6c:6a:92:8c:e5:94:45:01:b0:8b:7a:c3:41:
ed:25:db:5a:6c:c5:82:54:5b:4f:eb:5e:18:30:76:
e0:fa:e8:fe:64:d8:5d:78:e6:5e:c9:db:3d:c7:d1:
2e:d5:91:d0:2a:a0:74:7c:63:26:0d:e8:dd:0d:0a:
70:67:8f:7c:a2:d5:65:54:85:ce:70:32:6c:ab:ca:
d3:83:04:9d:7a:ce:31:58:57:9e:1b:15:c3:f0:81:
4a:6f:e6:2d:ba:3a:b3:4c:31:9e:8f:ac:e9:d2:c5:
e5:11:f6:16:36:51:ff:09:42:c0:25:6b:0f:91:0e:
58:18:b5:1e:75:65:03:b2:e1:a2:90:54:33:3f:48:
6a:a0:75:c0:03:f9:b8:9b:32:f2:c5:13:74:b7:89:
26:f7:ee:d6:4b:8b:25:9a:62:71:88:04:4e:79:91:
ee:b3:b9:fe:d7:24:06:52:2e:a6:67:70:d1:7e:c6:
96:f0:66:de:58:91:da:69:49:c2:85:1c:45:c0:d0:
a2:b9:12:8c:cb:e6:77:9e:04:77:bb:32:8d:5c:55:
f2:f0:a4:5f:d0:18:59:7f:49:c4:71:c4:22:c2:45:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F6:35:C6:CE:09:7A:59:C6:40:F2:59:28:38:95:AC:41:FF:00:89
X509v3 Authority Key Identifier:
keyid:C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:07:bd:f0:f3:03:be:ba:f2:a0:d2:2f:3b:5b:be:7f:d3:b5:
13:1f:86:a1:8b:b0:ad:22:64:eb:39:a0:ce:3d:f6:35:dd:77:
cc:9b:9a:99:9c:74:3f:84:8d:f2:db:0a:a4:96:19:34:91:e5:
6f:cc:81:cb:cd:a9:15:b3:b0:75:bf:03:d4:aa:6b:55:b7:6d:
69:ce:06:5a:a9:70:b6:6c:bb:91:6f:ee:1b:d2:53:1a:4a:de:
33:e6:48:38:72:8d:f7:2d:ea:b2:3f:5c:01:a0:40:19:5e:51:
1e:df:22:15:79:b9:40:5b:30:01:f4:ab:b0:3d:85:b4:96:2b:
7a:41:76:e3:c6:0c:33:d7:62:f4:3a:67:4d:b5:f4:96:db:d4:
f5:79:1a:88:68:de:82:ce:85:d7:3c:e7:fb:5e:3e:9a:cd:45:
3e:2c:00:bc:35:e2:6d:6f:3f:29:fc:89:37:d6:38:a2:f4:9d:
30:b0:26:c9:d0:ba:7c:ca:d1:25:6a:7e:76:d7:e9:20:c0:e6:
76:ea:89:65:d9:21:bd:2d:cc:95:7e:d4:98:40:af:df:0b:2c:
1a:2f:f5:e1:18:4f:4f:7e:44:17:f5:fc:e5:8c:73:58:2d:05:
e0:90:09:38:e6:0e:3c:1d:bb:7b:25:78:db:f2:d3:e0:22:d2:
0c:a3:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:40:07 2025 by rpki-client