Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BUsApEcL6qwesRCPGnFNnvtiMBEL5NnUjNBDYn9PMx8M/0/3134332e3230382e38382e302f32322d3234203d3e20323731363936.roa
File: 3134332e3230382e38382e302f32322d3234203d3e20323731363936.roa (raw, json)
Hash identifier: FIVVa8jCznygALeZVhgavii6zuHD7i97RNwMa4BuQgk=
Subject key identifier: 56:EB:49:C6:4F:56:F2:16:BE:18:37:BE:EF:1F:26:AB:8B:39:D5:40
Certificate issuer: /CN=16B195956D88CCCB16940DC49CFC72F18ED60821
Certificate serial: 32606A1D12734F7945A1F57C0CF5C93408BAB617
Authority key identifier: 16:B1:95:95:6D:88:CC:CB:16:94:0D:C4:9C:FC:72:F1:8E:D6:08:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B195956D88CCCB16940DC49CFC72F18ED60821.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BUsApEcL6qwesRCPGnFNnvtiMBEL5NnUjNBDYn9PMx8M/0/3134332e3230382e38382e302f32322d3234203d3e20323731363936.roa
Signing time: Mon 27 Jan 2025 15:13:14 +0000
ROA not before: Mon 27 Jan 2025 15:08:14 +0000
ROA not after: Mon 26 Jan 2026 15:13:14 +0000
asID: 271696
IP address blocks: 143.208.88.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:60:6a:1d:12:73:4f:79:45:a1:f5:7c:0c:f5:c9:34:08:ba:b6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B195956D88CCCB16940DC49CFC72F18ED60821
Validity
Not Before: Jan 27 15:08:14 2025 GMT
Not After : Jan 26 15:13:14 2026 GMT
Subject: CN=56EB49C64F56F216BE1837BEEF1F26AB8B39D540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:00:e5:28:f9:99:d2:71:b0:63:65:7d:e0:
78:ca:4a:05:0d:3b:29:3a:be:c6:61:ef:06:69:d8:
ec:ac:6b:80:5d:7d:fe:2b:0f:81:6b:ca:8d:26:a8:
05:eb:af:cc:e0:14:5a:c7:48:5f:2a:69:66:30:6d:
20:d7:1b:6e:c0:82:26:44:03:ad:89:a2:fe:44:83:
ca:12:46:36:43:5e:8d:1a:5e:07:09:df:11:6c:03:
2d:79:e4:7e:68:48:bf:6e:bf:4c:c2:38:0a:d2:9e:
8d:43:ae:55:7f:31:f8:64:ad:2e:8e:d4:3b:48:e9:
c9:4a:c5:f5:04:6f:14:81:2d:81:a7:7c:13:8e:f7:
10:21:d3:7c:61:99:cf:00:3f:68:90:dd:25:0c:68:
65:2f:4b:c1:fd:d7:d9:4b:e2:04:7d:03:d7:bf:5d:
1c:6a:3e:3e:77:ce:44:8e:f9:fd:62:7a:30:86:7e:
32:e1:55:13:47:ea:69:c2:3a:a6:b8:12:39:e4:3c:
55:98:93:ad:86:32:c2:5e:bb:98:7c:d6:03:5a:9e:
71:14:b2:eb:71:eb:e0:38:c7:10:b3:10:41:67:57:
ca:c0:81:92:99:23:27:ee:7a:2b:13:3a:9b:9f:ba:
ae:df:17:fd:fc:df:15:5f:dc:23:d8:4f:83:42:5e:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:49:C6:4F:56:F2:16:BE:18:37:BE:EF:1F:26:AB:8B:39:D5:40
X509v3 Authority Key Identifier:
keyid:16:B1:95:95:6D:88:CC:CB:16:94:0D:C4:9C:FC:72:F1:8E:D6:08:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BUsApEcL6qwesRCPGnFNnvtiMBEL5NnUjNBDYn9PMx8M/0/16B195956D88CCCB16940DC49CFC72F18ED60821.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B195956D88CCCB16940DC49CFC72F18ED60821.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUsApEcL6qwesRCPGnFNnvtiMBEL5NnUjNBDYn9PMx8M/0/3134332e3230382e38382e302f32322d3234203d3e20323731363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.88.0/22
Signature Algorithm: sha256WithRSAEncryption
15:12:f3:63:91:f5:4b:d9:e3:0e:7d:98:38:1d:ea:af:4d:94:
01:d8:d2:9c:90:c8:ee:95:c5:76:ed:0e:48:8b:6b:d8:b1:4f:
cd:01:c1:96:73:c2:31:ab:3e:a0:f5:be:3d:3e:d2:63:28:1f:
0b:4f:52:45:17:44:ff:3e:68:52:44:93:c1:ad:4c:91:22:8d:
cb:22:60:89:10:5c:f5:56:5b:ab:53:8b:07:91:b3:75:6e:8d:
d6:39:e4:ae:5d:d4:85:25:8e:93:f0:25:c8:02:be:60:93:33:
f9:97:df:88:e6:4d:90:db:b0:7e:47:00:5a:29:00:ac:1e:82:
f1:42:13:f9:7d:bf:52:e8:9c:8b:9e:25:5a:b4:cf:bc:f6:22:
a4:08:2b:02:55:d1:3d:a2:19:d9:ca:76:74:87:07:5f:7a:b4:
50:71:28:1b:b2:a3:05:81:19:46:5f:2a:55:70:fe:77:ee:3d:
d8:46:ef:97:89:bc:8c:0a:71:27:40:cc:24:df:b5:bb:b4:fe:
c6:c3:6c:3f:5b:3d:70:34:e4:4d:38:6f:74:a2:55:62:ad:18:
e7:d4:bc:82:ea:83:36:97:4c:0e:a1:19:2b:02:95:54:ce:32:
b5:9a:6b:47:1d:e7:5a:0b:d3:9d:8a:fa:39:0c:f4:83:b8:8b:
5f:4f:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:47 2025 by rpki-client