Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135322e302f32312d3231203d3e20323633353230.roa
File: 3137372e3132362e3135322e302f32312d3231203d3e20323633353230.roa (raw, json)
Hash identifier: Q5NQ8AMW10Fs+wfO/5JcP/89OxG39femgPsGT9/YzI8=
Subject key identifier: C8:FD:32:54:A1:27:20:42:1B:14:54:FF:09:14:3B:7D:4F:B2:A0:66
Certificate issuer: /CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Certificate serial: 533689164213D7F4F46D5E1B9186C2A148A342AC
Authority key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135322e302f32312d3231203d3e20323633353230.roa
Signing time: Thu 15 Aug 2024 18:40:31 +0000
ROA not before: Thu 15 Aug 2024 18:35:31 +0000
ROA not after: Thu 14 Aug 2025 18:40:31 +0000
asID: 263520
IP address blocks: 177.126.152.0/21 maxlen: 21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:36:89:16:42:13:d7:f4:f4:6d:5e:1b:91:86:c2:a1:48:a3:42:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Validity
Not Before: Aug 15 18:35:31 2024 GMT
Not After : Aug 14 18:40:31 2025 GMT
Subject: CN=C8FD3254A12720421B1454FF09143B7D4FB2A066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:d6:bd:ec:7d:5f:f2:80:bc:07:70:89:fd:
8f:26:9c:8c:d2:5b:cd:f5:06:5b:d2:f2:2d:9e:af:
01:0f:82:41:03:6e:8c:d7:0a:0d:de:55:c4:c8:36:
5b:73:26:e8:69:3c:c4:6e:a1:00:6b:1f:9e:c6:92:
86:bd:4d:95:aa:3d:89:04:a6:64:d0:c7:01:9e:93:
1d:1f:6d:c6:70:32:e6:7d:e9:cb:1e:fc:93:5f:7d:
61:81:ad:cd:e8:b1:6b:38:de:8d:43:80:df:9e:33:
21:88:1d:7d:11:60:45:49:dd:8e:f8:e8:86:45:df:
59:a3:ad:9e:20:d2:54:37:2a:a9:1c:aa:5b:78:aa:
28:2f:82:d0:bd:dc:90:9f:01:75:fb:57:96:f8:73:
5e:2d:12:7b:f7:3d:33:d2:38:97:19:69:29:99:91:
e8:5b:f5:61:d4:1b:57:70:77:86:67:d5:09:dd:9d:
c7:cc:f4:dc:f4:e6:b2:e0:88:a5:e0:9b:b6:53:01:
c8:99:f3:1e:58:c3:2c:65:42:73:ce:98:68:65:9b:
47:65:f0:8d:09:fa:ba:8e:ec:03:4d:4a:4b:06:47:
08:27:83:7d:3f:4a:b1:87:a9:f5:97:33:af:4c:c4:
36:7f:2c:61:df:15:e4:6e:fa:4a:c6:9c:b3:6b:e0:
c0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:32:54:A1:27:20:42:1B:14:54:FF:09:14:3B:7D:4F:B2:A0:66
X509v3 Authority Key Identifier:
keyid:DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135322e302f32312d3231203d3e20323633353230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.126.152.0/21
Signature Algorithm: sha256WithRSAEncryption
96:63:5e:fc:f9:15:03:c5:f3:5f:5d:4a:a4:03:8f:02:87:41:
13:66:44:7a:15:5f:61:59:06:70:48:20:d6:89:b2:9a:32:ff:
cd:af:83:06:35:14:16:73:0a:02:e7:4b:8d:0c:f0:92:d3:5a:
32:b3:f8:20:be:01:8b:47:89:ed:bf:70:0b:cf:ee:0a:29:ab:
5e:16:eb:93:34:45:ea:fd:d6:71:ad:20:e1:ce:66:1e:be:c4:
38:a3:de:a1:b6:86:ae:b3:59:7d:1f:cb:9f:60:97:77:1d:9d:
67:69:11:ab:60:28:b6:7e:e9:2c:ba:9f:b7:cf:57:81:af:bf:
11:70:80:aa:d9:58:73:64:82:11:98:49:23:a4:81:25:f6:27:
88:2c:3e:1a:a8:50:0a:e7:c2:3e:ae:8a:2e:c5:ab:83:c3:31:
bd:e6:67:cb:56:ba:d8:23:38:8e:96:0d:f1:ce:75:68:3c:5f:
de:f3:74:eb:46:18:98:16:72:c1:1c:98:91:67:7a:56:a9:3f:
76:e9:40:57:45:09:78:cf:e3:ae:bf:7f:b9:07:e9:d7:0d:65:
ca:9c:63:e8:53:fc:93:ce:ac:d8:f9:60:f0:a6:3e:31:9d:87:
ab:6d:78:15:b2:4c:7d:2a:0e:46:b7:52:b1:ad:a6:87:47:ff:
16:8d:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:17 2025 by rpki-client