Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa
File: 3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa (raw, json)
Hash identifier: t8lyIGl6UGWFGtycW6DwCLY+0Sx2BB36+6n8sjjCVxo=
Subject key identifier: 9A:8D:D4:A9:E4:F0:99:CB:23:4B:F6:98:A3:6A:EF:84:78:87:EA:ED
Certificate issuer: /CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Certificate serial: 5C2A73588490F9F3891CE1AE9A6CB84A4C10FF85
Authority key identifier: C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa
Signing time: Mon 07 Apr 2025 20:01:47 +0000
ROA not before: Mon 07 Apr 2025 19:56:47 +0000
ROA not after: Mon 06 Apr 2026 20:01:47 +0000
asID: 270793
IP address blocks: 201.159.160.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2a:73:58:84:90:f9:f3:89:1c:e1:ae:9a:6c:b8:4a:4c:10:ff:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Validity
Not Before: Apr 7 19:56:47 2025 GMT
Not After : Apr 6 20:01:47 2026 GMT
Subject: CN=9A8DD4A9E4F099CB234BF698A36AEF847887EAED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:58:7e:7b:c4:6d:9d:e9:8e:ce:9c:d8:ff:
85:80:0a:49:ef:47:f8:eb:98:64:c3:c2:db:01:cb:
d8:c1:5b:f3:ad:63:b7:af:a7:d3:25:e7:24:35:f4:
23:25:e5:40:5e:b7:9c:06:72:1f:7a:b6:fd:45:c4:
7a:ce:19:22:85:38:84:db:84:be:64:69:30:c2:84:
4c:79:dc:fa:01:29:58:ca:3c:68:d2:f1:57:ab:f5:
a6:ed:0a:6b:76:5b:27:75:f7:9b:1a:15:40:a5:f2:
6c:8d:e2:09:9c:00:7b:00:be:02:3d:ac:76:1b:68:
19:58:19:a9:a7:8a:f8:eb:10:9f:82:d4:be:98:48:
d4:4a:13:97:51:fa:ea:c6:37:98:f9:61:98:4e:df:
e3:97:d5:ed:c5:75:01:1a:20:f3:f3:d0:56:34:f5:
58:0f:86:a9:b6:90:e7:77:3f:51:a8:e2:10:ce:c9:
4e:87:d3:93:17:70:e4:39:3a:c4:66:71:53:15:25:
0b:20:2b:fb:94:4e:98:50:bc:a8:77:e8:ca:22:a1:
a6:bc:59:a6:c1:f3:e4:99:91:d0:30:4c:89:a2:6d:
ab:fe:d2:c9:02:1b:48:4d:8c:10:f8:f6:c0:03:f7:
d3:ef:5d:d0:51:0f:09:56:3f:c1:04:5a:65:ba:66:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:D4:A9:E4:F0:99:CB:23:4B:F6:98:A3:6A:EF:84:78:87:EA:ED
X509v3 Authority Key Identifier:
keyid:C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.160.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:01:63:3f:b9:88:2c:fc:8d:03:57:e4:61:dc:14:e7:57:bf:
97:65:81:d4:c1:23:dc:9f:42:28:2f:18:92:04:5e:f7:10:a3:
cb:01:2a:ab:28:f5:17:48:0f:6c:66:71:d9:c9:85:b3:73:37:
7b:29:66:02:b8:6e:71:de:02:3b:60:bd:17:89:2c:9f:94:92:
a2:18:68:0f:36:31:a9:f5:14:e5:3c:6b:8d:f0:d3:b6:8f:29:
74:67:a7:7f:fe:37:33:59:02:4a:d0:1a:14:a6:dd:9c:64:96:
44:93:a2:6c:b9:84:8f:9c:25:16:d3:e5:28:dc:89:52:9c:0c:
d1:d5:e2:ca:a2:71:6e:9a:fe:60:26:7f:a8:6c:61:45:a8:7c:
8a:37:9b:c9:8b:4a:25:7b:dd:5d:fd:52:3b:22:82:f2:49:e7:
43:28:8a:96:c1:fa:11:44:e6:e8:70:54:1e:d1:90:da:6e:29:
b1:48:49:c4:4f:f6:b7:19:b7:35:b8:9b:ea:55:5d:72:95:c7:
2d:24:af:0f:e1:14:9d:59:c1:1a:66:7a:ac:55:d1:45:1c:34:
bb:85:28:72:41:30:a0:08:e4:dc:69:f0:9a:60:e8:cd:a0:07:
cb:86:b7:9a:01:57:47:d3:ff:88:ad:0a:ab:2d:f6:91:b8:ba:
e7:91:53:56
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXCpzWISQ+fOJHOGummy4SkwQ/4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhBOTIyRkVGRjI0NDFCMUY5MjEyRkZBODEyMjMxMjNB
MzJEQkU3OTAeFw0yNTA0MDcxOTU2NDdaFw0yNjA0MDYyMDAxNDdaMDMxMTAvBgNV
BAMTKDlBOERENEE5RTRGMDk5Q0IyMzRCRjY5OEEzNkFFRjg0Nzg4N0VBRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbVh+e8RtnemOzpzY/4WACknv
R/jrmGTDwtsBy9jBW/OtY7evp9Ml5yQ19CMl5UBet5wGch96tv1FxHrOGSKFOITb
hL5kaTDChEx53PoBKVjKPGjS8Ver9abtCmt2Wyd195saFUCl8myN4gmcAHsAvgI9
rHYbaBlYGamnivjrEJ+C1L6YSNRKE5dR+urGN5j5YZhO3+OX1e3FdQEaIPPz0FY0
9VgPhqm2kOd3P1Go4hDOyU6H05MXcOQ5OsRmcVMVJQsgK/uUTphQvKh36Moioaa8
WabB8+SZkdAwTImibav+0skCG0hNjBD49sAD99PvXdBRDwlWP8EEWmW6ZtqTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmo3UqeTwmcsjS/aYo2rvhHiH6u0wHwYDVR0j
BBgwFoAUyKki/v8kQbH5IS/6gSIxI6MtvnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1
bzMvMC9DOEE5MjJGRUZGMjQ0MUIxRjkyMTJGRkE4MTIyMzEyM0EzMkRCRTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QTkyMkZFRkYyNDQxQjFG
OTIxMkZGQTgxMjIzMTIzQTMyREJFNzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBdDNvYWJlaVB2VEFuNlNnVHdzUUtURHJrTDFiTWgzN3ZSUG9qWDhFdW8zLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzYzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM3MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcmfoDANBgkqhkiG9w0BAQsFAAOCAQEAiwFj
P7mILPyNA1fkYdwU51e/l2WB1MEj3J9CKC8YkgRe9xCjywEqqyj1F0gPbGZx2cmF
s3M3eylmArhucd4CO2C9F4ksn5SSohhoDzYxqfUU5TxrjfDTto8pdGenf/43M1kC
StAaFKbdnGSWRJOibLmEj5wlFtPlKNyJUpwM0dXiyqJxbpr+YCZ/qGxhRah8ijeb
yYtKJXvdXf1SOyKC8knnQyiKlsH6EUTm6HBUHtGQ2m4psUhJxE/2txm3Nbib6lVd
cpXHLSSvD+EUnVnBGmZ6rFXRRRw0u4UockEwoAjk3GnwmmDozaAHy4a3mgFXR9P/
iK0Kqy32kbi655FTVg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:51:19 2025 by rpki-client