Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e35312e3232342e302f31392d3332203d3e203232333831.roa
File: 3138392e35312e3232342e302f31392d3332203d3e203232333831.roa (raw, json)
Hash identifier: qF4SeU4mwR1DB6+xA2tvPot4jkpt2APLslWSW3DLstA=
Subject key identifier: DE:09:E4:87:82:1D:77:97:96:1A:79:63:7B:D9:69:54:51:E2:86:D5
Certificate issuer: /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial: 4F798B1F8DD216A14723A5319FAE232B2B8D22D0
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e35312e3232342e302f31392d3332203d3e203232333831.roa
Signing time: Fri 07 Mar 2025 20:10:02 +0000
ROA not before: Fri 07 Mar 2025 20:05:02 +0000
ROA not after: Fri 06 Mar 2026 20:10:02 +0000
asID: 22381
IP address blocks: 189.51.224.0/19 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:79:8b:1f:8d:d2:16:a1:47:23:a5:31:9f:ae:23:2b:2b:8d:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Validity
Not Before: Mar 7 20:05:02 2025 GMT
Not After : Mar 6 20:10:02 2026 GMT
Subject: CN=DE09E487821D7797961A79637BD9695451E286D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:85:27:6c:c9:ed:d3:e4:0c:ca:2c:f4:96:
ee:f5:73:5f:f3:cf:3e:a3:1e:0f:41:38:74:cd:0c:
50:ef:f4:e2:34:ce:b6:cc:80:7a:0d:21:e3:c0:30:
4e:dd:f6:c1:1f:cb:86:15:fe:4d:18:33:dd:68:d0:
d9:33:a5:26:94:10:7e:02:39:18:c2:89:fb:ca:49:
b5:c7:84:7c:bd:95:63:54:80:f9:26:bf:b8:eb:c0:
24:7c:aa:84:97:14:f8:dd:cf:15:9a:f0:73:d0:96:
f9:b8:d5:97:fe:e1:d5:8a:28:0a:60:43:c1:ad:a1:
b8:01:8c:65:7d:50:76:ef:3a:c6:ad:b4:75:0a:e2:
bd:e8:58:2b:fd:35:90:d8:6d:18:3a:cd:7d:1f:bc:
38:4e:82:4c:24:dd:18:e2:64:03:cd:50:fc:01:7e:
2e:47:70:c2:bf:76:ac:29:a2:28:ad:43:cd:96:2b:
76:0f:42:1f:62:63:6e:e2:bb:20:e5:b7:e8:15:4d:
c2:42:a9:68:12:76:68:08:f3:75:31:8b:a3:28:93:
9d:db:12:a0:ee:b5:8b:38:9b:d4:fe:50:78:2f:47:
9c:09:53:fc:f0:83:a8:98:1c:74:e8:99:58:17:47:
84:be:2c:2a:b9:22:28:28:d9:45:70:3e:e6:49:e7:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:E4:87:82:1D:77:97:96:1A:79:63:7B:D9:69:54:51:E2:86:D5
X509v3 Authority Key Identifier:
keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3138392e35312e3232342e302f31392d3332203d3e203232333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.51.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:aa:78:be:6b:4f:41:29:fb:5a:3e:07:b1:ad:8f:a9:1b:df:
4b:b8:97:20:e5:1b:bd:7b:8f:3f:a1:47:f3:bb:6f:9f:e5:b7:
66:9e:ac:0c:01:40:01:66:cc:b5:92:dd:24:5e:cb:ea:28:b8:
93:cb:ae:13:54:5c:02:df:d6:eb:82:50:75:d8:50:8c:19:e6:
7f:8b:6b:a9:87:22:b2:bc:36:f5:87:88:2f:f4:17:b7:a2:68:
0c:d5:52:bb:99:d4:10:18:47:56:86:1a:de:cd:ab:bb:97:30:
0e:93:2d:1c:1f:02:79:2d:f9:19:35:72:bf:f1:62:06:33:06:
0c:f4:a2:55:18:01:9c:a1:2a:ae:98:27:05:15:ba:60:6c:7f:
c0:a0:0a:cd:82:1d:1f:86:34:44:77:64:66:b9:5e:a6:0c:68:
5d:08:95:21:f0:64:b7:93:35:43:d7:33:50:44:1a:8f:2d:94:
bf:d4:47:32:ea:21:bd:69:85:44:bb:e8:37:cd:34:a8:43:9d:
33:25:6c:77:c4:e5:4d:8d:2f:30:fa:c0:ba:9f:40:e0:73:96:
68:19:9b:24:3b:b5:2c:aa:1e:ed:4c:97:1e:a6:75:d9:a5:30:
8d:c8:8d:e1:1a:19:bf:b1:e6:d0:12:d7:50:00:dd:bb:ef:e5:
38:ea:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:33:42 2025 by rpki-client