Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3136382e302f32322d3232203d3e20323635393135.roa
File: 3133312e3139362e3136382e302f32322d3232203d3e20323635393135.roa (raw, json)
Hash identifier: pRk1JSPEPMQEQ4A1IQGTwyLDKkxgOHfG75Pg/gJJTzI=
Subject key identifier: 9F:8E:C6:E2:ED:32:CC:07:FC:07:BB:59:C5:BE:FE:E9:27:2D:B5:36
Certificate issuer: /CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
Certificate serial: 7FB1256BFAB4E88BC5F48788215531A7317C2D2C
Authority key identifier: 3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3136382e302f32322d3232203d3e20323635393135.roa
Signing time: Thu 18 Jul 2024 21:22:38 +0000
ROA not before: Thu 18 Jul 2024 21:17:38 +0000
ROA not after: Thu 17 Jul 2025 21:22:38 +0000
asID: 265915
IP address blocks: 131.196.168.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b1:25:6b:fa:b4:e8:8b:c5:f4:87:88:21:55:31:a7:31:7c:2d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
Validity
Not Before: Jul 18 21:17:38 2024 GMT
Not After : Jul 17 21:22:38 2025 GMT
Subject: CN=9F8EC6E2ED32CC07FC07BB59C5BEFEE9272DB536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:d3:72:2c:28:cd:88:59:35:4c:8b:6e:e6:
e6:54:f3:ee:1c:c6:f9:79:e6:80:2c:f8:69:93:f7:
c7:5c:c7:5b:e2:8e:68:4d:33:4d:af:84:3d:c2:88:
98:19:2e:e8:d4:76:b3:54:a6:c9:88:91:2c:10:bb:
a9:b5:00:c1:f5:88:8d:68:44:97:e4:12:7e:53:20:
c9:26:70:0b:ed:8b:6b:35:74:9d:1e:ef:7a:7e:e8:
71:7f:82:cf:ed:37:39:27:51:b1:89:f3:94:1f:f5:
15:43:72:24:29:72:8d:1d:cf:8b:cb:98:e1:b7:39:
c3:b1:c2:4c:b0:5e:d1:4e:13:ba:db:35:7b:88:94:
a8:44:39:a7:d1:d8:96:03:9e:d1:9d:6b:4d:f2:bd:
2c:00:2a:76:fa:0e:0e:be:0d:f8:d8:a5:27:b2:0d:
90:30:ce:99:7f:c7:51:23:fe:49:1f:ac:47:38:fe:
6a:26:e8:03:50:ff:5b:af:84:fc:a2:71:c1:04:d5:
2d:b0:6d:db:33:01:5c:29:45:e3:51:dd:fd:24:0e:
cf:78:21:72:cf:fa:e2:e5:50:cc:47:8d:b6:05:14:
1f:6c:29:26:4a:e1:17:90:35:38:c3:db:6f:3d:04:
78:f1:9a:d5:a6:fe:9e:aa:a3:5d:3d:dd:81:46:27:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:C6:E2:ED:32:CC:07:FC:07:BB:59:C5:BE:FE:E9:27:2D:B5:36
X509v3 Authority Key Identifier:
keyid:3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3136382e302f32322d3232203d3e20323635393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.168.0/22
Signature Algorithm: sha256WithRSAEncryption
30:35:4d:e4:a6:85:bf:44:e4:af:ac:9d:88:40:83:59:9f:f1:
88:ef:9a:3e:5a:7e:e7:98:31:67:36:29:38:08:c6:77:83:88:
5f:7b:14:74:f5:09:39:28:a2:71:11:73:cf:cb:52:75:2c:02:
fc:17:ba:ea:d3:6a:9d:49:e5:29:ca:1d:26:4e:bd:f7:07:db:
6b:fb:b0:f4:48:98:b4:06:ff:c1:e9:5e:a1:84:21:3f:e1:7a:
a0:25:74:70:c7:e2:ef:8a:e5:10:66:99:10:8b:63:9c:6c:a6:
e7:d3:82:e8:10:13:12:3e:cf:fe:98:32:5d:6b:c8:5e:2a:cf:
da:3d:60:33:44:92:a6:4e:77:66:e3:a1:38:74:c0:65:4f:ba:
34:97:c5:ab:15:4e:62:e1:45:6e:c5:b1:93:a1:96:ee:b1:22:
2c:4c:f6:45:e0:b5:4a:3f:a6:5c:c7:81:8b:a9:89:41:a9:6f:
36:68:cc:d1:1e:cd:ad:39:60:fe:85:aa:c4:b4:ce:26:1e:39:
0c:35:f6:4e:ff:7d:dc:b9:30:64:fe:5c:e2:85:ca:15:a8:b7:
aa:2b:30:fc:41:96:17:0c:c1:24:88:8a:1f:99:64:2e:a3:0f:
8e:cc:e7:11:81:cc:1d:29:65:c3:d6:92:8b:00:d6:c7:ec:e9:
71:2b:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:09 2025 by rpki-client