Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
File: 3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier: Xg2zgw9DGQ3nyrTX/WGs4moe9Isb9PZpe0/q+ExAT/U=
Subject key identifier: 09:21:F9:EB:39:F2:C8:5D:8E:E0:70:FF:C4:95:21:8E:CE:2A:C2:B8
Certificate issuer: /CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
Certificate serial: 468C3990047446928F30F54801D1CCF9497F3190
Authority key identifier: F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
Signing time: Fri 23 May 2025 23:25:28 +0000
ROA not before: Fri 23 May 2025 23:20:28 +0000
ROA not after: Fri 22 May 2026 23:25:28 +0000
asID: 270579
IP address blocks: 189.126.84.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8c:39:90:04:74:46:92:8f:30:f5:48:01:d1:cc:f9:49:7f:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
Validity
Not Before: May 23 23:20:28 2025 GMT
Not After : May 22 23:25:28 2026 GMT
Subject: CN=0921F9EB39F2C85D8EE070FFC495218ECE2AC2B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:f6:22:e6:3f:80:9b:09:c5:7f:5b:05:00:
5e:ab:6c:62:1f:64:62:f9:12:a5:17:66:e0:13:ed:
12:14:f6:3b:28:99:7a:a2:6a:29:21:a5:ef:d2:15:
b0:0d:8c:a7:91:74:af:ed:9e:57:37:58:b8:5d:ad:
70:65:1d:8c:89:7d:b6:18:32:48:79:97:33:34:a8:
2c:09:eb:7e:fe:5c:d5:46:9c:e9:c2:17:ee:40:55:
d6:02:92:a1:54:a5:14:58:5e:40:72:26:6e:a4:0b:
eb:63:cd:04:9f:40:32:52:f7:b8:bd:b2:61:20:ce:
2b:9d:e8:ea:63:18:4c:92:52:9c:b7:f4:fd:b7:91:
05:0d:66:19:17:5e:3c:c9:b7:02:6b:3d:72:51:50:
73:37:e3:2c:33:2c:94:ff:21:c1:12:a4:f5:a1:5d:
5a:42:b8:b8:06:e8:88:66:68:de:11:2b:e9:18:fc:
04:b9:e7:44:78:bc:32:f9:3f:75:1f:c3:90:ae:17:
05:70:21:8d:f5:a9:4e:d0:c4:b7:4a:6b:64:3e:ea:
d3:35:b6:55:0c:13:b5:31:6c:94:5f:23:a5:6d:4b:
f6:21:0b:ff:dd:18:5a:64:1f:9d:b2:13:11:af:c2:
5b:8e:8d:9a:a8:78:2c:17:d4:9d:dd:d7:9d:6d:3e:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:F9:EB:39:F2:C8:5D:8E:E0:70:FF:C4:95:21:8E:CE:2A:C2:B8
X509v3 Authority Key Identifier:
keyid:F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38342e302f32342d3234203d3e20323730353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:bf:6d:8f:21:dd:fa:06:12:9e:12:bb:fd:fa:18:1c:f2:83:
0b:dc:e4:7b:6f:7e:7a:b0:d9:07:be:c5:8b:b9:1f:a7:c3:58:
52:67:dd:70:4d:4f:45:0e:be:43:ee:49:af:47:eb:80:b5:5b:
8b:05:19:e5:f4:38:68:4d:40:f0:4c:9e:ba:4c:97:54:e0:b8:
a2:04:34:ad:8a:e2:9a:12:ab:15:05:67:31:1d:aa:16:d5:11:
cf:88:69:5e:f6:de:81:bf:e9:51:61:3d:fa:18:1e:7e:a7:4b:
88:9c:c9:d0:a3:49:7c:f7:8c:fb:b9:89:5b:da:74:5a:28:95:
b4:6b:f6:17:08:5a:24:a5:a2:e0:88:a7:01:71:93:3c:73:7c:
19:47:93:20:e0:ce:63:67:e1:36:8b:78:f4:ea:72:8d:b7:28:
74:d5:e9:a3:0e:4c:1f:51:f1:7d:0a:5f:fa:ff:ea:cb:33:e4:
38:35:a5:62:2e:14:12:74:df:b5:e8:dd:d6:b7:ce:1d:8a:25:
95:a3:d6:bc:ef:7e:a8:2f:a7:a8:e7:84:0d:f7:c1:21:c3:92:
24:7e:4a:79:61:a4:a6:98:01:e0:d1:f6:96:57:51:ed:16:6a:
8d:ad:93:84:64:33:16:76:7c:96:6f:b0:3c:dd:0a:fd:f7:6d:
df:7f:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:40:51 2025 by rpki-client