Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31312e302f32342d3332203d3e203238313338.roa
File: 3138372e34392e31312e302f32342d3332203d3e203238313338.roa (raw, json)
Hash identifier: o5cLpmeU0ddgREMGm30jSH+NmJZGI81ilsb8fJ+WCM0=
Subject key identifier: 8D:B9:4D:2A:F2:F2:AA:94:2D:79:0D:23:04:4A:4E:E3:31:53:5F:2E
Certificate issuer: /CN=B90C4665B62CA51669AB68FE5718C2DF3E1AF674
Certificate serial: 21CB08AD2E590E90C0A15502992125089B76192E
Authority key identifier: B9:0C:46:65:B6:2C:A5:16:69:AB:68:FE:57:18:C2:DF:3E:1A:F6:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B90C4665B62CA51669AB68FE5718C2DF3E1AF674.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31312e302f32342d3332203d3e203238313338.roa
Signing time: Mon 31 Mar 2025 20:34:50 +0000
ROA not before: Mon 31 Mar 2025 20:29:50 +0000
ROA not after: Mon 30 Mar 2026 20:34:50 +0000
asID: 28138
IP address blocks: 187.49.11.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:cb:08:ad:2e:59:0e:90:c0:a1:55:02:99:21:25:08:9b:76:19:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B90C4665B62CA51669AB68FE5718C2DF3E1AF674
Validity
Not Before: Mar 31 20:29:50 2025 GMT
Not After : Mar 30 20:34:50 2026 GMT
Subject: CN=8DB94D2AF2F2AA942D790D23044A4EE331535F2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:72:49:d1:f6:e5:e6:e9:3e:30:54:2e:b3:
f1:f7:41:70:6b:d5:f3:d7:bb:09:09:24:86:58:a2:
75:a2:b0:e9:2d:53:28:b0:26:2c:34:0a:bc:08:c1:
d4:89:c7:d9:ec:77:36:3c:72:dc:b5:24:7d:20:3b:
d3:13:81:ba:f0:c1:83:7a:09:50:5e:ed:c2:0b:f4:
6a:3d:4b:d6:66:81:67:bc:a4:8b:0c:d5:7c:52:cf:
19:8d:4a:38:c0:cf:9d:36:f9:6c:78:9d:9d:36:27:
fb:f4:45:57:cc:c4:b3:88:ac:a6:13:1f:f1:89:40:
ea:17:92:d3:f8:ff:68:3b:e2:d4:a7:ec:7c:74:80:
fd:e6:03:50:df:51:91:40:60:a8:f8:4d:d0:42:9f:
20:e4:0d:92:a0:6e:5c:4c:41:f6:ec:fb:96:43:a4:
e8:b7:5a:ef:83:4c:56:1a:37:69:f5:3f:a3:46:64:
58:ee:8e:5b:39:8e:2f:d4:0c:74:4e:66:4d:9f:cb:
74:68:99:f3:7b:ca:ca:a3:0a:44:de:14:38:3a:f3:
bd:0d:3a:4b:61:73:57:4b:81:5f:4a:1a:fa:cd:37:
35:73:1c:89:be:b5:df:2e:5b:41:b7:81:a3:06:6c:
b5:9a:22:f3:cd:6b:f1:56:cc:14:01:0c:21:ea:45:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:4D:2A:F2:F2:AA:94:2D:79:0D:23:04:4A:4E:E3:31:53:5F:2E
X509v3 Authority Key Identifier:
keyid:B9:0C:46:65:B6:2C:A5:16:69:AB:68:FE:57:18:C2:DF:3E:1A:F6:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/B90C4665B62CA51669AB68FE5718C2DF3E1AF674.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B90C4665B62CA51669AB68FE5718C2DF3E1AF674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31312e302f32342d3332203d3e203238313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.49.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bc:cb:6b:61:82:7e:24:21:53:d5:af:3b:a8:8f:67:8b:50:
8d:d6:77:f3:7a:b3:53:20:e2:ee:39:76:28:6c:ae:91:c9:22:
58:20:95:73:67:37:ee:13:24:d3:95:8c:fd:51:2e:db:d3:d1:
d6:90:ca:e7:8a:73:d3:f1:76:d8:4d:44:f7:0f:04:dc:b1:21:
bd:dd:3c:5a:ab:3c:75:75:13:ae:8d:4b:f4:93:24:d1:a6:5f:
8e:8e:45:62:3b:6b:fe:50:5a:14:90:a1:75:c8:15:69:16:fa:
3c:80:18:63:07:6a:2c:aa:cf:59:d4:eb:41:2e:79:f8:f2:af:
da:0d:f1:20:e4:a2:00:50:27:30:67:8e:42:83:1c:1b:bf:4c:
5c:85:f1:8f:2b:25:04:0c:a0:db:53:0b:14:4d:31:ec:96:bc:
83:89:98:bd:d5:e0:45:f3:5f:df:38:19:99:5c:d0:c0:2f:0c:
a1:ee:c5:1b:35:11:06:17:6f:10:9e:3a:16:7b:5f:59:33:1f:
69:56:c3:8a:e6:2c:7e:e9:fb:1f:3c:d5:c8:18:fb:09:22:86:
1c:ac:42:d5:a7:df:c4:47:dd:3e:e7:3f:86:9d:11:e0:f0:f8:
09:06:7e:a9:4d:02:b0:c4:2d:33:9b:5f:f6:71:4d:b8:f9:e2:
1f:91:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:37:43 2025 by rpki-client