Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/3139302e392e38342e302f32322d3332203d3e20323731353935.roa
File: 3139302e392e38342e302f32322d3332203d3e20323731353935.roa (raw, json)
Hash identifier: VNqFxChjSOp78IX+LdJKBoVtVw4RUS6yHJnbXRnQb4I=
Subject key identifier: E8:6B:16:BD:66:0A:A9:98:1E:67:D5:F0:7A:6F:02:B0:4F:D5:C5:33
Certificate issuer: /CN=2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC
Certificate serial: 61A4AE5E4914FD7E122604C2D9670419F7354047
Authority key identifier: 2F:9E:D4:DB:7F:EB:E4:0A:94:D4:D7:C5:D6:A1:75:16:A3:C3:CE:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/3139302e392e38342e302f32322d3332203d3e20323731353935.roa
Signing time: Fri 21 Feb 2025 17:42:16 +0000
ROA not before: Fri 21 Feb 2025 17:37:16 +0000
ROA not after: Fri 20 Feb 2026 17:42:16 +0000
asID: 271595
IP address blocks: 190.9.84.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a4:ae:5e:49:14:fd:7e:12:26:04:c2:d9:67:04:19:f7:35:40:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC
Validity
Not Before: Feb 21 17:37:16 2025 GMT
Not After : Feb 20 17:42:16 2026 GMT
Subject: CN=E86B16BD660AA9981E67D5F07A6F02B04FD5C533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:07:46:94:df:59:0d:63:57:5a:2b:58:43:
13:a5:5f:9f:47:ff:b6:d4:54:1e:df:5e:25:52:f7:
11:a7:03:22:12:01:38:97:b9:93:dc:fe:00:8c:31:
da:9e:31:37:2f:21:bc:5b:32:da:4e:47:9b:89:b1:
04:5e:89:77:91:92:b8:ac:b0:6a:f0:99:ec:b1:3e:
32:eb:af:ac:ee:ae:dd:2f:61:98:85:aa:78:be:ae:
b6:ca:db:3e:46:c7:d1:01:1f:6a:94:bd:8e:ed:50:
74:b9:53:d6:6e:d8:54:61:eb:bd:56:e8:fb:cf:27:
e3:f5:4f:8c:50:1b:f7:11:57:a0:0d:b9:e8:13:05:
40:0b:b3:90:eb:1d:50:55:12:51:31:0e:e3:52:9b:
ee:64:52:85:02:07:a7:41:60:0e:2b:81:46:2b:58:
74:4e:8f:55:2b:77:23:1c:98:29:87:54:06:70:84:
b4:4f:4f:6a:09:13:31:a2:38:42:ad:98:13:3b:8f:
13:de:4c:bc:66:8e:6c:56:dc:30:21:3c:db:73:47:
ef:80:9e:23:d7:63:a0:ae:f4:26:8d:8c:7e:b8:73:
79:ea:40:cd:ac:e9:b4:52:9b:11:70:88:a2:d6:2d:
2d:2f:5b:7a:26:4e:2b:ed:0f:a6:09:34:ff:81:47:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:16:BD:66:0A:A9:98:1E:67:D5:F0:7A:6F:02:B0:4F:D5:C5:33
X509v3 Authority Key Identifier:
keyid:2F:9E:D4:DB:7F:EB:E4:0A:94:D4:D7:C5:D6:A1:75:16:A3:C3:CE:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/3139302e392e38342e302f32322d3332203d3e20323731353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.9.84.0/22
Signature Algorithm: sha256WithRSAEncryption
34:de:4b:75:3a:32:ce:36:34:ca:03:90:93:b3:ea:3e:45:95:
f2:60:2c:04:2b:62:35:08:46:19:d3:5e:66:13:e1:46:71:23:
d3:13:e8:0b:85:24:ca:a0:dc:65:3e:6f:31:31:34:a4:fb:58:
68:76:90:b0:64:16:57:a8:55:18:38:1d:f6:19:42:22:e6:07:
c2:f2:90:e7:08:94:b0:7c:41:e3:f3:e4:fb:e5:f1:81:25:0c:
59:19:df:cd:45:1c:87:73:a0:30:a1:92:f9:52:de:33:fe:03:
9c:c5:bb:2f:26:ad:34:84:58:a4:93:83:74:19:e3:dc:6a:08:
6a:86:0f:b7:c3:37:dd:44:14:69:2d:d9:c3:b0:fe:02:b4:f9:
fd:2b:1c:c6:69:0f:75:ed:95:06:6d:62:58:31:3f:ab:77:12:
41:b9:61:f2:c1:0b:03:f9:f1:07:13:5a:8b:93:d5:1d:4f:97:
76:c0:4e:3b:9c:33:6d:b3:fb:97:e9:a1:69:41:f2:d2:75:6f:
83:22:76:b1:b2:9b:f6:63:09:a7:6e:6a:41:f3:c7:7a:76:08:
01:60:5a:55:84:6e:fa:3d:4a:bd:10:e1:c3:62:4f:0f:23:80:
15:09:a8:69:37:ec:29:45:73:da:f6:f4:1b:d3:a0:6b:42:cd:
17:01:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:03:35 2025 by rpki-client