Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32342d3234203d3e203532363331.roa
File: 3137372e3132382e32382e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier: +1VBFb/SKtI6lDFr/Mb/oW69IN9aZ672fkCe23XDbQw=
Subject key identifier: 25:4D:82:B2:BD:4C:F4:0D:F6:90:A7:B1:DF:2A:E7:C4:F6:E9:42:09
Certificate issuer: /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial: 09D6C21CE1C5C5C7CEAE1DFE128CC0F6B8B5089C
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32342d3234203d3e203532363331.roa
Signing time: Mon 10 Feb 2025 12:56:33 +0000
ROA not before: Mon 10 Feb 2025 12:51:33 +0000
ROA not after: Mon 09 Feb 2026 12:56:33 +0000
asID: 52631
IP address blocks: 177.128.28.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d6:c2:1c:e1:c5:c5:c7:ce:ae:1d:fe:12:8c:c0:f6:b8:b5:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
Validity
Not Before: Feb 10 12:51:33 2025 GMT
Not After : Feb 9 12:56:33 2026 GMT
Subject: CN=254D82B2BD4CF40DF690A7B1DF2AE7C4F6E94209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:c5:42:56:ce:8b:76:01:96:a0:6e:c9:0e:
02:5c:85:9f:96:47:2e:0e:14:7c:55:e1:1a:e0:09:
b1:4b:1d:1b:ab:0b:48:e9:00:c5:6b:e3:a9:7b:fd:
9d:68:7f:45:76:b0:c0:9b:fc:fa:f8:5f:27:99:ed:
a9:0f:f1:d7:0a:d1:25:a0:fd:57:d1:ed:3b:a7:ef:
5b:7b:8f:93:29:88:0b:0d:ed:20:d4:a7:db:61:72:
82:41:62:b3:5c:e1:a6:72:ba:07:76:bc:29:6a:88:
8a:f8:db:c2:2f:b0:f0:4d:da:39:fc:9b:52:b1:ad:
44:91:c7:9a:c6:8c:d1:97:02:52:52:b6:f2:9d:69:
6a:23:96:c1:47:33:d5:6d:d8:5b:e3:8f:a1:b1:ff:
e2:78:a6:fa:bb:66:04:68:2e:af:d8:0a:74:68:63:
5b:05:fd:a8:40:19:53:c5:d0:41:08:af:7b:af:fa:
b2:c1:e5:07:82:55:df:47:2e:9f:2c:ef:56:a9:63:
f6:e3:3f:7c:48:26:65:79:67:53:5f:7f:19:60:70:
a2:a2:6c:19:dd:85:15:20:5c:a1:82:f9:d0:19:ee:
86:49:9b:b7:e2:28:3a:1c:86:7a:85:0d:75:55:d9:
9e:26:c0:02:28:6a:7d:0b:36:bf:94:65:da:2f:79:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4D:82:B2:BD:4C:F4:0D:F6:90:A7:B1:DF:2A:E7:C4:F6:E9:42:09
X509v3 Authority Key Identifier:
keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32382e302f32342d3234203d3e203532363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.128.28.0/24
Signature Algorithm: sha256WithRSAEncryption
68:90:cf:a1:56:99:7a:83:ea:2e:34:dd:10:cc:78:e1:63:e1:
fe:a3:1d:62:7e:41:1b:55:d1:54:81:7a:f4:69:87:04:4f:53:
38:f0:55:9d:cb:3b:14:12:13:71:0b:63:80:b3:18:18:d9:b9:
22:52:e8:c9:1e:4f:e4:13:df:09:94:1e:5d:b4:e2:68:99:5d:
51:01:6b:ed:1b:9e:5f:ef:f8:49:b4:3e:57:cc:d4:79:39:6c:
76:fb:e8:6f:eb:58:2c:25:de:82:5c:de:92:9d:c7:22:fc:40:
df:ac:f5:06:a0:6c:bb:eb:77:af:c1:2d:d7:7c:f9:0b:dc:86:
62:6e:01:82:a4:c1:7b:fd:10:c5:ce:08:59:6b:29:86:e6:68:
88:e4:69:cb:3a:10:fa:43:21:d8:67:2a:f7:30:e5:9a:a7:f3:
e9:64:ac:eb:65:77:f2:3b:c9:67:2b:75:19:e5:d8:4d:43:fe:
03:6c:d0:ba:8e:e0:01:69:50:c7:91:0f:0b:f5:67:a6:be:97:
47:43:2c:de:ae:f2:d9:58:9a:b8:15:74:95:39:2e:a0:47:8b:
61:41:5b:62:6b:10:74:fe:ba:17:79:4b:08:f5:13:fe:2b:09:
12:d6:5f:58:02:39:f0:d8:e3:ac:ee:78:0c:aa:73:6f:cb:32:
06:06:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:13 2025 by rpki-client