Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32322d3232203d3e20323635303238.roa
File: 3137302e3234352e38342e302f32322d3232203d3e20323635303238.roa (raw, json)
Hash identifier: 16RKgJ8ap2KFKM2hR8jcXvDhA0XrUWyLgIjJx37zouQ=
Subject key identifier: 03:A9:6A:29:3A:DD:9B:5B:98:2C:83:FB:06:F8:F4:7D:F8:1B:B6:35
Certificate issuer: /CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Certificate serial: 40B3D9497299CBF19E361191D740592B3DD506D9
Authority key identifier: D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32322d3232203d3e20323635303238.roa
Signing time: Wed 09 Apr 2025 13:41:25 +0000
ROA not before: Wed 09 Apr 2025 13:36:25 +0000
ROA not after: Wed 08 Apr 2026 13:41:25 +0000
asID: 265028
IP address blocks: 170.245.84.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b3:d9:49:72:99:cb:f1:9e:36:11:91:d7:40:59:2b:3d:d5:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Validity
Not Before: Apr 9 13:36:25 2025 GMT
Not After : Apr 8 13:41:25 2026 GMT
Subject: CN=03A96A293ADD9B5B982C83FB06F8F47DF81BB635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:d0:a2:ba:b5:ab:de:49:55:28:10:17:88:
15:0b:58:b0:77:dc:ce:5c:0a:12:ac:d7:a7:90:7c:
d4:35:ab:b4:fb:ac:ef:f8:05:3a:57:8e:95:02:62:
e9:c2:81:e7:22:4d:2a:06:4b:18:11:27:d6:49:7c:
db:47:93:03:57:2c:ad:c2:01:ac:5f:32:8f:16:14:
32:3e:14:55:42:fe:6f:cd:b8:37:0f:e8:6e:18:e6:
52:2b:bf:b8:48:d7:35:2a:70:d8:4a:32:12:9d:44:
31:19:5e:50:11:c4:b8:31:3d:70:47:6e:ac:21:f3:
aa:a8:db:ad:a8:07:54:b5:c7:1a:8b:58:08:56:f1:
fa:b7:95:5a:2e:3f:2a:c1:c9:3c:94:31:9e:8c:99:
5f:80:f7:56:6d:66:7a:7d:39:31:a2:59:fc:b4:dd:
3c:86:11:e4:19:fd:fd:f8:33:5b:19:cb:3a:42:90:
a4:02:c8:0d:e1:b1:66:3a:67:b5:5d:b1:e7:a1:d9:
76:ff:cc:f2:cb:8b:6e:de:28:fd:bc:57:fb:b5:77:
32:80:d9:c0:2f:b2:51:6c:5b:1d:bd:62:b4:9f:3e:
39:cb:5a:56:49:55:16:e7:e6:44:97:98:7f:ee:48:
cf:6d:52:43:68:34:d5:f0:69:fc:17:67:9b:a3:34:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A9:6A:29:3A:DD:9B:5B:98:2C:83:FB:06:F8:F4:7D:F8:1B:B6:35
X509v3 Authority Key Identifier:
keyid:D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32322d3232203d3e20323635303238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.84.0/22
Signature Algorithm: sha256WithRSAEncryption
97:c2:8e:d2:54:b3:ec:9a:d3:f6:6b:2c:9f:c6:20:4b:4a:4f:
14:21:6d:37:b4:cf:1c:c6:ab:12:2d:02:d9:5a:41:0e:a5:24:
b8:6f:95:f8:44:53:8f:67:0a:d4:5b:a0:d1:c1:c1:91:c1:94:
2f:9e:b8:67:7f:2c:1f:c9:95:71:f8:31:3d:6d:47:7d:21:aa:
32:92:6e:3b:9b:6e:23:60:2e:e3:8c:4b:d5:a1:db:0e:ba:2b:
d9:bd:54:4e:24:69:76:b9:04:41:26:dc:92:cc:00:bc:87:12:
ab:fb:74:a1:9d:d1:85:49:cc:43:c1:44:78:1f:23:1f:18:dc:
27:dd:4a:56:58:5f:44:ac:eb:90:c0:5d:91:32:e3:d5:f1:8a:
01:0c:9e:a9:ec:b9:36:09:88:99:0e:c3:d5:ce:50:a4:c7:a4:
a6:c8:e5:b8:06:9c:14:ee:1f:26:e9:be:a3:42:3b:1f:e0:31:
5a:26:be:bb:79:39:93:05:d2:c4:f0:ec:24:e7:b3:d4:b8:bd:
46:74:38:69:8d:d7:08:5a:6d:ec:ee:f2:b3:f0:9a:67:7d:00:
b7:f8:b7:2b:fd:12:d0:1c:da:4b:db:62:0a:c0:43:47:0c:0d:
db:b9:3e:96:fe:e3:95:92:99:d4:75:16:2d:39:13:0c:86:23:
01:21:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:02:45 2025 by rpki-client