Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
File: 3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa (raw, json)
Hash identifier: x9wLWxvK9yy9/MjSAayN8EHhzIAII3Z30xpeH3ds6Ds=
Subject key identifier: 68:CD:CC:8F:2C:A0:67:6D:05:F3:A0:C0:84:00:B8:E2:5C:EA:F3:2E
Certificate issuer: /CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
Certificate serial: 7A8EEBFF07EB0B050D04E6035AC7877400C4168F
Authority key identifier: F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
Signing time: Fri 23 May 2025 23:25:28 +0000
ROA not before: Fri 23 May 2025 23:20:28 +0000
ROA not after: Fri 22 May 2026 23:25:28 +0000
asID: 270579
IP address blocks: 189.126.84.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8e:eb:ff:07:eb:0b:05:0d:04:e6:03:5a:c7:87:74:00:c4:16:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
Validity
Not Before: May 23 23:20:28 2025 GMT
Not After : May 22 23:25:28 2026 GMT
Subject: CN=68CDCC8F2CA0676D05F3A0C08400B8E25CEAF32E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:71:36:2c:bf:18:78:c0:98:6a:71:be:87:
b0:6f:bf:57:3e:e5:00:9c:af:56:01:a3:79:32:70:
ca:53:43:0d:f9:2f:ba:59:3f:69:2a:9b:03:ec:98:
c3:31:1d:10:75:a6:0e:57:7a:c9:e7:9f:28:f3:7b:
db:90:91:b3:1f:e3:b2:53:34:21:3f:2b:25:44:28:
b0:42:d1:03:9b:7a:1e:6c:cb:07:a8:a9:b7:6a:7e:
ba:ae:cb:76:76:c7:ae:26:ac:81:e6:7e:b0:cf:9f:
85:63:43:91:29:6e:95:d2:58:5d:29:e2:ba:cb:9c:
2b:e0:d1:a3:87:c7:4b:92:34:50:4b:2d:75:36:00:
9a:d5:1d:cc:ae:0e:e1:48:1d:26:c3:af:f2:6c:56:
1e:31:58:07:a0:54:e9:84:4a:67:35:8b:a2:bc:5a:
8f:b3:ae:6f:4c:e5:f3:8b:f8:86:22:84:60:3f:dc:
18:2c:5c:89:23:f8:b7:a8:82:be:3e:ba:8e:f9:b6:
8a:aa:ce:43:1a:2b:01:25:70:94:73:47:cc:a3:04:
7e:e4:86:a4:c8:86:76:55:97:22:8e:16:34:2e:e8:
8e:e4:96:67:92:f0:4a:42:98:6c:7f:c2:33:a9:ec:
47:e0:c9:8d:57:ec:91:b9:c0:3c:45:be:1a:44:68:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:CC:8F:2C:A0:67:6D:05:F3:A0:C0:84:00:B8:E2:5C:EA:F3:2E
X509v3 Authority Key Identifier:
keyid:F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32322d3232203d3e20323730353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.84.0/22
Signature Algorithm: sha256WithRSAEncryption
24:b1:c9:a2:30:51:4e:09:0d:7e:18:3c:57:2f:24:c3:5e:1d:
f9:51:1c:7b:92:9e:3f:7e:cd:5b:7a:a5:8e:e4:dc:58:21:6f:
9b:03:e6:0d:d3:76:ca:fa:55:bf:07:b8:ed:23:e5:d0:3b:88:
6e:b6:e5:36:9e:4c:a8:56:2c:88:f3:db:62:37:72:b7:d9:2d:
84:db:c6:aa:1e:be:bc:4e:ff:87:62:1d:2b:76:9d:d9:79:a8:
e4:14:25:f0:97:73:df:31:9a:b9:bc:d0:76:0a:f5:95:5e:27:
f7:51:23:70:db:11:70:b0:a0:14:fc:75:52:4c:7b:ef:e5:47:
92:b0:91:30:78:25:95:13:08:3e:e3:35:61:79:b9:fe:e2:8f:
0c:2c:24:8f:c2:7c:54:f9:0b:1a:25:5e:df:79:11:aa:38:69:
ad:ce:0f:51:ee:46:35:f2:d4:08:db:05:92:fc:c5:54:60:04:
cf:98:85:64:cb:a0:ab:85:a9:74:57:66:ea:86:10:3d:80:f9:
74:ad:21:cb:26:ac:26:ff:43:43:ba:28:57:6d:81:98:ae:b7:
c1:0a:a4:06:dd:96:57:7e:c0:a1:22:f9:25:9d:68:a5:0e:50:
14:f2:18:39:28:bc:42:3e:66:bd:25:14:5e:47:48:63:2e:98:
3e:6b:5e:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeo7r/wfrCwUNBOYDWseHdADEFo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ2MkJCMjUyNEQ4OEMxMDlBNzhGMjIzRENCRDQyQzBD
OTc2MDlFQjAeFw0yNTA1MjMyMzIwMjhaFw0yNjA1MjIyMzI1MjhaMDMxMTAvBgNV
BAMTKDY4Q0RDQzhGMkNBMDY3NkQwNUYzQTBDMDg0MDBCOEUyNUNFQUYzMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN43E2LL8YeMCYanG+h7Bvv1c+
5QCcr1YBo3kycMpTQw35L7pZP2kqmwPsmMMxHRB1pg5Xesnnnyjze9uQkbMf47JT
NCE/KyVEKLBC0QObeh5syweoqbdqfrquy3Z2x64mrIHmfrDPn4VjQ5EpbpXSWF0p
4rrLnCvg0aOHx0uSNFBLLXU2AJrVHcyuDuFIHSbDr/JsVh4xWAegVOmESmc1i6K8
Wo+zrm9M5fOL+IYihGA/3BgsXIkj+Leogr4+uo75toqqzkMaKwElcJRzR8yjBH7k
hqTIhnZVlyKOFjQu6I7klmeS8EpCmGx/wjOp7EfgyY1X7JG5wDxFvhpEaFT/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaM3MjyygZ20F86DAhAC44lzq8y4wHwYDVR0j
BBgwFoAU9GK7JSTYjBCaePIj3L1CwMl2CeswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0t5aFN0RFVFTG1nbWVFZGZMOTdudjNkaWt1UXhmQzhwTUFNNXY0a1Zm
VkEvMC9GNDYyQkIyNTI0RDg4QzEwOUE3OEYyMjNEQ0JENDJDMEM5NzYwOUVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NjJCQjI1MjREODhDMTA5
QTc4RjIyM0RDQkQ0MkMwQzk3NjA5RUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLeWhTdERVRUxtZ21lRWRmTDk3bnYzZGlrdVF4ZkM4cE1BTTV2NGtWZlZBLzAv
MzEzODM5MmUzMTMyMzYyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9flQwDQYJKoZIhvcNAQELBQADggEBACSxyaIw
UU4JDX4YPFcvJMNeHflRHHuSnj9+zVt6pY7k3Fghb5sD5g3Tdsr6Vb8HuO0j5dA7
iG625TaeTKhWLIjz22I3crfZLYTbxqoevrxO/4diHSt2ndl5qOQUJfCXc98xmrm8
0HYK9ZVeJ/dRI3DbEXCwoBT8dVJMe+/lR5KwkTB4JZUTCD7jNWF5uf7ijwwsJI/C
fFT5CxolXt95Eao4aa3OD1HuRjXy1AjbBZL8xVRgBM+YhWTLoKuFqXRXZuqGED2A
+XStIcsmrCb/Q0O6KFdtgZiut8EKpAbdlld+wKEi+SWdaKUOUBTyGDkovEI+Zr0l
FF5HSGMumD5rXpI=
-----END CERTIFICATE-----
Generated at Thu Jun 19 22:55:13 2025 by rpki-client