Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa
File: 3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa (raw, json)
Hash identifier: 641+GYXZNw4123ybKrg6PrmJrdCv5tIFK7N2dcy60hY=
Subject key identifier: 29:A8:91:A3:C0:B0:7C:CC:EC:93:49:E6:69:1D:A1:94:30:DF:27:8A
Certificate issuer: /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial: 191A38FC3C3E90EEAFE0CBFBB5F4A3BF0C8D4D93
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa
Signing time: Wed 05 Mar 2025 19:00:02 +0000
ROA not before: Wed 05 Mar 2025 18:55:02 +0000
ROA not after: Wed 04 Mar 2026 19:00:02 +0000
asID: 266320
IP address blocks: 170.238.138.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1a:38:fc:3c:3e:90:ee:af:e0:cb:fb:b5:f4:a3:bf:0c:8d:4d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Validity
Not Before: Mar 5 18:55:02 2025 GMT
Not After : Mar 4 19:00:02 2026 GMT
Subject: CN=29A891A3C0B07CCCEC9349E6691DA19430DF278A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:44:f2:e2:3c:74:98:23:b4:db:b2:8c:03:
ca:36:e1:64:c3:c8:90:3e:78:61:da:ff:05:0b:a0:
4d:f2:e1:b4:06:8f:00:ed:b9:17:4f:ba:b0:5a:57:
3d:b6:49:24:a3:e8:73:e4:51:a2:94:3c:83:74:8a:
36:e3:75:9b:6a:4b:ad:82:fb:94:1d:bd:9d:af:bd:
fa:28:b1:54:1e:fd:88:8a:4d:3e:24:2d:8d:c1:ae:
48:4f:af:37:eb:f6:b8:48:e1:d0:f1:5b:59:36:05:
b5:b7:14:2a:58:1e:04:30:c8:d1:f0:8b:17:b0:7d:
2b:37:ec:33:14:5c:18:71:eb:d7:8a:d8:92:c2:85:
c4:4f:91:a4:06:88:16:74:51:29:ae:38:10:75:5e:
48:25:ef:8b:13:1f:d8:9b:cd:b8:af:38:c9:68:21:
a4:80:92:0f:53:16:ce:1a:ef:9d:a4:be:86:f9:bb:
9a:d0:96:52:ec:cc:93:94:2a:87:2b:91:d1:66:a3:
0e:b5:d6:92:73:77:9a:ce:2b:8b:da:38:63:b9:75:
14:18:52:f7:eb:32:7e:27:4d:99:cb:4f:e3:c7:42:
44:76:43:83:e1:29:e0:13:1e:d7:61:a7:27:d1:76:
19:0f:b7:df:d6:62:c5:cb:94:88:f4:11:f8:0c:b2:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A8:91:A3:C0:B0:7C:CC:EC:93:49:E6:69:1D:A1:94:30:DF:27:8A
X509v3 Authority Key Identifier:
keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.138.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:0c:24:c5:5a:f3:78:12:cc:a6:e0:f8:38:d7:d8:eb:f0:02:
8a:58:0a:79:99:4a:52:02:b9:93:db:5a:0e:74:85:38:5d:c7:
1b:73:52:f5:16:5b:7e:03:fa:2c:8b:2b:a8:05:11:dd:52:9b:
6b:52:92:8d:3e:33:38:66:cf:0b:ab:35:9f:c6:ec:c0:29:0b:
e3:f0:8a:0b:f4:03:bc:90:ed:cd:76:11:50:f0:76:43:8b:cd:
0d:14:19:a2:18:08:23:48:70:fb:91:2b:ad:87:09:d5:09:8e:
8b:d8:93:c1:c3:9f:ff:7a:72:90:14:92:ff:dc:aa:35:4d:4d:
0f:1a:c2:1f:00:8c:a5:6d:2c:96:96:51:66:e3:75:5f:fc:5a:
8c:2f:96:09:24:ff:7c:ef:2f:d6:b7:ac:22:eb:fb:c4:cd:19:
f6:b9:cf:52:49:cd:13:1f:b0:b3:d7:b4:59:ac:df:5a:71:20:
c8:48:28:1a:ed:4c:03:77:29:3c:6e:0d:af:2a:c4:76:86:8e:
76:68:39:5d:4d:7e:0c:e2:25:fd:18:3a:51:64:5c:5a:50:55:
0b:30:bc:f7:fc:6c:63:0c:f9:3c:56:55:12:70:00:bd:0e:c8:
e8:9f:c5:7f:ee:53:4f:c9:4d:e4:79:66:95:c0:99:21:b7:df:
c9:d5:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:28:21 2025 by rpki-client