Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa
File: 3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa (raw, json)
Hash identifier: he8tualBrC8222MqfZ3MthGOLmh/4ysw2O/NOKZnIDg=
Subject key identifier: F1:1A:89:C4:37:42:1B:0C:3F:5E:43:74:9A:D6:8B:96:F5:B7:57:8B
Certificate issuer: /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Certificate serial: 4BD19B874D8E7E60855702207F99A27C29482CE0
Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa
Signing time: Wed 15 Jan 2025 20:05:56 +0000
ROA not before: Wed 15 Jan 2025 20:00:56 +0000
ROA not after: Wed 14 Jan 2026 20:05:56 +0000
asID: 264948
IP address blocks: 168.232.198.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d1:9b:87:4d:8e:7e:60:85:57:02:20:7f:99:a2:7c:29:48:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Validity
Not Before: Jan 15 20:00:56 2025 GMT
Not After : Jan 14 20:05:56 2026 GMT
Subject: CN=F11A89C437421B0C3F5E43749AD68B96F5B7578B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:59:8f:60:6d:3d:83:a4:be:ed:dd:11:4d:
c8:23:d0:ee:31:47:e1:45:51:da:ff:ae:a9:77:f3:
ce:74:aa:cd:ae:09:55:0c:ee:bb:5c:04:12:4a:35:
f4:b3:ba:7a:73:36:96:cf:04:2e:47:13:40:e9:26:
59:10:bc:c2:f0:4b:f8:25:2f:ef:60:f1:2a:78:3e:
ef:63:87:23:7b:51:b7:4c:44:66:ce:a7:5f:a2:8a:
ed:a2:0c:82:80:9a:d7:2d:43:5e:bf:b2:13:ae:45:
6a:32:bb:43:de:11:c4:d3:16:3f:96:38:7c:ca:59:
05:90:55:1f:24:6f:ad:24:92:e3:42:72:35:04:d4:
3d:d2:30:d0:1d:94:a9:54:3a:19:dd:81:d7:bf:97:
97:fd:3c:df:0e:3f:95:fe:00:fc:27:31:fe:b5:54:
ab:49:8a:65:57:9b:2b:0c:35:a5:55:42:91:4f:d7:
87:13:86:28:52:06:54:97:a1:18:2d:a4:48:60:bb:
37:e3:f6:d2:68:6c:e4:af:be:c8:3f:8a:40:b9:30:
ba:21:64:ca:f3:3e:89:61:0e:03:7d:7b:c6:a5:ac:
e8:5a:7a:7e:e4:e9:8c:ca:1e:ab:70:82:60:7d:d2:
82:7b:35:0e:0f:e6:67:57:52:50:5c:ed:f6:65:d3:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1A:89:C4:37:42:1B:0C:3F:5E:43:74:9A:D6:8B:96:F5:B7:57:8B
X509v3 Authority Key Identifier:
keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.198.0/23
Signature Algorithm: sha256WithRSAEncryption
78:88:64:da:8c:f9:81:63:4a:3d:de:65:5c:c4:58:5f:cf:5f:
eb:04:2f:ed:10:a4:89:8c:ea:bd:2b:c3:19:63:31:35:63:af:
de:47:fa:ac:6c:43:50:a9:f9:6f:7b:fd:10:e7:3b:7a:58:53:
a8:eb:ea:05:87:bc:3e:cd:bd:7a:f6:ed:c9:d7:c5:2c:6e:96:
b1:bb:f5:c0:ce:a9:ba:da:91:82:f2:92:07:59:5b:9e:82:d5:
3a:d7:f3:52:a1:e2:49:8d:a2:e1:18:80:a2:16:4a:e1:b3:a6:
b2:d3:d2:63:ab:77:9f:74:6c:e4:21:76:91:c0:0d:b7:b9:48:
b7:a7:69:b4:8f:1a:0a:1e:3d:21:88:90:3e:ee:79:8e:43:cf:
06:10:f9:99:45:92:b4:5c:64:e9:74:a5:66:1d:a9:36:0f:a3:
fc:39:42:8e:74:ef:d7:74:b2:51:61:93:f8:4a:6a:e9:d2:95:
cb:f6:c9:72:49:a0:0a:29:e6:d0:01:4f:b7:1a:51:51:5b:77:
0d:3f:10:7c:ba:f7:4e:57:30:51:4c:fa:63:5b:7b:92:d5:ad:
3b:bf:d1:e5:34:85:1d:c5:95:b6:bd:3e:53:34:48:fe:5a:11:
3f:3d:a3:56:4e:a7:c6:60:26:c3:11:d4:30:4a:b7:9e:c1:fd:
62:c8:9f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:31 2025 by rpki-client