Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
File: 3138392e35312e3135362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier: 3AICKEi1i2D/JgYGplsv16OvxEHc6nqh72jUzIYldWA=
Subject key identifier: B7:7D:00:B0:88:D2:A7:CB:47:24:DA:59:55:47:98:6D:71:06:07:77
Certificate issuer: /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial: 08A4493915EC4C8E84A6312F528CEC34A20DFF97
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
Signing time: Mon 10 Feb 2025 14:30:03 +0000
ROA not before: Mon 10 Feb 2025 14:25:03 +0000
ROA not after: Mon 09 Feb 2026 14:30:03 +0000
asID: 28349
IP address blocks: 189.51.156.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a4:49:39:15:ec:4c:8e:84:a6:31:2f:52:8c:ec:34:a2:0d:ff:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Validity
Not Before: Feb 10 14:25:03 2025 GMT
Not After : Feb 9 14:30:03 2026 GMT
Subject: CN=B77D00B088D2A7CB4724DA595547986D71060777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:2a:de:b7:7d:15:aa:c9:b6:d6:5b:01:8d:
b6:23:1a:73:2d:08:e1:c4:52:d4:fc:de:f6:e4:e2:
82:dd:c5:93:3f:32:30:0d:d9:81:4b:b1:71:91:b0:
86:a2:09:bc:ad:7c:8c:14:19:a4:b8:a9:19:ec:83:
47:c4:c7:fa:1c:67:b3:9e:23:75:b4:a3:d3:74:0d:
57:38:b7:d3:46:3c:c1:d5:10:3f:18:8d:09:2c:7f:
b8:3a:2b:0f:ca:47:43:89:c0:88:c2:c9:97:94:c5:
23:ca:49:05:a1:81:07:3d:e7:b4:08:29:9c:f4:8a:
b6:91:c7:0c:7a:25:eb:ad:92:41:57:5e:95:8d:c1:
4e:c1:fb:85:21:83:6f:91:cb:85:8e:ce:d8:f4:1d:
24:97:15:9d:bc:0c:c6:64:0f:8a:8e:c5:29:f6:99:
7b:f3:fa:31:37:cb:9e:f6:b2:be:9b:c0:93:15:9e:
97:60:c6:04:26:44:76:1d:eb:38:41:4d:6e:69:ff:
16:66:39:e3:35:6e:4f:b6:73:43:db:64:dc:15:35:
1a:87:44:83:3f:54:f6:92:01:bf:21:27:45:cd:06:
39:c3:f0:d4:65:69:ba:e0:18:4b:66:30:13:d0:6b:
9e:5d:5c:de:01:67:d4:13:8f:5f:94:24:57:08:03:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:00:B0:88:D2:A7:CB:47:24:DA:59:55:47:98:6D:71:06:07:77
X509v3 Authority Key Identifier:
keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.51.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:04:b7:54:cc:fb:e5:a0:3b:0d:01:4d:c3:25:fa:a2:fb:86:
3f:34:b2:d2:97:1a:b6:4a:a6:9c:71:cc:f5:94:d8:ca:ab:cf:
41:ae:21:c7:02:d8:20:35:28:04:89:29:56:ae:df:95:73:55:
7d:c7:6b:2f:62:f7:a2:85:0a:af:06:56:ce:91:20:9b:a6:c4:
3a:7e:1c:f7:6c:fe:e2:15:82:3b:e9:92:ae:93:06:78:63:32:
27:8d:0f:40:f5:26:ee:09:f8:07:19:77:0b:1a:13:b2:d6:b7:
25:dc:78:c6:fa:ba:c1:55:61:39:e9:a0:9b:f9:0e:6b:20:1a:
2a:1c:09:4e:01:94:47:96:0b:82:1c:1d:89:28:10:60:e3:cd:
a7:da:a6:44:e0:61:b4:9f:7d:cd:73:45:6b:32:29:bd:c6:69:
60:42:12:cb:e8:e0:5c:95:02:7b:37:13:7a:7c:c7:b0:cb:6f:
b5:a9:88:28:dc:a0:c7:37:97:5d:b3:5c:e3:9d:93:fd:14:f4:
9d:de:ed:f2:8a:63:74:bb:93:eb:66:de:8e:9e:29:7e:e4:42:
08:3e:5a:d1:05:6b:97:a7:2a:6e:9f:08:bf:b2:8d:48:ef:4a:
3c:16:e2:66:80:73:6e:29:27:c3:38:51:d0:fc:9f:5f:16:82:
27:49:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:09:28 2025 by rpki-client