Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3233203d3e20323636313633.roa
File: 3138362e322e3234382e302f32332d3233203d3e20323636313633.roa (raw, json)
Hash identifier: QpHeZw0wMJNXdmeyBB6R3bydW4rkQJ36r+PVX69Wfzo=
Subject key identifier: 04:D6:82:DF:90:8B:7F:4C:10:F4:3B:66:08:8E:D6:2D:55:9F:30:60
Certificate issuer: /CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Certificate serial: 2713CF7224A7487B240740E6399D37BCC0820E6C
Authority key identifier: 2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3233203d3e20323636313633.roa
Signing time: Fri 20 Dec 2024 21:17:07 +0000
ROA not before: Fri 20 Dec 2024 21:12:07 +0000
ROA not after: Fri 19 Dec 2025 21:17:07 +0000
asID: 266163
IP address blocks: 186.2.248.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:13:cf:72:24:a7:48:7b:24:07:40:e6:39:9d:37:bc:c0:82:0e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Validity
Not Before: Dec 20 21:12:07 2024 GMT
Not After : Dec 19 21:17:07 2025 GMT
Subject: CN=04D682DF908B7F4C10F43B66088ED62D559F3060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:ff:c7:fc:61:70:68:6a:1d:3b:51:f6:16:
9f:59:ad:81:a6:b8:e7:08:81:68:db:e6:be:09:28:
6b:27:67:53:01:f2:e1:e6:eb:c2:ef:bb:82:e2:b7:
6e:89:47:b6:b5:b4:3e:67:36:27:1f:ce:b9:32:7b:
1b:b6:84:5c:ab:b1:c2:21:e4:ca:cf:28:c0:12:f7:
bd:cf:03:d1:a2:a8:32:f3:00:b5:ed:fa:9d:e1:21:
34:d6:14:af:d7:78:c0:b6:46:e0:ad:e7:07:28:97:
39:07:db:a9:3b:2e:08:7c:2e:e1:73:a7:39:d1:58:
e0:a9:ee:97:26:8d:74:86:6e:0c:d8:d2:aa:ed:1d:
6b:35:2d:cd:2e:05:b0:a5:36:45:ff:d1:fc:25:5e:
4c:3c:f4:4f:a9:b0:c4:a9:1e:1f:12:d1:ca:cb:9c:
1f:2e:fb:2e:b8:96:b9:7f:6c:de:14:0b:89:95:ad:
79:6d:01:ad:75:7c:0e:9e:f1:aa:0a:c1:6f:b0:ae:
da:c8:1a:c5:1c:d1:46:0e:f6:bb:6f:21:7d:01:6a:
26:b7:10:5b:da:12:08:4c:81:35:59:ad:3a:ca:2d:
4e:dd:87:a6:9f:07:30:14:28:3a:b4:1d:4b:74:a1:
3e:9f:26:1e:8e:70:70:d3:bf:c0:9b:cf:8d:d3:78:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:82:DF:90:8B:7F:4C:10:F4:3B:66:08:8E:D6:2D:55:9F:30:60
X509v3 Authority Key Identifier:
keyid:2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3233203d3e20323636313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.2.248.0/23
Signature Algorithm: sha256WithRSAEncryption
13:ae:ea:a3:57:9c:07:7f:98:f2:03:f8:24:50:3c:27:56:da:
ad:23:3e:00:46:d4:7e:46:3a:b6:84:69:b2:70:82:90:9f:d8:
2f:31:fa:f9:8a:24:0e:b5:a2:6e:07:39:27:64:d7:4b:d6:6c:
5c:b9:b1:ec:27:c9:a4:a5:a2:22:24:5f:79:42:6d:9c:d4:9c:
2c:d5:70:58:f2:d4:45:f9:c9:c6:7f:06:88:f5:9a:de:5e:48:
d3:e8:cc:a3:77:cb:35:ee:e9:5c:b6:92:d5:d6:97:d1:ea:24:
52:94:d1:dc:2f:db:fb:45:64:29:1a:a7:72:ef:64:c9:77:8b:
d2:bf:70:a2:eb:f7:0c:7b:64:61:74:8b:5a:0b:ad:47:8e:42:
f0:41:dd:f3:ca:5e:2d:35:bc:64:83:40:f3:b4:48:58:2f:86:
7a:80:63:0a:b6:c1:ce:fd:9c:ff:c6:84:cb:ae:c0:6a:d9:6f:
be:70:ec:ce:a8:2b:aa:a9:76:cc:32:c5:5d:f5:8a:75:b5:21:
bc:c3:58:6a:77:67:67:16:e9:a3:f2:ba:17:fc:d2:7a:61:81:
c8:03:d9:28:f1:37:28:68:68:98:f6:ca:7c:b2:cb:84:73:7e:
57:c9:86:14:d5:fb:f3:1f:61:81:be:48:58:91:b2:4a:8c:db:
76:9e:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:38:09 2025 by rpki-client