Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130372e302f32342d3234203d3e20323639373139.roa
File: 3230302e342e3130372e302f32342d3234203d3e20323639373139.roa (raw, json)
Hash identifier: pYsU50j4yCeOYvCZ3NDskQyxBF6iIELPcDVvYmsI+JI=
Subject key identifier: 2F:F9:19:F3:88:E3:B7:F1:3D:C6:E9:45:8E:81:D0:1B:19:ED:2D:1A
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 41B815854D016992663A56CC3E8422F8A860AE89
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130372e302f32342d3234203d3e20323639373139.roa
Signing time: Thu 30 Jan 2025 21:06:18 +0000
ROA not before: Thu 30 Jan 2025 21:01:18 +0000
ROA not after: Thu 29 Jan 2026 21:06:18 +0000
asID: 269719
IP address blocks: 200.4.107.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b8:15:85:4d:01:69:92:66:3a:56:cc:3e:84:22:f8:a8:60:ae:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:18 2025 GMT
Not After : Jan 29 21:06:18 2026 GMT
Subject: CN=2FF919F388E3B7F13DC6E9458E81D01B19ED2D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:ec:22:25:62:0c:57:16:a1:0d:96:85:3c:
9e:46:d0:79:e6:07:dc:e5:32:9b:44:f7:60:95:39:
38:cb:99:23:a1:c1:96:21:d1:f9:3e:46:7c:2a:df:
3f:73:b7:4b:ca:76:7a:eb:18:66:35:f5:65:fd:6e:
99:bd:83:27:75:89:97:7c:6c:cf:16:fe:29:64:5d:
6a:eb:4c:27:78:36:f3:a7:38:72:d2:15:03:28:5b:
31:f1:e4:b7:04:b7:34:94:11:b1:c3:5c:c7:fd:54:
99:06:95:b7:71:a0:34:91:16:f5:c3:f9:2d:96:3a:
f2:fc:66:b7:42:f8:e6:22:8f:52:f5:75:59:2c:bb:
48:da:7e:fa:87:05:75:8b:2b:49:ed:2f:48:b6:18:
9c:d8:a1:d3:ec:3c:8e:4f:f7:ae:d3:ab:b0:7b:47:
07:8c:50:52:16:53:76:17:39:4d:53:62:19:bc:90:
18:f9:d3:3f:b9:9c:57:db:51:8c:28:df:5c:39:a8:
d4:80:e9:00:0d:80:ab:98:04:a3:b2:aa:a0:17:d5:
47:77:56:0f:d5:ca:9f:2b:58:79:d7:87:6e:08:6c:
53:9a:19:81:57:8a:24:f9:d1:88:86:cb:c9:af:6e:
dc:b3:7b:29:02:2b:fd:6c:db:0b:8f:fb:72:d3:af:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F9:19:F3:88:E3:B7:F1:3D:C6:E9:45:8E:81:D0:1B:19:ED:2D:1A
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130372e302f32342d3234203d3e20323639373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.4.107.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cf:35:01:d3:f5:75:03:f6:f0:b3:1b:fc:14:3f:0d:b7:c2:
7d:db:7f:f0:40:3d:99:de:5d:49:90:18:e8:5b:de:65:ff:d9:
25:06:29:9b:9f:cc:65:64:01:ce:b9:f4:bd:7d:75:4c:e1:15:
89:a8:2b:96:c8:a8:fc:67:ca:2d:d1:29:db:fd:08:58:2b:58:
56:19:5d:dd:0a:f2:04:e4:46:46:62:57:c4:b4:e1:6b:97:6d:
5f:6b:8c:8f:b8:39:8c:c6:52:59:17:2b:ab:39:a3:55:12:55:
d6:15:a7:25:2c:f9:02:2e:9e:82:b3:ef:70:1a:30:05:d2:79:
60:99:6a:7e:09:2f:ec:a1:d6:06:4a:85:0c:4a:4a:93:0c:c4:
64:fd:f2:65:8e:4b:60:b5:10:5c:ca:97:ac:7a:b1:b1:b0:47:
a4:22:45:ba:e6:fb:a6:c8:54:f4:d8:80:3f:7c:a7:e4:d5:31:
7a:2d:e4:a5:4f:01:c7:12:35:ef:d7:12:82:f7:8b:32:b9:4f:
8e:7a:d2:5a:ca:0a:9b:e2:80:09:20:1e:f0:40:32:14:c1:e2:
ae:c7:ab:71:dc:ea:03:16:ed:4e:1f:03:6d:03:6f:62:57:3e:
a0:5c:30:2d:3a:74:37:6b:af:8e:17:e0:dd:8f:e7:10:80:94:
45:af:5a:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQbgVhU0BaZJmOlbMPoQi+KhgrokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ4OEQyNEJGNDBBRTlFMTZBMEU0OTY4NDQ4RUMxRTFG
NUM4N0Y2MjAeFw0yNTAxMzAyMTAxMThaFw0yNjAxMjkyMTA2MThaMDMxMTAvBgNV
BAMTKDJGRjkxOUYzODhFM0I3RjEzREM2RTk0NThFODFEMDFCMTlFRDJEMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3guwiJWIMVxahDZaFPJ5G0Hnm
B9zlMptE92CVOTjLmSOhwZYh0fk+Rnwq3z9zt0vKdnrrGGY19WX9bpm9gyd1iZd8
bM8W/ilkXWrrTCd4NvOnOHLSFQMoWzHx5LcEtzSUEbHDXMf9VJkGlbdxoDSRFvXD
+S2WOvL8ZrdC+OYij1L1dVksu0jafvqHBXWLK0ntL0i2GJzYodPsPI5P967Tq7B7
RweMUFIWU3YXOU1TYhm8kBj50z+5nFfbUYwo31w5qNSA6QANgKuYBKOyqqAX1Ud3
Vg/Vyp8rWHnXh24IbFOaGYFXiiT50YiGy8mvbtyzeykCK/1s2wuP+3LTr6DHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUL/kZ84jjt/E9xulFjoHQGxntLRowHwYDVR0j
BBgwFoAULYjSS/QK6eFqDkloRI7B4fXIf2IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0I3UlpvYTlDRFYyc2dUeXQ3Y1E1elg1SE40RVBwcjVqakVxZmFDaU1k
VjcvMC8yRDg4RDI0QkY0MEFFOUUxNkEwRTQ5Njg0NDhFQzFFMUY1Qzg3RjYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEODhEMjRCRjQwQUU5RTE2
QTBFNDk2ODQ0OEVDMUUxRjVDODdGNjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCN1Jab2E5Q0RWMnNnVHl0N2NRNXpYNUhONEVQcHI1ampFcWZhQ2lNZFY3LzAv
MzIzMDMwMmUzNDJlMzEzMDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzczMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyARrMA0GCSqGSIb3DQEBCwUAA4IBAQBBzzUB0/V1
A/bwsxv8FD8Nt8J923/wQD2Z3l1JkBjoW95l/9klBimbn8xlZAHOufS9fXVM4RWJ
qCuWyKj8Z8ot0Snb/QhYK1hWGV3dCvIE5EZGYlfEtOFrl21fa4yPuDmMxlJZFyur
OaNVElXWFaclLPkCLp6Cs+9wGjAF0nlgmWp+CS/sodYGSoUMSkqTDMRk/fJljktg
tRBcypeserGxsEekIkW65vumyFT02IA/fKfk1TF6LeSlTwHHEjXv1xKC94syuU+O
etJaygqb4oAJIB7wQDIUweKux6tx3OoDFu1OHwNtA29iVz6gXDAtOnQ3a6+OF+Dd
j+cQgJRFr1qS
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:13:49 2025 by rpki-client