Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa
File: 3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa (raw, json)
Hash identifier: yHnZHrEbecqedZJexHRRRfHeNlN5ITusm4L3e4o/eLA=
Subject key identifier: 07:34:D3:F3:7B:6E:2D:A0:02:B7:4F:9B:4E:7A:12:4C:7D:4E:69:82
Certificate issuer: /CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Certificate serial: 3D67148C22D1325D86C3AB3452FCFE6F046035D9
Authority key identifier: BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa
Signing time: Tue 04 Feb 2025 11:51:52 +0000
ROA not before: Tue 04 Feb 2025 11:46:52 +0000
ROA not after: Tue 03 Feb 2026 11:51:52 +0000
asID: 264948
IP address blocks: 168.232.198.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:67:14:8c:22:d1:32:5d:86:c3:ab:34:52:fc:fe:6f:04:60:35:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F
Validity
Not Before: Feb 4 11:46:52 2025 GMT
Not After : Feb 3 11:51:52 2026 GMT
Subject: CN=0734D3F37B6E2DA002B74F9B4E7A124C7D4E6982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:e8:f6:83:56:9a:66:34:03:ac:07:d6:11:
7b:e4:75:8e:c4:bf:5d:03:a1:77:ba:34:2c:02:f2:
3a:bf:79:b7:52:a5:b3:6c:7e:89:44:1e:0b:5e:c2:
34:ec:74:78:db:73:b9:9c:d7:30:cc:80:4c:91:4c:
a5:b7:fa:d3:f9:0c:c3:e6:03:eb:fa:53:2c:28:79:
2e:1f:6a:c1:73:00:dc:c6:8a:aa:a7:0c:04:25:9a:
16:8e:f3:b6:12:c9:b6:79:b0:56:b3:e8:b9:89:09:
d2:98:7f:bb:2b:d9:d2:98:ec:f6:07:79:3e:61:ce:
7d:c4:00:77:f9:31:a1:33:38:f5:0c:11:5b:9f:9c:
a8:9d:ad:12:0e:2e:d0:97:0c:a8:a2:e7:d3:28:f5:
33:c5:0f:18:91:58:a9:04:d9:84:2e:5e:cc:f3:83:
e9:d1:11:08:23:af:1e:0b:ab:94:cb:2b:42:cb:c0:
ad:90:90:03:1b:01:13:b1:41:07:3a:73:32:0e:05:
b9:e3:20:fe:01:01:30:75:13:bb:5a:4b:df:1e:63:
d9:fd:c9:05:7b:ef:35:97:3b:bc:fa:7c:31:34:be:
6c:e5:6c:dd:75:b6:a4:a4:f8:eb:4c:67:2a:c4:68:
b1:22:17:7f:76:de:7c:0a:17:72:c4:7a:92:d4:93:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:D3:F3:7B:6E:2D:A0:02:B7:4F:9B:4E:7A:12:4C:7D:4E:69:82
X509v3 Authority Key Identifier:
keyid:BC:47:87:68:F2:51:0E:76:FB:1F:8C:DB:CF:5F:94:8F:D7:A7:C0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC478768F2510E76FB1F8CDBCF5F948FD7A7C01F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32342d3234203d3e20323634393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:07:63:bd:fb:d3:5c:a5:14:42:f8:0e:83:2a:0b:f8:2a:4f:
ba:c5:f3:5b:65:fd:cc:e3:1f:d8:92:29:27:8e:ce:5d:6b:66:
5d:7b:80:29:28:f1:3a:08:f2:79:ff:40:0f:22:47:3d:2a:30:
0f:a9:8b:4e:62:d6:f6:10:65:ae:37:db:fe:ff:f5:a9:92:0b:
1d:23:80:26:7e:1b:68:51:81:ac:f0:d2:ba:5c:70:d8:de:2f:
e6:ad:74:a9:a8:26:b1:32:fa:6d:76:68:f0:eb:67:41:a9:2d:
41:6e:2d:40:e6:63:9e:48:88:57:42:85:c2:bb:dc:25:33:e9:
12:f1:24:a5:fa:06:5e:1a:de:9f:f1:87:cc:fd:91:37:27:0f:
3b:0f:2a:7c:cf:9c:43:b6:68:d7:d0:ae:b4:3c:80:88:76:c5:
d9:71:96:f0:17:8d:04:93:74:0b:21:bd:26:6f:8f:b5:59:60:
42:0e:31:78:dd:83:2c:08:2d:19:82:6a:76:89:fe:89:81:f4:
65:6c:88:0a:c7:73:1a:5e:e2:88:13:f7:8c:0d:aa:73:9d:7b:
ab:ff:45:f1:3b:ed:5e:c0:80:69:b1:5c:e4:4a:df:bb:0a:0f:
72:2b:69:b7:4f:d3:de:8c:d2:11:41:d9:d4:5b:2c:85:0d:53:
99:4a:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:35 2025 by rpki-client