Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa
File: 34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier: j2uzmp/MybpP+fu8x5fbWGR7XEVVFUb4V1Wuzi2I5UA=
Subject key identifier: BA:5D:DF:93:37:34:68:3D:E7:BB:B8:C9:D7:D6:06:DC:70:1B:19:2F
Certificate issuer: /CN=B889BE89077CF75CB3D33CA36A19B935046D749F
Certificate serial: 10E00C5E7EDCB1A5542B0F33C1F11400346F2083
Authority key identifier: B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa
Signing time: Fri 07 Feb 2025 17:17:35 +0000
ROA not before: Fri 07 Feb 2025 17:12:35 +0000
ROA not after: Fri 06 Feb 2026 17:17:35 +0000
asID: 267035
IP address blocks: 45.227.149.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e0:0c:5e:7e:dc:b1:a5:54:2b:0f:33:c1:f1:14:00:34:6f:20:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B889BE89077CF75CB3D33CA36A19B935046D749F
Validity
Not Before: Feb 7 17:12:35 2025 GMT
Not After : Feb 6 17:17:35 2026 GMT
Subject: CN=BA5DDF933734683DE7BBB8C9D7D606DC701B192F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:21:29:e9:20:51:57:5f:0f:9b:f9:ce:c8:
4c:79:82:b2:a3:db:7a:8b:55:34:8f:c7:5b:2a:7c:
d4:2f:d8:e6:99:9a:dd:ff:cf:67:6c:50:c6:1e:00:
1c:7a:2a:ab:61:79:29:43:e6:14:65:85:74:28:15:
c2:8e:b0:72:bb:d8:03:1d:2d:5f:b7:27:e3:ac:08:
f3:78:49:77:3b:88:d6:10:45:a1:ab:96:d3:43:16:
51:10:7d:71:15:27:00:40:39:25:83:59:a3:0e:56:
81:8f:09:30:f5:e4:66:2a:a9:f8:b2:6b:0c:98:d8:
d9:b3:31:59:20:6b:2e:bf:e5:c0:64:64:ae:43:d2:
58:c0:c6:26:86:ad:d8:76:6b:08:af:1a:ca:fb:16:
7e:17:29:48:3e:ed:ae:9e:ba:74:70:f4:15:2d:1f:
d3:16:e3:e3:eb:ee:14:9b:e3:56:97:c0:0b:68:5a:
ce:fe:cf:f4:dd:29:da:d2:7b:d9:eb:6b:6b:2f:73:
d5:63:d3:81:82:2e:6b:0f:44:bf:9d:83:0c:62:0e:
fe:d8:8c:d4:e9:09:f7:12:bf:6e:87:c6:7c:61:26:
db:20:40:a2:cb:c9:a6:48:da:62:9e:6a:bf:b3:a2:
f3:78:fa:d2:e9:7f:23:25:42:06:96:02:5f:a4:19:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5D:DF:93:37:34:68:3D:E7:BB:B8:C9:D7:D6:06:DC:70:1B:19:2F
X509v3 Authority Key Identifier:
keyid:B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B889BE89077CF75CB3D33CA36A19B935046D749F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.149.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b3:87:c0:15:0f:18:b5:1a:03:43:57:e3:5f:12:47:c9:e9:
d4:f8:08:18:ce:9d:b9:6e:d5:0b:4c:fd:81:08:7a:4e:6b:e5:
2d:40:84:84:e7:5a:9b:be:b8:34:53:4b:50:4e:37:ef:f4:6c:
3a:60:5d:70:5e:a1:ec:1d:92:b3:72:88:cd:90:b3:a5:09:fc:
61:6e:e0:81:0b:ac:7c:74:19:3f:ae:b8:3e:cb:e2:58:42:8a:
90:f8:97:5a:04:84:77:bb:fe:57:02:45:bc:d0:d0:e3:3a:2d:
fa:99:9b:3c:a5:7b:76:27:c8:b7:42:79:3c:74:42:4c:a6:d8:
ab:e1:9a:09:d0:e6:ba:9e:d5:1d:b6:e0:32:35:da:8b:8d:cf:
37:37:de:db:78:68:0e:54:8d:36:03:9b:a1:7e:67:da:b7:78:
9d:bd:3b:4d:24:73:6a:3c:75:24:aa:85:03:a7:9f:1a:7f:a4:
51:89:7f:9a:56:f1:8b:40:53:11:d4:93:a5:70:37:7d:51:41:
aa:06:52:20:50:96:02:ac:f8:52:47:b3:60:7b:11:01:5e:c3:
08:74:97:26:2b:52:2e:a8:50:ae:fb:bb:79:2e:f0:c8:9f:b8:
b6:c8:d9:30:56:d2:05:e2:02:ea:4c:5e:b9:3d:19:30:ef:ba:
69:e5:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:45:54 2025 by rpki-client