Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa
File: 3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa (raw, json)
Hash identifier: 6Z2esfVr8s9MXFSgVr3EGBTrzDPCGCERiVfOtYbPGok=
Subject key identifier: 05:73:E2:38:80:09:C3:BA:3A:8D:F7:B5:EB:ED:22:F2:95:FF:FD:FE
Certificate issuer: /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial: 64D2977C474DE2951713C6799279D6C06D9C9601
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access: rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa
Signing time: Fri 17 Jan 2025 18:13:58 +0000
ROA not before: Fri 17 Jan 2025 18:08:58 +0000
ROA not after: Fri 16 Jan 2026 18:13:58 +0000
asID: 271673
IP address blocks: 201.218.190.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d2:97:7c:47:4d:e2:95:17:13:c6:79:92:79:d6:c0:6d:9c:96:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Validity
Not Before: Jan 17 18:08:58 2025 GMT
Not After : Jan 16 18:13:58 2026 GMT
Subject: CN=0573E2388009C3BA3A8DF7B5EBED22F295FFFDFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:1c:38:55:48:a9:cc:fc:b3:4a:95:7a:4d:
c1:c6:74:56:58:89:3b:e4:32:f6:e3:ad:91:2b:2d:
32:cf:30:4b:2f:a8:85:81:40:ee:e7:90:2d:9c:50:
e3:be:14:38:37:c3:fe:f8:03:7f:e4:8a:c8:35:10:
fc:f5:28:86:77:7a:47:16:7f:c5:4b:7f:08:a8:39:
1e:a1:00:68:ca:60:05:57:fc:44:8a:e5:c1:d4:dc:
e9:7a:91:38:7a:10:54:d8:4c:37:c3:ca:89:79:6b:
d1:63:2d:b0:7e:c2:bc:98:d5:0b:fe:c2:dd:5d:cb:
9d:2c:56:b0:c7:73:85:28:50:f7:35:65:77:fc:37:
1a:a0:be:30:e0:b9:02:58:6b:e0:38:bb:b3:9e:ff:
4b:d2:30:a8:1d:c9:7f:ad:23:bc:e9:b6:23:a1:c9:
b9:a8:0c:c9:e5:fe:35:2e:36:7d:06:5d:62:44:d7:
1e:25:96:46:59:d9:31:be:57:f3:23:8c:44:2f:23:
81:33:28:f7:31:83:01:9b:c6:db:e6:c5:5d:28:7a:
f6:18:0e:5a:8a:aa:03:05:fc:24:25:ba:9a:fc:e3:
fd:f7:5e:48:39:18:9d:9d:5e:88:90:42:27:2d:7a:
58:bb:e2:bc:ac:ff:75:70:5f:3f:89:01:41:d6:b2:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:73:E2:38:80:09:C3:BA:3A:8D:F7:B5:EB:ED:22:F2:95:FF:FD:FE
X509v3 Authority Key Identifier:
keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32342d3234203d3e20323731363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:90:4d:13:e8:71:41:aa:4f:1f:94:6b:dd:f1:e0:6e:3c:23:
88:03:80:ad:f6:38:b8:45:73:61:59:91:8c:70:1e:85:5b:03:
b0:a6:14:b8:0f:d9:f3:e3:e7:10:74:05:5b:24:35:1d:3a:58:
f6:37:f0:a9:33:21:a1:0e:ba:45:7c:d6:9d:cc:7c:07:38:6a:
1b:6a:d5:77:1d:1b:29:c3:77:5e:dd:b9:03:a8:f9:55:1c:bd:
7c:2e:d5:39:0e:8a:41:60:15:46:92:f0:b8:2a:82:c0:ba:dc:
a3:08:73:a0:b4:25:a5:9b:10:68:ff:6d:fd:5a:d5:27:cd:17:
59:4c:78:29:5a:b3:e2:3f:9a:74:48:8f:7c:ce:c0:cc:64:7f:
49:1f:be:97:0c:30:9c:28:8e:66:08:a6:23:ea:eb:85:4a:61:
35:c1:37:fb:04:bb:1c:23:3d:57:f5:77:14:d2:f7:da:54:cc:
31:82:2d:6b:bd:81:5e:3b:2e:3f:c7:b0:01:53:c7:91:1b:4a:
d7:ec:dd:19:5e:30:d7:8a:2c:e2:a8:ca:49:e9:71:6f:b2:6b:
e6:db:5c:9c:db:43:75:a2:42:52:b5:4d:39:38:0c:1d:34:55:
09:52:bb:9c:08:02:a1:fc:72:ec:8c:42:38:a1:dc:ef:a8:b1:
0c:8b:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:21 2025 by rpki-client