Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa
File: 3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier: I/agZhjWdQWBZNLMiAL7BCUOFgulv5N6GbrTIjBV2BI=
Subject key identifier: DB:A6:6A:39:96:FA:77:0E:6B:17:6B:A2:52:5B:EB:77:01:AF:23:E8
Certificate issuer: /CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Certificate serial: 551DA9D9F00BA24A40C0B06AFCBE3F95700C5BC6
Authority key identifier: C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa
Signing time: Mon 07 Apr 2025 20:01:47 +0000
ROA not before: Mon 07 Apr 2025 19:56:47 +0000
ROA not after: Mon 06 Apr 2026 20:01:47 +0000
asID: 270793
IP address blocks: 201.159.161.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:1d:a9:d9:f0:0b:a2:4a:40:c0:b0:6a:fc:be:3f:95:70:0c:5b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Validity
Not Before: Apr 7 19:56:47 2025 GMT
Not After : Apr 6 20:01:47 2026 GMT
Subject: CN=DBA66A3996FA770E6B176BA2525BEB7701AF23E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:a2:ee:b1:9d:38:a7:b5:f9:77:6a:5c:0f:
b0:f4:4e:1e:12:b2:a0:1a:4d:dd:6f:13:43:11:07:
f3:6a:4c:57:50:68:20:59:56:64:90:3d:f7:e9:07:
b8:0b:f3:9c:0c:bf:c6:8e:b1:c5:15:af:e4:46:bc:
b7:8b:f1:82:1d:20:08:3f:5d:45:bd:9c:24:62:c5:
4f:7d:ab:b0:6e:f0:3a:b9:b5:16:b2:30:ca:2b:c3:
a5:ea:e3:95:b9:26:0b:bd:b1:be:fe:16:50:42:93:
8e:89:75:c7:3c:d8:78:44:da:aa:16:33:15:e2:36:
20:08:eb:69:c7:1d:7a:b4:00:27:32:c2:de:b7:14:
d1:c1:b0:a4:f9:ab:15:82:70:bf:b9:ed:6c:24:dc:
5f:4a:35:51:24:bc:ba:7d:51:7f:27:6f:77:26:08:
c8:ee:c4:16:b5:ff:e7:42:3d:a3:08:48:27:b3:33:
63:36:26:8d:db:e2:bd:36:04:5e:dc:f4:ac:72:be:
8c:05:d0:6b:e2:29:fa:53:4d:4a:67:e6:67:5c:e5:
cf:1e:a6:ce:f5:55:ff:32:e8:5f:c1:72:d2:fa:a0:
1a:33:5a:90:0a:28:66:56:b7:a5:70:4c:29:8c:cb:
05:39:c7:10:14:d8:21:ee:9b:c3:42:32:4a:e9:8e:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A6:6A:39:96:FA:77:0E:6B:17:6B:A2:52:5B:EB:77:01:AF:23:E8
X509v3 Authority Key Identifier:
keyid:C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.161.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:a5:bf:9e:5d:36:bf:01:86:c7:2f:fb:e3:3b:f9:81:61:64:
4e:e6:36:d5:e8:f1:3b:cb:35:fe:61:27:95:15:14:cd:be:a9:
f5:6a:ee:d1:c7:c8:3f:e3:e9:70:a5:6e:25:27:28:05:a1:09:
b8:d3:17:5a:9a:31:59:32:f5:52:19:28:4e:78:c5:f5:be:c0:
c8:24:0f:74:4e:86:98:45:42:fc:1a:41:d6:28:81:38:6f:56:
b1:38:e1:12:3d:34:9c:0d:1e:46:d3:c2:e9:30:fc:6a:06:a7:
8e:4a:8f:27:1e:15:67:93:bd:f1:a0:79:fa:63:ec:6c:3a:08:
18:4e:f2:9b:99:ff:cb:91:bd:f5:13:26:17:63:84:31:a9:5f:
df:c0:47:38:34:e5:b5:b2:1c:db:69:7f:7d:59:16:a7:2f:68:
00:84:ba:1a:6b:57:db:e2:5f:3b:fd:73:64:7d:94:c2:85:31:
3e:71:ae:5d:a0:b1:10:69:a1:27:b2:05:d4:14:ac:8e:82:a3:
f5:31:3c:11:94:5f:eb:44:bf:90:8b:17:eb:8b:15:00:04:83:
dd:bf:20:7c:28:65:a2:14:58:5f:30:64:1b:ba:49:01:33:15:
d1:66:cf:5e:e0:ce:dd:b0:7a:cc:d8:07:95:51:d9:ae:84:b8:
03:37:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:10 2025 by rpki-client