Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa
File: 3139302e392e3130342e302f32322d3232203d3e20323731363037.roa (raw, json)
Hash identifier: 88vp8Zcrf96SR08U2TEpLlsCijma//CZC9EKBqReIUw=
Subject key identifier: 9C:E9:54:50:73:0D:EF:D9:2D:10:1B:B8:42:32:4E:96:AC:0E:A6:F6
Certificate issuer: /CN=175384092ABAD3D152DCA97639AC5068FE84B741
Certificate serial: 0B39F559480FE21044115B36B147748546792AD2
Authority key identifier: 17:53:84:09:2A:BA:D3:D1:52:DC:A9:76:39:AC:50:68:FE:84:B7:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa
Signing time: Wed 09 Apr 2025 18:46:03 +0000
ROA not before: Wed 09 Apr 2025 18:41:03 +0000
ROA not after: Wed 08 Apr 2026 18:46:03 +0000
asID: 271607
IP address blocks: 190.9.104.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:39:f5:59:48:0f:e2:10:44:11:5b:36:b1:47:74:85:46:79:2a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175384092ABAD3D152DCA97639AC5068FE84B741
Validity
Not Before: Apr 9 18:41:03 2025 GMT
Not After : Apr 8 18:46:03 2026 GMT
Subject: CN=9CE95450730DEFD92D101BB842324E96AC0EA6F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:12:0e:d7:90:19:6a:29:55:ac:2d:66:b6:
05:2b:49:08:8a:3b:a9:38:7f:16:2f:19:b5:e7:92:
84:3f:60:22:58:6a:59:05:3c:9e:87:7f:5c:77:f9:
65:ac:af:c0:09:ca:7d:e2:70:c6:31:bd:39:43:c2:
1c:89:84:de:c6:d2:4a:f5:77:f8:e4:27:7c:00:ac:
3b:df:9d:67:da:6c:e7:9a:85:fd:16:48:70:b6:d0:
30:df:e5:75:fa:23:27:f4:21:07:e7:cf:a7:45:46:
75:df:60:1a:11:ec:e6:d4:17:fe:f6:a5:b1:ce:b2:
be:7a:90:56:61:1f:38:2a:b5:47:d4:2f:e7:c5:cc:
8c:4e:eb:e8:3e:9c:ab:99:54:be:f4:bb:0b:16:32:
3a:d9:05:e4:6f:2e:05:6e:44:c0:70:b9:55:df:0d:
85:fb:4f:e8:0f:89:7c:bb:4a:4a:a4:f5:fa:6a:99:
e9:d7:c8:48:59:dc:f5:45:39:86:79:a3:b8:e0:ab:
c0:07:99:95:f8:f5:70:a0:d1:0c:b0:4d:34:96:61:
dc:ed:7f:5c:ba:21:00:5e:02:19:47:9f:4f:e4:88:
ed:67:c8:57:3c:e5:6d:c5:15:ed:3a:50:74:9d:53:
6d:9b:6e:11:7c:86:79:e9:de:3f:c7:4e:2e:7d:68:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:54:50:73:0D:EF:D9:2D:10:1B:B8:42:32:4E:96:AC:0E:A6:F6
X509v3 Authority Key Identifier:
keyid:17:53:84:09:2A:BA:D3:D1:52:DC:A9:76:39:AC:50:68:FE:84:B7:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/175384092ABAD3D152DCA97639AC5068FE84B741.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/175384092ABAD3D152DCA97639AC5068FE84B741.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32322d3232203d3e20323731363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.104.0/22
Signature Algorithm: sha256WithRSAEncryption
55:7e:36:b2:74:b6:1b:77:76:fe:fb:93:1b:64:db:68:43:4a:
9b:9f:7b:41:91:5e:0d:c9:90:7e:90:66:fa:6c:9b:52:51:b6:
eb:f1:3d:06:b2:23:cf:46:9b:ea:5b:9f:c7:6e:10:97:42:47:
68:f5:b8:80:fe:73:f8:66:4b:af:39:5a:3a:a6:4b:6b:6d:6d:
21:ac:f1:bd:06:a1:9c:da:18:61:38:78:e0:0b:74:c3:57:3b:
e4:5e:23:0d:65:50:0c:47:3a:1c:1f:ba:2b:13:2b:c7:6d:9e:
fa:75:8e:50:15:13:db:09:b6:2b:d6:51:d1:6f:91:90:3a:1d:
3e:98:6d:d4:a4:b4:fd:34:66:9d:40:2f:c5:1f:02:9d:c5:a0:
94:56:fa:a2:59:2b:b5:ef:00:ed:83:38:3d:cb:ad:63:fc:d4:
c6:be:66:42:a2:a1:c2:a4:90:2f:f6:12:fc:68:91:7b:99:64:
53:3b:5f:aa:aa:a7:5d:c7:7b:a3:de:84:cb:8e:62:dd:7c:ff:
bb:6a:ce:93:e4:63:b9:46:7d:7c:fe:5a:80:d5:60:65:c9:e2:
a3:a9:87:5a:bf:b8:9e:cf:a6:de:b4:60:81:6d:30:d2:8c:12:
f2:a6:98:30:27:5b:37:a4:88:c1:23:83:e7:28:95:39:b9:12:
27:5a:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:19 2025 by rpki-client