Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa
File: 3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier: easHftmUYC+KGKIbhSuNwM0h+DtWftI1xJ/fMskth8M=
Subject key identifier: 9E:DA:73:7C:39:C5:9E:09:5F:63:49:C2:91:7B:81:7F:EB:36:40:1D
Certificate issuer: /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial: 2325A8097BFC7F0CF7D35A22E2974BA54BB2A7DD
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa
Signing time: Sat 22 Mar 2025 09:59:24 +0000
ROA not before: Sat 22 Mar 2025 09:54:24 +0000
ROA not after: Sat 21 Mar 2026 09:59:24 +0000
asID: 262784
IP address blocks: 191.241.159.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:25:a8:09:7b:fc:7f:0c:f7:d3:5a:22:e2:97:4b:a5:4b:b2:a7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Validity
Not Before: Mar 22 09:54:24 2025 GMT
Not After : Mar 21 09:59:24 2026 GMT
Subject: CN=9EDA737C39C59E095F6349C2917B817FEB36401D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:ce:a7:33:b9:cc:01:c4:04:d7:84:b7:38:
90:1e:9d:f7:0a:67:b2:21:ac:17:51:e5:ca:02:40:
c1:86:a9:1c:e5:9d:66:14:46:ff:e4:77:a6:a1:f2:
5d:c2:fe:43:8a:00:0c:c6:82:21:76:42:b2:e2:72:
33:7a:86:53:04:36:8f:61:7b:76:06:a2:f9:31:6f:
cd:f9:6a:b1:8f:3b:07:84:e5:5b:ee:9c:27:b3:77:
94:e7:e2:53:87:dc:52:1b:28:5c:13:56:e3:5b:3d:
40:28:6f:ec:bb:de:88:0e:2e:c5:23:ed:6b:f9:b1:
37:62:6c:bb:a9:0e:2f:77:5d:46:fc:02:2b:b4:7c:
69:30:1a:96:68:e7:13:7b:a4:fa:46:f3:04:91:dd:
ec:7c:be:b4:c0:6c:2c:d1:2f:ef:a4:c7:1c:ed:15:
25:02:3d:e0:ee:7a:3b:92:06:88:11:53:63:8e:ec:
92:b8:2f:12:d8:42:a7:08:30:b2:75:69:32:9f:85:
08:bc:e8:2c:a5:0c:e4:37:e6:34:49:2a:ef:6b:65:
dc:47:2f:17:57:6a:16:f5:22:7f:a4:03:10:7b:62:
b9:e6:2e:73:6f:90:bd:39:c3:e8:5e:cd:8a:d2:97:
2b:87:7b:d3:ef:b4:9b:40:af:17:19:6f:8a:6d:ec:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DA:73:7C:39:C5:9E:09:5F:63:49:C2:91:7B:81:7F:EB:36:40:1D
X509v3 Authority Key Identifier:
keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a7:70:ce:94:2d:2b:d7:91:43:bd:a9:c2:c4:a1:7d:9a:4a:
c2:32:0d:14:ac:e1:4a:41:53:1b:0e:86:db:c6:19:91:b3:ee:
75:a0:8a:c5:44:c8:e5:c9:71:27:3c:3c:9d:c4:20:f1:63:b2:
66:a7:f6:58:fc:2e:d5:f0:52:21:f8:6e:a1:5f:c7:82:f8:f2:
aa:bb:9a:bc:bf:ca:8c:ea:8c:c7:50:fd:79:50:b4:7a:eb:9c:
d9:65:64:4a:e1:60:a8:29:9e:7a:64:03:c4:6a:33:88:6f:0b:
e0:47:fb:16:8e:73:2c:33:d3:ee:71:40:7b:d4:d8:92:8f:c0:
66:54:77:18:a8:28:81:2d:d4:9c:6b:9c:b1:d2:31:6e:a0:71:
25:c3:fa:4b:26:70:f5:53:87:ba:6c:44:e4:3d:4d:c5:a7:cb:
ef:97:0d:2b:eb:99:1f:f6:71:46:23:68:92:67:b4:0d:be:7f:
22:e2:70:f2:e8:13:ad:ed:96:29:02:8d:62:20:77:64:48:a0:
dc:2a:8a:ff:52:9b:3f:2e:58:6b:f5:69:20:9c:47:d2:01:4a:
e7:f8:bb:f5:cf:23:70:61:b1:c0:34:c6:f2:8b:be:98:6a:fd:
20:80:92:3b:a0:7d:d2:55:00:f5:d1:a1:8c:cb:3a:bf:56:09:
02:48:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:59 2025 by rpki-client