Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
File: 3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier: qsHEzva0imSPbl/kqUJw0DgNm7tAJDGrmbBl7cT1WC0=
Subject key identifier: 58:1F:83:91:A7:2C:33:9E:C3:6C:A7:23:92:F3:60:26:DE:61:D2:99
Certificate issuer: /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial: 078CEA75B5071214355A55849E0DD855357B2F08
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
Signing time: Wed 05 Mar 2025 19:00:04 +0000
ROA not before: Wed 05 Mar 2025 18:55:04 +0000
ROA not after: Wed 04 Mar 2026 19:00:04 +0000
asID: 266320
IP address blocks: 170.238.136.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8c:ea:75:b5:07:12:14:35:5a:55:84:9e:0d:d8:55:35:7b:2f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Validity
Not Before: Mar 5 18:55:04 2025 GMT
Not After : Mar 4 19:00:04 2026 GMT
Subject: CN=581F8391A72C339EC36CA72392F36026DE61D299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:07:9d:4f:dc:9d:89:70:1d:54:c7:5d:21:
f8:5b:2f:29:39:a6:50:16:66:80:aa:ee:ed:11:d1:
ce:30:4e:db:60:34:84:85:a6:86:cd:c4:f1:cf:bc:
53:c8:32:d1:7a:73:b8:4f:75:07:0e:ee:f0:80:47:
f2:80:20:d5:7a:d8:fc:6c:e9:66:f1:51:6c:66:06:
8c:7d:08:3c:2c:82:79:b2:f1:59:1f:a9:1e:79:2c:
8b:3f:45:09:26:c8:c1:12:fa:69:3f:78:b1:15:7c:
35:c5:6f:4a:60:cc:58:6c:2f:6f:ab:29:32:b3:29:
32:84:8a:ed:e9:b8:50:52:cd:6d:55:e2:c7:b9:bf:
22:a8:9b:47:b8:c5:90:a2:9e:c1:e4:a1:a2:ea:83:
3f:f5:62:14:f0:1b:09:a9:c3:69:61:f5:fa:89:8d:
73:bf:1f:7f:2e:76:7d:34:8e:4e:2d:5b:f3:8b:aa:
b3:f9:c5:8c:81:4f:6c:34:b6:9a:6b:04:7a:bc:c3:
c0:0b:75:e2:0e:05:32:d0:a3:92:e4:0b:19:47:14:
58:3c:5c:59:31:85:6b:6f:f5:ed:5f:d7:3a:6f:90:
e4:86:3d:4c:a0:69:ee:e8:6b:98:3b:9f:69:3e:41:
29:a0:f1:04:c1:82:ca:00:a5:1b:41:8d:6e:1c:3b:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:83:91:A7:2C:33:9E:C3:6C:A7:23:92:F3:60:26:DE:61:D2:99
X509v3 Authority Key Identifier:
keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.136.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:f5:c1:5d:dd:28:2d:a3:48:d2:cd:2b:05:49:47:20:b2:5d:
4a:85:3c:ca:dc:58:72:a5:fc:ef:e1:28:0d:b4:f0:ce:07:d5:
99:25:26:82:8e:e5:52:b0:e9:2f:1d:1b:b8:0e:41:c3:f6:c5:
cf:fd:1a:69:54:9c:33:01:25:ac:41:65:6f:ad:d8:8c:57:8e:
cf:b6:fb:6f:06:ad:c4:54:6a:30:61:20:19:dd:e3:36:73:43:
75:b5:e7:fa:71:70:04:e7:98:a2:ce:b0:c1:4d:62:67:fb:e2:
73:78:99:21:80:8b:89:9b:53:88:8a:6b:c4:e4:e2:5b:08:1c:
05:63:ff:8d:8e:4e:26:4b:92:ec:6f:c3:93:16:62:04:08:5e:
ff:a1:85:5b:46:54:ed:2a:64:15:f4:04:81:7f:d5:b1:04:ee:
da:4f:ef:12:25:fc:ea:e0:90:21:83:b2:ed:99:f5:4e:03:97:
29:27:29:9e:64:8f:32:08:a3:5b:4a:24:5c:60:1e:47:23:ae:
35:17:4e:d2:bb:17:d8:ec:9b:3f:5e:55:a1:bb:2b:6d:51:8c:
c2:88:24:1c:7f:3e:df:d6:e3:a4:e8:12:ef:a7:df:bd:93:65:
41:d7:32:01:3a:95:e6:fb:09:a6:34:0c:bb:dc:a8:42:ca:8c:
b4:a8:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:34:21 2025 by rpki-client