Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/3139302e3131352e3230382e302f32322d3332203d3e20323730383434.roa
File: 3139302e3131352e3230382e302f32322d3332203d3e20323730383434.roa (raw, json)
Hash identifier: eoPtSz4t5GkGlcVoKgj3Z4WM9FE5tueofNXubHiFsk8=
Subject key identifier: B9:0D:EA:9C:E0:E4:46:7B:73:DF:DE:CD:89:AB:6B:4C:94:42:C7:9F
Certificate issuer: /CN=684C7551344CE6F424049AF4D0BE6EA2B0D65EC0
Certificate serial: 2AE979AD901BF337B4828BB69D2ED4189D1A348E
Authority key identifier: 68:4C:75:51:34:4C:E6:F4:24:04:9A:F4:D0:BE:6E:A2:B0:D6:5E:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684C7551344CE6F424049AF4D0BE6EA2B0D65EC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/3139302e3131352e3230382e302f32322d3332203d3e20323730383434.roa
Signing time: Fri 25 Apr 2025 18:22:11 +0000
ROA not before: Fri 25 Apr 2025 18:17:11 +0000
ROA not after: Fri 24 Apr 2026 18:22:11 +0000
asID: 270844
IP address blocks: 190.115.208.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e9:79:ad:90:1b:f3:37:b4:82:8b:b6:9d:2e:d4:18:9d:1a:34:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684C7551344CE6F424049AF4D0BE6EA2B0D65EC0
Validity
Not Before: Apr 25 18:17:11 2025 GMT
Not After : Apr 24 18:22:11 2026 GMT
Subject: CN=B90DEA9CE0E4467B73DFDECD89AB6B4C9442C79F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:6f:42:bc:4b:4d:2b:96:f3:8c:8d:64:f0:
21:bc:0b:e5:0c:a6:a8:30:45:49:ce:52:6b:41:18:
df:5d:57:1c:75:29:a4:17:05:64:95:ca:6f:97:58:
c4:48:01:1c:a3:6e:85:44:39:e2:9a:8a:1b:6b:46:
dc:4a:8d:24:02:c6:6d:5c:47:09:5c:ec:c6:fe:71:
fe:27:4f:d6:fd:73:10:2e:4f:41:28:ee:10:08:66:
fb:08:aa:70:b9:c0:0f:8f:b4:a6:f9:a5:9f:47:66:
52:92:29:bb:a2:9f:54:41:4a:45:d9:48:f4:de:28:
51:96:cf:d4:b3:8b:51:21:72:6b:96:8a:d2:3f:4a:
76:79:d0:9c:d3:1e:4d:45:e0:4e:01:4e:fb:f0:66:
b4:b4:0d:92:80:ff:4f:c6:ea:a1:62:81:12:f9:ec:
83:96:41:4c:8f:14:fc:8f:3c:ba:79:06:be:52:1d:
27:dd:74:6a:9e:6f:3f:06:27:17:2e:f3:f4:64:ee:
68:6b:2b:f6:33:e6:98:fb:33:af:9e:d8:79:10:f3:
ef:60:d4:2e:f8:91:d1:b7:b6:1f:29:cd:12:a7:5a:
bc:73:7e:10:b7:0c:14:06:ec:9f:6a:35:63:65:00:
56:bf:a0:a2:6d:bb:f7:e1:6f:06:3d:99:b8:35:3e:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0D:EA:9C:E0:E4:46:7B:73:DF:DE:CD:89:AB:6B:4C:94:42:C7:9F
X509v3 Authority Key Identifier:
keyid:68:4C:75:51:34:4C:E6:F4:24:04:9A:F4:D0:BE:6E:A2:B0:D6:5E:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/684C7551344CE6F424049AF4D0BE6EA2B0D65EC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684C7551344CE6F424049AF4D0BE6EA2B0D65EC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7Z7S3gF73AZu96ievSiLsGLUCvcjoRNjWGcFMfwfGw2/0/3139302e3131352e3230382e302f32322d3332203d3e20323730383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.115.208.0/22
Signature Algorithm: sha256WithRSAEncryption
63:01:75:ff:ba:cf:c8:d6:ad:19:c6:e2:df:c6:ed:4c:c1:03:
67:61:f1:6b:ad:bc:02:78:19:2f:6b:b7:8b:be:af:17:9a:c3:
2b:7f:f6:95:3b:02:ec:f7:4d:3e:c2:18:7f:c8:1c:c8:29:97:
91:9a:0c:30:a2:1c:16:ae:fb:59:ba:77:7a:59:5c:29:42:92:
12:68:9a:1f:92:9a:b8:70:c0:34:64:d9:34:cf:fc:3c:32:ba:
4b:37:38:15:41:d6:12:ca:3e:82:b8:07:1b:09:ec:11:58:44:
30:94:47:79:9a:94:b6:eb:51:b6:a3:55:0a:c0:7c:48:5b:b3:
e0:34:57:1f:86:51:7c:72:4a:7d:50:f4:cb:47:83:3a:31:32:
12:cd:c9:42:2e:ee:26:fc:bb:49:8d:06:2d:91:16:64:91:f2:
d2:0f:70:9a:79:b8:96:ac:a4:2b:18:c1:8b:92:53:3c:e4:83:
44:da:09:9c:51:b6:e9:8d:5c:bd:ba:9a:12:3a:28:ba:05:57:
fb:ef:d0:9f:ec:16:ce:d1:2b:ba:7c:4a:80:63:32:8a:b6:60:
c6:85:a7:1c:8f:4c:45:37:b7:21:65:a4:2f:ee:18:bf:15:c4:
1f:88:30:fd:c1:96:cf:7d:30:d4:12:a6:de:9d:47:2f:9e:9e:
fe:ab:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:59:57 2025 by rpki-client