Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
File: 3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: Hw5OppDUQMe2TzMT20L/HLeZ8QvvNVS4UNAPSuctJWM=
Subject key identifier: 1A:82:78:3B:FA:BE:27:32:D5:07:46:5B:3F:AF:53:98:F0:8B:C0:2F
Certificate issuer: /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial: 60A5A814132176A06596F58085229D5F50CA487C
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
Signing time: Wed 04 Dec 2024 15:42:38 +0000
ROA not before: Wed 04 Dec 2024 15:37:38 +0000
ROA not after: Wed 03 Dec 2025 15:42:38 +0000
asID: 53153
IP address blocks: 186.209.104.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a5:a8:14:13:21:76:a0:65:96:f5:80:85:22:9d:5f:50:ca:48:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Validity
Not Before: Dec 4 15:37:38 2024 GMT
Not After : Dec 3 15:42:38 2025 GMT
Subject: CN=1A82783BFABE2732D507465B3FAF5398F08BC02F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:f1:83:15:32:b0:a5:43:bf:f7:f0:1c:9a:
e6:78:39:da:8a:4b:50:32:4e:78:05:0c:21:de:68:
16:66:af:6a:85:24:71:60:0b:fe:58:4f:df:3e:c6:
01:35:75:90:70:6a:3b:d7:b6:29:da:83:a7:51:67:
fc:de:cc:18:a9:e7:e0:bc:7b:89:64:5c:96:fe:d5:
de:b1:d3:38:dc:75:7a:52:68:59:22:2d:d7:8a:d8:
85:e4:25:42:83:4a:12:3e:42:87:12:80:52:f3:2c:
bd:ec:53:6a:99:50:71:b4:17:80:50:2e:73:d9:39:
71:34:f7:17:ab:11:64:4a:e4:78:ff:8c:60:15:27:
99:1a:60:9d:2f:ef:08:2a:fe:2c:6c:8d:b1:34:25:
d5:6c:db:e8:c3:c0:c8:36:c3:ec:42:c7:fb:89:fe:
cc:3a:fd:e6:99:31:d0:e5:eb:e7:a2:05:81:6e:64:
08:d6:17:2a:76:2f:b8:85:d8:52:35:7d:b6:6a:a3:
82:de:c4:ec:26:f9:a3:c5:7b:56:73:be:74:35:c4:
8f:be:37:02:78:c8:32:9d:7d:5b:b8:7c:ee:92:4b:
fb:0a:fa:81:6e:09:05:8a:fa:89:71:bd:de:b1:77:
3f:f5:63:64:15:9e:2e:4b:81:5e:73:f6:c9:dd:a6:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:78:3B:FA:BE:27:32:D5:07:46:5B:3F:AF:53:98:F0:8B:C0:2F
X509v3 Authority Key Identifier:
keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.104.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:52:cf:47:38:cf:21:21:fa:0c:7e:cf:37:3b:5f:b8:e4:08:
13:3e:d8:6b:be:05:1b:2b:31:7c:6a:70:22:64:05:ab:52:c2:
7e:2e:c5:b5:19:7a:48:9e:e3:6b:e2:b1:a6:13:a6:6c:e4:68:
f6:cb:32:96:2b:42:07:20:72:57:65:86:e4:ae:9c:42:6d:af:
47:bf:c7:50:3c:eb:a4:90:0a:d0:72:ef:5c:ee:18:61:92:73:
09:b6:f3:fe:41:37:c3:be:00:80:0c:8f:09:96:ec:aa:86:92:
68:e6:df:e7:eb:67:7b:20:3f:18:88:ca:03:7b:c9:1b:2a:0e:
aa:5c:30:5b:8d:c5:2f:49:7c:9c:b0:b4:a9:68:56:57:2c:92:
b3:7a:b7:84:9d:3e:f0:2b:4f:62:63:e9:8b:a4:eb:96:12:b5:
cf:2d:8e:4c:9e:3e:e7:c7:ab:a0:11:f9:c0:48:38:07:f0:20:
f6:bb:07:c5:1f:4d:75:e7:e9:5f:37:ca:35:9a:87:f2:1a:81:
97:56:62:bb:31:46:98:3c:07:7f:a5:eb:83:08:fd:fb:42:12:
e5:2e:80:33:62:4d:8d:11:a6:51:4c:46:63:13:79:c6:0c:92:
da:f4:55:1d:c6:b0:5e:82:18:88:96:6f:ee:5c:72:1a:f0:3e:
e0:f4:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:03:52 2025 by rpki-client