Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa
File: 3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier: /9OJ+mF4Wp8Oq0nYxSjBeVHNSoaZV9OizbRzZKYK+qA=
Subject key identifier: B5:56:89:93:36:4A:17:4C:0E:B5:31:FF:61:ED:DF:4F:23:6D:A5:0C
Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial: 22A50949B154F66469433BCFED6E88E4A60C2351
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa
Signing time: Fri 07 Feb 2025 06:07:30 +0000
ROA not before: Fri 07 Feb 2025 06:02:30 +0000
ROA not after: Fri 06 Feb 2026 06:07:30 +0000
asID: 266178
IP address blocks: 138.97.144.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a5:09:49:b1:54:f6:64:69:43:3b:cf:ed:6e:88:e4:a6:0c:23:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Validity
Not Before: Feb 7 06:02:30 2025 GMT
Not After : Feb 6 06:07:30 2026 GMT
Subject: CN=B5568993364A174C0EB531FF61EDDF4F236DA50C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:50:b0:99:7f:03:49:de:2c:30:85:7c:f9:
60:6d:9f:73:42:6c:fc:d8:4d:d1:55:ca:0f:00:0f:
8c:1c:d5:1f:87:d5:13:55:a8:09:90:4b:57:49:de:
e7:c0:99:11:70:ae:55:95:7a:06:b9:ba:91:0c:f3:
99:59:c6:96:76:80:33:e1:44:27:fc:01:b5:49:16:
78:13:c2:63:f5:1c:0e:7e:10:6d:62:95:01:1d:32:
9f:1d:7a:fd:bd:3d:9c:f1:0d:2b:90:37:32:44:fa:
38:c0:9f:67:97:2e:9b:6d:f6:7e:48:06:6b:42:40:
55:ee:35:31:42:70:a9:ec:cf:69:3e:ca:d1:17:c5:
9c:f7:f4:56:10:d0:b8:0a:d2:ec:53:2a:2c:d4:1f:
f4:b0:8d:f3:b1:48:cc:46:68:3a:c8:b9:c8:8e:cd:
ed:ba:3e:50:1d:46:14:8f:89:68:6b:1a:34:91:9c:
49:26:f7:be:5e:3a:ae:13:7f:35:dc:c5:1f:71:ff:
d3:c7:d6:4d:15:2d:f0:a4:db:bf:41:11:eb:c4:91:
f1:c6:34:77:eb:73:a2:cb:87:c2:bf:70:85:63:a9:
2f:95:1b:c6:9a:90:62:49:41:de:b5:1d:e9:34:4b:
e0:2e:1d:34:53:de:a6:af:7a:b0:e6:5d:7c:a7:37:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:89:93:36:4A:17:4C:0E:B5:31:FF:61:ED:DF:4F:23:6D:A5:0C
X509v3 Authority Key Identifier:
keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134342e302f32342d3234203d3e20323636313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.144.0/24
Signature Algorithm: sha256WithRSAEncryption
92:90:a2:11:02:87:95:fb:60:1f:70:45:79:00:d0:52:9f:a0:
f1:65:11:73:c4:ba:1b:46:ba:60:68:67:e2:f1:72:b4:39:4a:
5d:64:f3:85:d5:f0:99:1f:cf:c4:f0:2c:b5:d1:61:5e:2c:4a:
de:f1:60:df:f9:ee:8f:e9:36:07:ef:21:e6:e1:27:0c:4c:e7:
a4:1d:8d:f6:0f:54:83:7d:bd:fb:d8:61:5d:72:c0:5a:e5:7c:
7d:07:31:58:71:05:7f:3e:9d:13:7f:8d:5b:9d:5e:03:ae:82:
2f:9b:c7:e4:59:e5:78:d5:aa:9b:0e:e2:ff:78:10:dc:75:59:
aa:3b:f8:8f:0e:e2:ff:36:db:40:28:89:ad:9a:73:c0:27:02:
30:92:79:a4:e6:ee:02:9e:82:80:ca:06:49:db:ec:fb:ca:3a:
17:dd:69:71:9a:bc:a1:89:08:5e:45:69:44:2e:50:61:dc:b0:
66:c4:93:da:a1:4a:43:7e:c3:52:88:66:ff:6e:ba:e5:62:31:
5f:a1:20:cc:4e:8a:74:f3:ec:ea:0d:7e:fc:65:ac:70:a6:6f:
9a:c6:8f:bc:bb:23:47:32:c3:89:07:e6:3b:02:17:e2:f4:7b:
95:54:9f:f4:c9:39:dd:5e:ad:8a:c6:f9:20:eb:31:2c:95:99:
d9:50:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:05 2025 by rpki-client