Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa
File: 3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa (raw, json)
Hash identifier: bN8pdsHigone6Rl2cGFn2hsTb1Eyw3/T8CBCivCKjcE=
Subject key identifier: A5:6B:A4:6E:74:3E:A1:3B:A8:F5:85:EA:29:A1:8C:0C:7C:1A:42:CC
Certificate issuer: /CN=79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81
Certificate serial: 5EB3B1EA6E83002ED357BD13FA5CED277360A671
Authority key identifier: 79:BB:7B:8B:5C:DC:6A:5F:71:F7:60:97:2A:72:E6:A7:7C:CD:FA:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa
Signing time: Sun 08 Jun 2025 12:06:46 +0000
ROA not before: Sun 08 Jun 2025 12:01:46 +0000
ROA not after: Sun 07 Jun 2026 12:06:46 +0000
asID: 263165
IP address blocks: 191.52.248.0/21 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b3:b1:ea:6e:83:00:2e:d3:57:bd:13:fa:5c:ed:27:73:60:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81
Validity
Not Before: Jun 8 12:01:46 2025 GMT
Not After : Jun 7 12:06:46 2026 GMT
Subject: CN=A56BA46E743EA13BA8F585EA29A18C0C7C1A42CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:78:24:5c:60:97:31:e3:65:23:41:a9:d9:
05:3d:c6:4c:e7:45:fb:55:95:f0:35:e2:e2:d2:35:
e2:ce:a4:fa:d8:79:65:f3:b7:bc:c5:75:81:93:f3:
3a:42:a3:75:cf:bf:cc:af:c4:8b:f5:a0:6b:c0:24:
0f:ba:0b:e5:a1:b3:d3:46:5f:69:94:18:ad:45:6e:
f9:48:1f:f6:36:9c:46:9a:06:aa:81:98:00:15:9f:
95:57:0f:6c:f6:ea:f9:db:17:3e:69:2f:ac:c7:c3:
bb:48:4a:5c:17:25:f1:6a:da:05:c3:e6:f5:bf:22:
ec:44:46:cf:15:7c:e1:08:8d:92:b6:1f:ec:90:20:
2c:41:44:95:da:94:cf:1e:59:4f:07:33:28:41:e9:
76:35:71:23:0f:f0:69:7d:aa:34:07:f4:f1:38:7f:
ae:6d:0c:9d:00:9a:2a:2c:36:34:cb:57:fc:da:a6:
30:f4:0e:99:0a:c6:a4:7c:85:a0:50:19:d9:81:2c:
5b:5c:02:d8:39:da:2a:48:5f:d2:65:6a:01:3d:da:
0f:89:6e:0a:c5:f9:48:9a:93:a3:d0:ea:6a:e5:97:
c9:8b:80:10:89:a7:42:4a:d2:5d:78:97:58:ba:6a:
45:11:bf:0c:01:a9:6e:b5:10:1b:f3:f0:02:cf:94:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6B:A4:6E:74:3E:A1:3B:A8:F5:85:EA:29:A1:8C:0C:7C:1A:42:CC
X509v3 Authority Key Identifier:
keyid:79:BB:7B:8B:5C:DC:6A:5F:71:F7:60:97:2A:72:E6:A7:7C:CD:FA:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/3139312e35322e3234382e302f32312d3332203d3e20323633313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.52.248.0/21
Signature Algorithm: sha256WithRSAEncryption
13:a5:1f:32:03:a4:47:6f:43:26:f9:e0:1a:ab:12:d3:7f:4d:
91:d8:58:e9:59:36:a1:24:fd:a2:8c:34:f8:78:2a:ba:7e:c0:
75:a9:89:e2:33:17:d4:87:b8:33:e0:ef:4f:82:26:7c:cc:d3:
5c:6b:65:f0:3d:57:e1:1f:40:b8:fe:a1:67:08:24:d8:47:bf:
0b:de:be:4e:56:a0:28:93:e6:50:3d:de:58:a1:02:10:d2:5e:
83:c0:ed:fd:ad:20:6c:61:86:2b:f6:63:60:a1:76:ac:12:de:
1b:db:d6:87:f9:8e:4f:29:25:46:2f:e5:58:b0:c2:00:36:85:
37:16:f8:47:e2:40:05:b1:62:90:7a:e3:60:2e:28:9b:02:06:
8d:9a:43:61:87:dc:24:8b:40:e2:eb:f0:a5:d4:91:1b:61:a7:
36:38:bf:9d:38:58:0d:71:20:58:80:9c:ac:b4:dc:a5:fd:78:
b4:d5:af:29:b1:ab:70:7d:9c:59:a2:b3:92:23:e6:8b:80:30:
44:66:e4:af:50:38:95:58:7b:d5:25:11:ce:91:21:9e:66:a3:
fd:f8:3a:b2:38:0e:7d:15:18:f6:96:34:cc:04:8d:33:ae:3d:
8e:3f:a8:7d:be:4b:94:da:d2:72:77:62:31:cf:51:6a:67:0b:
7d:84:38:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:34:54 2025 by rpki-client