Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa
File: 3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa (raw, json)
Hash identifier: D4LFZh5TEkJX8WwbEQ6sdmD+bJCKQadVtkf7Gb95RLo=
Subject key identifier: D5:3B:87:45:92:D9:62:A1:4D:B4:E6:E9:27:32:D1:DA:A1:C1:77:96
Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
Certificate serial: 30952529066F64636571178B8131C58E5355FB77
Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa
Signing time: Mon 20 May 2024 19:23:06 +0000
ROA not before: Mon 20 May 2024 19:18:06 +0000
ROA not after: Mon 19 May 2025 19:23:06 +0000
asID: 263445
IP address blocks: 177.91.164.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:95:25:29:06:6f:64:63:65:71:17:8b:81:31:c5:8e:53:55:fb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E
Validity
Not Before: May 20 19:18:06 2024 GMT
Not After : May 19 19:23:06 2025 GMT
Subject: CN=D53B874592D962A14DB4E6E92732D1DAA1C17796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:eb:48:34:2b:7e:c8:d1:7b:47:6a:11:3f:
f5:61:b6:99:0f:91:2b:22:ed:b9:f6:31:c0:86:ae:
e2:3c:04:01:38:e2:1c:32:3e:93:c9:d5:58:35:46:
d6:9d:79:34:c4:5b:2b:9f:61:97:5c:a3:d4:63:19:
f1:88:c0:57:f1:15:f1:af:3f:37:fc:ba:23:51:77:
a9:d1:07:4b:f8:eb:84:0e:c3:bd:00:24:7d:f1:b7:
d4:4b:55:8c:83:d2:f0:99:05:20:39:d1:03:d9:c3:
8f:e3:ff:2b:4b:64:45:ca:de:0c:a5:c8:9a:63:26:
70:28:de:d8:68:2d:00:5c:7a:a0:c8:61:46:be:72:
91:22:73:29:47:5f:71:e4:c2:c7:b5:72:23:ea:76:
73:34:0a:aa:23:64:c0:61:6f:62:83:e6:2f:f2:0b:
33:ef:15:b2:89:7a:7f:c6:8f:e8:c3:a9:4c:9e:94:
78:8b:fc:24:32:2a:b9:46:65:71:c8:95:b0:c0:ee:
4b:d2:1e:8d:5b:51:59:97:55:bf:1f:59:f5:9c:b5:
84:e5:13:94:3d:84:ea:52:b8:fd:9e:2e:32:bb:7c:
e1:87:62:32:d7:5b:95:4c:6e:d5:72:66:44:6f:cb:
6c:e5:bb:e0:d7:09:d7:0f:66:4c:b6:27:01:6b:04:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:87:45:92:D9:62:A1:4D:B4:E6:E9:27:32:D1:DA:A1:C1:77:96
X509v3 Authority Key Identifier:
keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.91.164.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:2d:b3:4e:f6:a9:29:d3:f5:de:e4:31:75:28:03:6c:10:56:
6c:af:55:ca:78:85:eb:6e:33:d5:19:bf:6c:1f:82:fa:62:bb:
d0:86:47:86:e3:47:84:ca:d9:d6:89:50:72:64:0a:20:29:76:
46:52:32:4e:12:bb:1f:af:10:f0:d8:62:14:81:3c:91:15:22:
ae:0c:3c:9d:64:7d:4b:2b:a8:0b:19:1b:bd:ff:a9:d9:b2:0a:
54:34:fd:24:72:90:8f:67:c6:59:1e:c4:54:83:24:e8:b8:1f:
56:0d:68:38:61:1c:53:02:98:37:6b:c4:25:bd:38:e6:22:14:
08:b7:40:45:39:9d:c2:ab:f0:27:ce:70:b0:ed:91:72:a4:c1:
13:be:8e:ee:5d:7e:93:c4:82:38:cc:15:74:73:b0:3b:c8:5e:
5f:f7:44:5d:35:61:bc:c8:b0:12:1d:0d:1b:48:2a:19:36:5b:
a0:cb:16:93:9b:5f:29:34:bc:b2:85:1b:c9:cd:07:5f:8b:9c:
7b:84:a6:49:9c:86:f8:12:cd:d9:68:72:65:1a:82:cf:f1:62:
92:38:7f:de:09:16:0a:2b:fd:d8:36:25:5c:3f:83:3e:c8:b1:
43:cc:7e:ac:dc:0b:75:34:cf:5e:d6:e0:4b:32:23:9e:86:60:
50:c1:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:56 2025 by rpki-client