Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
File: 3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa (raw, json)
Hash identifier: tgESvBp/KUEWpZwMiNdesFWAdFP81oBbf4Kzc7TWEx4=
Subject key identifier: E9:2E:FA:36:53:5D:E7:BC:E0:C7:81:77:46:D1:E5:E9:3B:0A:42:A0
Certificate issuer: /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial: 41F0DE0DBC3FC53B7D3E58DEB2BDAF504CDD75C5
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
Signing time: Mon 07 Apr 2025 15:27:18 +0000
ROA not before: Mon 07 Apr 2025 15:22:18 +0000
ROA not after: Mon 06 Apr 2026 15:27:18 +0000
asID: 264915
IP address blocks: 168.228.221.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f0:de:0d:bc:3f:c5:3b:7d:3e:58:de:b2:bd:af:50:4c:dd:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Validity
Not Before: Apr 7 15:22:18 2025 GMT
Not After : Apr 6 15:27:18 2026 GMT
Subject: CN=E92EFA36535DE7BCE0C7817746D1E5E93B0A42A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:c7:3f:cf:fa:28:23:d2:69:f6:0c:4b:25:
5d:ee:e2:6b:48:a6:41:54:a3:d7:96:0d:47:53:a1:
81:ec:36:15:9e:5e:ab:91:d2:f0:22:2b:1f:24:69:
5c:63:12:b7:8b:a4:b9:d8:a0:9a:77:88:46:7f:20:
3c:01:a2:41:91:e9:f4:92:1d:12:3f:e5:66:35:14:
cf:db:42:ed:15:9d:1f:2e:21:d8:bb:b5:98:56:5f:
89:6f:d8:80:59:ba:15:90:5c:31:25:7e:c3:3b:8e:
13:ba:bb:ea:ed:c7:11:2a:9c:b1:3c:91:d2:a2:fd:
40:ef:96:23:75:b7:fe:64:d3:a8:d9:48:55:96:7c:
4c:af:8b:3b:41:93:ca:9f:65:bd:2e:c6:52:3f:cd:
c3:77:9c:c1:4f:00:bd:40:b9:1e:ab:0c:a2:99:76:
f9:99:84:b2:72:2f:ce:13:15:80:2f:03:7b:e6:89:
c0:12:cb:d5:ba:c4:84:a9:2a:28:9d:d7:17:3f:a8:
38:05:8e:a7:44:56:b6:53:d8:05:b0:5d:e1:02:e1:
72:f1:bb:1a:2c:a1:e5:5c:b3:56:f0:00:56:3e:88:
f3:9c:16:86:95:48:2d:b3:68:9b:68:6e:58:8e:e6:
20:1d:37:87:c3:aa:80:3f:fb:e4:f0:29:ec:af:33:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2E:FA:36:53:5D:E7:BC:E0:C7:81:77:46:D1:E5:E9:3B:0A:42:A0
X509v3 Authority Key Identifier:
keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232312e302f32342d3234203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.221.0/24
Signature Algorithm: sha256WithRSAEncryption
26:90:ac:b7:07:97:24:06:9f:36:9a:72:57:d9:6a:2e:4d:77:
00:bd:11:52:4d:a4:75:11:a0:9a:53:a9:f3:e1:46:c0:12:3f:
70:e4:ba:7f:95:15:3d:6b:e4:db:c7:9e:88:59:54:40:35:c2:
bd:b5:b1:77:7a:4a:57:ff:41:1e:43:2f:f8:fd:f7:4b:4d:92:
91:33:4d:e5:a2:bf:eb:95:6d:a8:1c:aa:4b:74:ff:e4:cf:52:
3a:75:56:20:84:c3:b2:f5:66:5c:e5:2a:3f:89:ed:31:24:22:
c2:e5:d3:f4:5f:19:ac:13:9b:11:0e:2d:a4:91:1b:bf:67:f5:
ff:18:7b:c5:9b:67:c7:e1:d7:b7:a0:0f:01:d7:f2:ad:61:80:
88:da:86:98:ba:63:61:7d:42:b2:3f:ca:b2:a1:fc:3e:c2:04:
a6:ee:c8:fa:e0:ca:ac:d7:72:0c:80:f6:15:64:cc:94:d5:4c:
17:c4:9e:89:9e:50:84:bf:a4:12:56:35:12:c3:5e:66:d5:30:
40:d0:dd:43:2c:af:6b:ba:86:7b:2e:12:94:c4:9e:40:86:66:
fa:08:b4:f5:cc:f1:5c:d6:f2:19:3c:8b:4f:85:b3:68:dd:aa:
d4:39:da:62:7c:ea:52:59:da:83:f2:59:19:57:79:32:45:c8:
b4:9f:ee:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:27:07 2025 by rpki-client