Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa
File: 3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier: 7S6h6psC4QlKKszkIocWkPq2z9DzLmpGePKAN0r/c6g=
Subject key identifier: A3:A8:8F:BE:18:92:4C:8D:12:17:E7:12:EE:2C:C9:65:64:77:1A:BB
Certificate issuer: /CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Certificate serial: 09A58F27102FDE7BBC05E300F0B8B325034AC8D4
Authority key identifier: C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa
Signing time: Fri 01 Nov 2024 15:12:00 +0000
ROA not before: Fri 01 Nov 2024 15:07:00 +0000
ROA not after: Fri 31 Oct 2025 15:12:00 +0000
asID: 265419
IP address blocks: 168.195.22.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a5:8f:27:10:2f:de:7b:bc:05:e3:00:f0:b8:b3:25:03:4a:c8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Validity
Not Before: Nov 1 15:07:00 2024 GMT
Not After : Oct 31 15:12:00 2025 GMT
Subject: CN=A3A88FBE18924C8D1217E712EE2CC96564771ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:2f:d7:98:64:df:a3:5f:e1:36:66:df:4d:
c0:04:22:64:aa:e2:b0:57:9b:f1:09:be:30:3e:4c:
7f:77:f1:36:a5:e4:cf:1a:68:ac:0d:85:58:12:9b:
58:e3:bd:68:fa:a5:b8:75:f9:c0:49:c7:ed:3a:1f:
e0:c6:cd:07:fb:9d:82:c5:42:1e:4c:46:34:91:55:
6d:65:3f:3f:55:88:2a:77:33:8c:e6:a3:f1:50:a4:
e4:69:6f:3c:97:39:cd:2f:02:60:5b:6f:ae:ef:a4:
e9:fe:6a:91:89:e5:cb:12:5b:93:7a:02:65:c5:4e:
3c:ee:16:33:53:4b:00:c8:64:ba:f9:d4:6e:73:9b:
90:fb:7d:6f:15:6a:76:09:39:8d:7e:b3:2a:e4:c7:
35:b6:b9:c3:5e:e5:db:d6:1a:ea:6b:0e:e2:e7:75:
f2:98:5f:49:d2:65:4b:f8:b6:29:f7:2e:fb:34:4a:
e3:5a:e0:8b:1e:79:c0:55:a0:11:fc:14:36:4f:ff:
d4:fc:80:78:6b:13:5b:01:13:4e:ff:bc:2e:84:6d:
a1:a3:65:95:d1:e7:c2:65:9e:c8:04:47:82:0a:79:
f5:32:33:ad:a6:19:e9:97:3a:f3:cc:15:fc:ee:83:
a1:de:42:02:90:2b:86:23:dd:91:57:ad:de:02:f0:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A8:8F:BE:18:92:4C:8D:12:17:E7:12:EE:2C:C9:65:64:77:1A:BB
X509v3 Authority Key Identifier:
keyid:C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32322e302f32342d3234203d3e20323635343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.22.0/24
Signature Algorithm: sha256WithRSAEncryption
db:69:90:65:0d:f0:52:08:26:d6:94:ef:68:e1:af:3f:16:77:
fe:84:d3:6d:d1:5a:17:c7:d1:bc:9a:32:d6:93:10:49:ff:0f:
da:de:86:ec:48:1b:d4:17:43:70:ec:2a:ab:4d:c8:5f:14:45:
cc:2e:80:52:49:77:25:0e:72:ae:fe:75:70:d7:57:3b:e0:21:
38:ed:bb:c6:ca:28:d2:15:4a:8d:62:53:74:ee:af:b4:33:72:
e1:a8:90:2c:f8:9e:d8:4d:fa:bf:32:c8:80:8f:84:43:2e:a9:
10:a1:c6:2e:81:9f:6b:24:51:00:39:fd:21:f7:d6:8c:a8:01:
8c:8c:e8:99:a2:ec:d0:9f:3c:5e:05:9e:4a:84:b5:d0:38:bc:
8d:6a:60:34:ec:df:66:b1:75:a1:50:0c:e0:ca:96:3b:a0:39:
e6:60:e4:8a:7f:37:84:0d:2c:41:02:1d:76:29:6b:a9:d5:c4:
73:52:c3:aa:2b:75:33:2c:c0:b1:5a:82:b9:57:4e:ac:c3:2b:
90:d5:55:63:a2:61:6d:e8:07:3f:a1:4b:53:3b:ee:59:bb:1c:
3a:c5:bd:16:42:ed:b8:01:d3:83:3c:05:35:02:c6:d0:cb:85:
60:78:f4:65:cc:c7:14:10:c1:5d:87:31:90:f9:c9:f9:c3:b1:
9d:01:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:18 2025 by rpki-client