Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135392e302f32342d3234203d3e203238353732.roa
File: 3230302e3139322e3135392e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier: I6vKRByu8QSrEHn1BEKTGHkpKpOX5X4qhEdg14YKreg=
Subject key identifier: 43:96:C7:04:0D:15:FD:C2:35:E0:A4:7A:D2:4F:ED:3D:27:45:FE:AE
Certificate issuer: /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial: 2613178E5263905B726DA8DF062120F7FF48533C
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135392e302f32342d3234203d3e203238353732.roa
Signing time: Mon 05 Aug 2024 17:22:33 +0000
ROA not before: Mon 05 Aug 2024 17:17:33 +0000
ROA not after: Mon 04 Aug 2025 17:22:33 +0000
asID: 28572
IP address blocks: 200.192.159.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:13:17:8e:52:63:90:5b:72:6d:a8:df:06:21:20:f7:ff:48:53:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Validity
Not Before: Aug 5 17:17:33 2024 GMT
Not After : Aug 4 17:22:33 2025 GMT
Subject: CN=4396C7040D15FDC235E0A47AD24FED3D2745FEAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:ad:44:25:c9:48:a8:d1:9d:a1:e5:3f:16:
6f:ae:a3:00:97:81:d8:47:66:46:3f:76:b4:9d:5d:
ef:5c:4d:7c:17:fb:60:0d:db:49:4a:70:f6:49:dc:
10:36:a1:e5:66:01:a9:7c:5b:9b:2c:1d:25:c3:66:
ad:2c:20:6a:74:e1:34:72:9f:c5:fc:a5:a9:c0:1f:
2d:7f:2a:50:0b:0f:27:9e:7f:96:a6:82:5e:90:dc:
ff:36:b8:9f:0f:f5:69:be:d9:f6:2d:81:ee:46:a2:
e3:52:2a:fe:91:89:10:8c:81:e6:e0:b1:55:88:09:
41:62:b7:dc:09:72:e3:a1:ea:4d:79:2a:c6:ba:f1:
00:b4:41:f5:54:dc:55:32:af:66:8a:49:6c:9f:e6:
da:fe:3e:86:1a:ed:e8:ef:0e:4c:f4:7e:89:78:55:
4d:d8:b6:76:b9:4f:26:b1:11:d9:76:9a:76:4a:d0:
82:c6:54:bb:43:e5:83:63:d8:54:f6:b1:c6:79:4a:
3d:ea:7c:a2:41:af:a7:e4:5f:99:24:31:cc:61:08:
c2:e9:0c:cf:74:67:11:f0:15:e6:af:47:13:6a:4c:
be:f7:b9:7f:1f:1e:48:5c:39:6b:07:8d:ae:e2:2d:
0e:7a:26:89:54:a9:c2:7b:60:06:fa:5a:db:39:91:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:C7:04:0D:15:FD:C2:35:E0:A4:7A:D2:4F:ED:3D:27:45:FE:AE
X509v3 Authority Key Identifier:
keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135392e302f32342d3234203d3e203238353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.192.159.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ea:6e:b3:59:20:cd:2c:50:37:72:84:30:14:2e:61:24:49:
d9:31:02:60:bd:73:33:31:1d:5b:9a:a0:f5:7a:95:ae:d1:be:
aa:45:f1:48:d1:a5:af:9c:88:69:cb:b1:6c:5e:12:03:a6:9b:
46:19:b8:b3:2c:83:4a:8c:26:0c:b4:0d:aa:55:11:95:f0:55:
55:af:89:b4:33:2d:30:53:bf:b1:c6:ef:ab:ca:0a:31:15:ff:
8c:36:82:0b:d5:46:b9:ad:8e:b2:60:36:38:76:cd:c6:22:29:
d1:48:da:a9:5b:f0:a1:c7:8a:5a:a0:f3:83:0c:92:55:28:68:
55:b6:3c:ab:51:3d:39:6d:72:5b:b2:40:8e:1e:6e:e3:2e:7f:
a1:f8:a0:c6:cd:bf:47:e2:b8:bc:f8:ca:5f:9a:ab:1f:29:f7:
e9:58:b9:36:1b:cc:ad:29:c0:83:75:0a:90:b1:3b:d1:f7:b8:
d6:01:ad:ce:11:81:66:2f:dc:99:7a:d1:13:de:b3:dc:93:d3:
a8:62:dd:6a:87:3d:3a:2c:24:62:16:54:3c:e3:b3:f2:25:92:
57:16:ad:91:6e:d3:5a:33:b2:0c:f5:f4:4e:23:ab:28:4b:b4:
fa:d7:37:fa:ef:0b:c4:64:83:bc:47:04:96:34:2b:00:b0:27:
e4:63:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:41 2025 by rpki-client