Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa
File: 3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier: RIkxccfVdz53rAwS+uXD5NI/Ft8JF81AZl5zHHAle6c=
Subject key identifier: 69:31:7B:C3:FE:C5:D8:21:1E:95:0E:96:49:A0:8F:79:63:BC:31:45
Certificate issuer: /CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Certificate serial: 213D3615E17CBA9BF3CF6F85689C50A92091D2C9
Authority key identifier: C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa
Signing time: Mon 07 Apr 2025 20:01:46 +0000
ROA not before: Mon 07 Apr 2025 19:56:46 +0000
ROA not after: Mon 06 Apr 2026 20:01:46 +0000
asID: 270793
IP address blocks: 201.159.163.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:3d:36:15:e1:7c:ba:9b:f3:cf:6f:85:68:9c:50:a9:20:91:d2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Validity
Not Before: Apr 7 19:56:46 2025 GMT
Not After : Apr 6 20:01:46 2026 GMT
Subject: CN=69317BC3FEC5D8211E950E9649A08F7963BC3145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:38:92:60:b8:89:92:57:f4:5f:33:30:33:
c9:5e:bf:5a:60:bc:ce:93:00:c3:5a:f1:2a:51:0a:
a2:87:08:c7:62:69:37:e8:9f:83:c3:4e:c8:07:09:
be:b5:7d:f6:ce:ea:14:fe:9b:93:38:d2:62:19:b6:
11:2f:eb:10:ea:98:63:05:ae:3e:32:c8:24:9e:a3:
29:1b:02:b2:97:25:7f:95:73:03:4f:ef:e3:72:ba:
af:6d:ef:f3:a5:2b:50:7f:54:b3:20:60:05:88:80:
8e:64:1c:95:d3:65:2f:b6:7c:d2:0a:ee:35:22:4f:
7b:31:f0:ba:09:15:b7:69:0d:9b:fa:00:72:7e:1a:
13:26:cd:49:57:a6:4c:e2:38:f9:bc:a5:1d:aa:75:
37:8f:b1:50:89:d6:60:cd:87:4a:95:e3:b4:aa:c5:
15:4f:21:c0:fa:6a:cb:4e:bc:e0:30:49:aa:ff:19:
1d:c6:55:aa:c6:78:dd:79:d7:14:89:24:fe:c6:90:
c9:1d:75:07:82:ff:10:ab:43:70:80:61:76:da:4b:
2d:d4:09:19:37:15:f7:d3:87:9e:25:cd:8a:73:b2:
a1:53:0c:44:be:3f:c3:e3:8d:4a:72:16:99:22:44:
d8:15:3d:a8:e8:4d:03:74:49:e9:5c:eb:85:d0:c6:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:31:7B:C3:FE:C5:D8:21:1E:95:0E:96:49:A0:8F:79:63:BC:31:45
X509v3 Authority Key Identifier:
keyid:C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136332e302f32342d3234203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.163.0/24
Signature Algorithm: sha256WithRSAEncryption
97:aa:40:14:06:54:54:73:18:63:f9:8d:0b:38:4b:41:51:1b:
df:0d:91:4c:19:97:3a:ba:aa:c9:4b:8d:f4:1e:d5:10:bb:e1:
45:10:07:39:a0:46:f7:55:ce:ce:c4:28:cf:ee:aa:df:c6:e3:
72:6a:73:ba:2f:97:19:c2:06:05:36:aa:98:f2:bf:7e:40:32:
77:86:c2:b0:6e:7d:13:fe:dc:a2:5e:28:dd:2c:da:09:8a:2b:
bf:bb:7d:0c:a6:c3:43:c8:4a:65:7f:56:d2:04:55:ab:c3:73:
a9:13:48:3b:56:cf:75:cd:56:37:52:f5:07:90:ec:66:f6:10:
a5:e8:19:58:78:eb:ac:71:59:77:57:64:b9:c2:65:67:db:fc:
9a:11:24:56:81:49:2f:cb:a8:39:c3:fb:22:bc:e9:68:6b:1a:
6b:08:b8:58:d4:50:c3:40:65:d0:4f:63:2e:cc:cb:0f:f3:54:
ac:7f:b0:99:55:55:86:4f:ff:22:70:74:7d:36:ed:2e:fd:e5:
af:73:98:8a:28:19:0a:0c:55:88:96:1f:e8:09:56:85:34:f2:
ce:63:ed:f9:70:77:9e:39:64:1d:bb:ab:47:70:ae:27:9a:40:
24:11:ce:85:04:46:f0:3b:cd:0b:a5:cf:eb:64:e9:f6:e9:db:
44:88:61:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:35:47 2025 by rpki-client