Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32322d3234203d3e20323635303238.roa
File: 3137302e3234352e38342e302f32322d3234203d3e20323635303238.roa (raw, json)
Hash identifier: 8hXKQaSWy633aKrsv0+uVtiv/vhWBkT7p7LaJ8Nh7fU=
Subject key identifier: D8:69:8C:84:09:23:05:BA:F5:AF:CF:0C:A5:43:E6:DE:FC:58:54:32
Certificate issuer: /CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Certificate serial: 3DD09940D936E3B8C9197421A58049B2F71D3669
Authority key identifier: D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32322d3234203d3e20323635303238.roa
Signing time: Wed 09 Apr 2025 19:56:18 +0000
ROA not before: Wed 09 Apr 2025 19:51:18 +0000
ROA not after: Wed 08 Apr 2026 19:56:18 +0000
asID: 265028
IP address blocks: 170.245.84.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d0:99:40:d9:36:e3:b8:c9:19:74:21:a5:80:49:b2:f7:1d:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Validity
Not Before: Apr 9 19:51:18 2025 GMT
Not After : Apr 8 19:56:18 2026 GMT
Subject: CN=D8698C84092305BAF5AFCF0CA543E6DEFC585432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:ca:39:96:d3:70:c4:a6:c4:92:f2:c3:58:
5e:82:f7:cc:2b:4a:fa:12:95:d5:a4:79:8d:43:94:
c1:25:91:0c:ec:50:73:ac:cd:22:e6:f4:c0:43:f1:
b3:8a:da:40:04:ac:3a:2b:f0:f3:cb:0e:71:ad:ee:
af:e3:27:26:ae:8c:eb:c7:d7:12:48:69:73:01:67:
6c:db:e0:97:7d:e3:0f:e8:af:25:e4:34:8d:1f:93:
9d:23:34:e2:10:41:88:a7:f3:3a:f5:15:1c:eb:a0:
b9:29:2e:77:52:b1:23:d2:ba:ad:c1:c0:88:51:c9:
be:68:1b:4d:98:55:fa:24:4d:84:55:21:36:4a:3e:
0e:10:66:db:cd:15:c1:09:e4:7b:b8:cf:3c:1e:7e:
0e:bd:25:0e:be:33:32:c6:46:30:b7:cd:e0:2e:7f:
48:9c:45:f4:e8:44:99:53:2b:28:21:a8:d6:57:d8:
22:18:7f:af:45:ae:90:aa:a6:2b:9b:cf:77:4d:e9:
7f:74:9a:83:81:f8:9b:96:6a:df:4c:e9:d8:d4:55:
12:cc:49:1e:46:b7:54:bb:2c:ee:b7:18:b8:9c:e1:
82:db:30:8c:43:96:b2:53:7f:d6:72:b8:51:c0:de:
a6:c5:d8:63:b2:12:04:a8:f5:0a:dc:a9:9c:ef:57:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:69:8C:84:09:23:05:BA:F5:AF:CF:0C:A5:43:E6:DE:FC:58:54:32
X509v3 Authority Key Identifier:
keyid:D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e3234352e38342e302f32322d3234203d3e20323635303238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.84.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:3b:8f:80:d3:48:82:61:89:4a:67:b8:14:c6:95:33:2f:00:
cc:2e:d3:17:64:b3:9c:4c:f2:13:be:30:a8:67:a2:9d:67:1b:
fb:c4:bb:7d:58:3e:6d:98:dd:95:74:f4:04:68:8b:ba:df:7b:
5b:bf:43:56:f8:59:c8:4b:1a:9f:e6:40:48:aa:30:a7:2b:55:
b1:57:42:24:1c:97:b8:e5:56:1d:47:51:30:08:5d:bd:1d:20:
d8:33:f6:e5:87:02:99:ce:99:b5:7f:3f:30:75:11:04:60:37:
fc:ff:32:37:c7:1e:1e:18:7b:4b:8c:78:e3:d5:7b:ef:84:78:
30:26:d7:62:5e:fb:7a:97:13:32:16:43:3c:4e:e9:05:f5:79:
85:f5:85:93:01:11:4a:fb:40:8e:50:17:36:4c:ed:24:30:d8:
1b:4f:54:78:5e:a5:ef:97:ce:51:92:cd:18:b2:9a:37:d8:dd:
e7:c7:0f:5c:56:8d:68:01:a9:33:b9:6f:f0:a1:f2:bf:08:ad:
c3:bf:ff:5e:8e:2f:d8:9b:e0:dc:85:a3:8f:aa:73:3e:30:f9:
b7:df:2e:b7:17:ff:ce:c4:e9:ca:c1:bb:66:18:c6:ba:1f:4c:
0c:02:69:d4:cc:bb:05:6f:31:33:bf:47:9d:26:d4:df:81:9b:
07:f2:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:26:54 2025 by rpki-client