Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa
File: 3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa (raw, json)
Hash identifier: 62KXqFT6fnrMKi2yf7oi02aompjItZrUaIv7ogD5Xys=
Subject key identifier: 45:C2:11:66:C6:A2:3F:87:3B:94:0E:12:E2:9C:1B:34:A4:AC:98:EE
Certificate issuer: /CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Certificate serial: 42A0BB76908CB1E6CA0C64293D38EF740384B514
Authority key identifier: C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa
Signing time: Mon 07 Apr 2025 20:01:46 +0000
ROA not before: Mon 07 Apr 2025 19:56:46 +0000
ROA not after: Mon 06 Apr 2026 20:01:46 +0000
asID: 270793
IP address blocks: 201.159.162.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a0:bb:76:90:8c:b1:e6:ca:0c:64:29:3d:38:ef:74:03:84:b5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Validity
Not Before: Apr 7 19:56:46 2025 GMT
Not After : Apr 6 20:01:46 2026 GMT
Subject: CN=45C21166C6A23F873B940E12E29C1B34A4AC98EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f8:4c:73:fb:70:96:0e:6e:24:b7:f8:ff:6a:
34:eb:56:b5:45:73:54:0b:b5:11:17:9d:89:94:ec:
dd:57:62:63:bd:95:1e:de:3d:be:7a:ea:b1:0a:3a:
72:1e:4b:f8:96:1a:24:bb:13:43:cf:f4:bb:f8:ff:
67:6e:fd:ff:0d:50:4c:d1:54:d5:8b:b8:3f:53:6b:
d8:4e:c2:3a:5d:30:66:9d:de:44:e8:0a:a3:32:58:
2c:6d:8d:b8:b3:81:2d:d4:8a:d3:09:ec:8d:36:56:
a3:64:ec:d9:44:5e:e5:3b:13:31:fe:36:be:65:a0:
c9:34:b0:5c:07:93:fc:fd:7b:cf:d0:1b:c8:6d:d9:
b6:1d:83:f4:ce:be:ab:80:c2:52:31:72:fe:59:70:
ec:50:4a:24:d1:46:ba:f7:d7:9d:ba:75:c3:bf:6e:
73:9b:78:25:1b:89:65:77:c7:f2:48:57:64:8b:bf:
15:24:51:59:e9:fa:d3:68:9d:a0:82:6e:e6:2a:44:
87:53:1a:73:f3:38:76:3b:71:a3:2b:3f:d5:42:7a:
26:89:91:09:ae:ad:18:1c:18:05:9c:f0:0a:cd:43:
80:82:7c:5a:d1:26:f8:52:ea:43:0e:6f:19:3a:28:
27:5b:ea:18:bc:91:56:11:cd:ed:4d:0c:58:1d:78:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C2:11:66:C6:A2:3F:87:3B:94:0E:12:E2:9C:1B:34:A4:AC:98:EE
X509v3 Authority Key Identifier:
keyid:C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.162.0/23
Signature Algorithm: sha256WithRSAEncryption
17:47:cb:eb:cf:20:27:b0:f0:0b:2f:e9:04:c9:44:13:a1:af:
b5:34:89:79:af:77:db:69:a5:4e:14:0b:0a:db:72:b5:c7:dc:
2e:8f:cc:b3:45:d1:ef:50:79:a7:37:79:3a:4f:44:c2:4d:de:
69:67:c2:05:0b:0c:c4:e3:8c:52:a3:77:9d:ea:9f:3b:e2:c6:
fc:e9:67:57:19:f2:04:bd:d0:25:bc:df:72:bf:1e:88:9f:0a:
ee:0a:ee:03:01:89:18:19:0f:61:f2:21:b6:a6:2a:1a:a3:c0:
ae:89:27:6e:2f:ed:0b:49:b9:a0:4c:d3:a8:c7:f2:5f:8c:f7:
c8:09:1d:a7:47:75:2f:34:2b:c3:a5:6d:a7:45:0e:17:df:0b:
a3:fd:60:3a:c9:4f:62:5b:04:ee:72:41:3e:33:b3:5d:70:d2:
4e:da:bf:9f:37:7e:ee:44:82:cc:b7:84:c6:01:bd:4e:7a:9c:
9c:13:9c:54:a9:8a:60:35:21:f9:58:58:ef:97:f9:21:b9:30:
6a:fd:34:cf:80:58:71:ba:be:12:91:8b:c1:c8:cd:dd:29:76:
88:20:2e:64:1e:df:f1:31:22:b5:f9:79:17:80:b1:7c:fa:ce:
a8:93:b2:19:2c:f5:e9:e3:20:b0:df:89:f1:13:8d:9f:7c:d5:
94:ca:2f:c6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQqC7dpCMsebKDGQpPTjvdAOEtRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhBOTIyRkVGRjI0NDFCMUY5MjEyRkZBODEyMjMxMjNB
MzJEQkU3OTAeFw0yNTA0MDcxOTU2NDZaFw0yNjA0MDYyMDAxNDZaMDMxMTAvBgNV
BAMTKDQ1QzIxMTY2QzZBMjNGODczQjk0MEUxMkUyOUMxQjM0QTRBQzk4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz+Exz+3CWDm4kt/j/ajTrVrVF
c1QLtREXnYmU7N1XYmO9lR7ePb566rEKOnIeS/iWGiS7E0PP9Lv4/2du/f8NUEzR
VNWLuD9Ta9hOwjpdMGad3kToCqMyWCxtjbizgS3UitMJ7I02VqNk7NlEXuU7EzH+
Nr5loMk0sFwHk/z9e8/QG8ht2bYdg/TOvquAwlIxcv5ZcOxQSiTRRrr31526dcO/
bnObeCUbiWV3x/JIV2SLvxUkUVnp+tNonaCCbuYqRIdTGnPzOHY7caMrP9VCeiaJ
kQmurRgcGAWc8ArNQ4CCfFrRJvhS6kMObxk6KCdb6hi8kVYRze1NDFgdeDb/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURcIRZsaiP4c7lA4S4pwbNKSsmO4wHwYDVR0j
BBgwFoAUyKki/v8kQbH5IS/6gSIxI6MtvnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1
bzMvMC9DOEE5MjJGRUZGMjQ0MUIxRjkyMTJGRkE4MTIyMzEyM0EzMkRCRTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QTkyMkZFRkYyNDQxQjFG
OTIxMkZGQTgxMjIzMTIzQTMyREJFNzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBdDNvYWJlaVB2VEFuNlNnVHdzUUtURHJrTDFiTWgzN3ZSUG9qWDhFdW8zLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzYzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcmfojANBgkqhkiG9w0BAQsFAAOCAQEAF0fL
688gJ7DwCy/pBMlEE6GvtTSJea9322mlThQLCttytcfcLo/Ms0XR71B5pzd5Ok9E
wk3eaWfCBQsMxOOMUqN3neqfO+LG/OlnVxnyBL3QJbzfcr8eiJ8K7gruAwGJGBkP
YfIhtqYqGqPAroknbi/tC0m5oEzTqMfyX4z3yAkdp0d1LzQrw6Vtp0UOF98Lo/1g
OslPYlsE7nJBPjOzXXDSTtq/nzd+7kSCzLeExgG9TnqcnBOcVKmKYDUh+VhY75f5
Ibkwav00z4BYcbq+EpGLwcjN3Sl2iCAuZB7f8TEitfl5F4CxfPrOqJOyGSz16eMg
sN+J8RONn3zVlMovxg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:48 2025 by rpki-client