Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
File: 3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier: 01Vxm84ueO0k999Nl8NKLY7JydQuJJtAf4kfDGIYnUo=
Subject key identifier: C3:A7:30:F4:2E:E3:E8:27:23:AD:4B:4A:E8:81:08:D3:55:CF:33:51
Certificate issuer: /CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
Certificate serial: 3DDAF38ECF70C3ED4358978413ACA22842BC053B
Authority key identifier: F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
Signing time: Fri 23 May 2025 23:25:28 +0000
ROA not before: Fri 23 May 2025 23:20:28 +0000
ROA not after: Fri 22 May 2026 23:25:28 +0000
asID: 270579
IP address blocks: 189.126.87.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:da:f3:8e:cf:70:c3:ed:43:58:97:84:13:ac:a2:28:42:bc:05:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
Validity
Not Before: May 23 23:20:28 2025 GMT
Not After : May 22 23:25:28 2026 GMT
Subject: CN=C3A730F42EE3E82723AD4B4AE88108D355CF3351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:37:7a:61:83:7f:aa:e9:a3:a8:01:ff:32:
0f:7e:63:56:17:21:cb:c3:52:53:e7:61:8d:e4:e9:
40:ce:0c:9f:f3:6e:ed:8a:77:2f:16:81:19:df:d3:
da:1f:9e:c9:56:ef:e6:7b:83:fd:cc:9e:34:8c:ef:
98:d3:e1:16:98:67:51:87:05:e4:af:66:63:6f:7b:
cc:b4:18:c0:18:6b:98:28:0d:70:c5:43:7b:9f:d2:
5a:f4:1b:7a:61:61:18:28:e1:7b:f8:fd:13:d8:18:
3a:22:1a:a1:b1:fe:03:f3:4e:19:cf:3c:c2:fd:b5:
ef:26:7e:da:4e:fa:a9:82:a2:bd:94:aa:c9:c6:9c:
9e:ed:d2:17:22:1e:bb:77:6e:6c:91:1d:85:05:59:
b3:08:45:48:a5:78:39:24:7c:d7:e8:1b:5b:21:5c:
52:e6:fb:fe:7a:85:6c:73:2e:b6:ba:d2:cd:bb:6b:
19:b4:0c:a9:f3:fa:e8:ca:bb:f4:3b:e9:69:3e:b6:
b1:c8:8c:ed:26:87:ed:a5:b0:c0:48:ca:20:e0:8c:
56:49:9c:75:a0:b7:5d:b4:2a:3b:2f:13:4c:81:39:
c0:65:04:a6:ca:f7:a2:58:74:db:ed:c3:b1:14:40:
31:4a:6d:be:19:ff:8b:5b:4b:ae:dc:fb:4a:c4:46:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:30:F4:2E:E3:E8:27:23:AD:4B:4A:E8:81:08:D3:55:CF:33:51
X509v3 Authority Key Identifier:
keyid:F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:13:be:12:93:ea:9e:12:be:93:0c:91:05:1b:62:d9:06:70:
d4:31:11:bf:c9:bf:c4:a6:d9:90:ed:4b:ed:60:ca:ca:85:7b:
7a:25:1e:97:f2:7f:99:bd:e2:8d:cc:55:9e:14:82:8c:ba:2e:
4a:ad:a2:da:51:1e:df:2c:9e:eb:86:0b:c6:0c:df:43:76:fb:
27:f4:3b:55:0f:9a:83:d0:eb:89:21:0f:6d:70:88:4f:75:28:
8e:a2:d4:25:d8:50:12:a4:11:a4:66:da:e8:d2:de:1f:17:9d:
82:44:46:9e:e6:ce:35:cb:a9:a3:3c:f9:ab:17:f8:50:46:b3:
e0:0a:c0:7b:6d:bf:78:fa:4e:b0:27:53:1e:b6:7f:48:42:ed:
b8:41:4b:18:92:af:69:01:ea:14:17:f7:17:82:db:bc:31:fe:
04:58:35:fa:24:89:dc:78:5d:2d:e2:32:00:75:dc:07:3b:0b:
39:e8:64:86:e4:9a:34:27:83:6c:a2:d1:ab:ef:4c:3b:1e:30:
8c:b4:4a:f8:6b:43:30:85:41:ac:0d:68:71:cb:be:39:1a:9a:
45:a3:cb:48:5f:c7:77:70:eb:41:fa:e2:c6:f7:6c:2f:f4:29:
b7:7f:52:94:cb:7c:20:33:cb:8c:d1:7f:2a:e2:7d:9f:91:dc:
cb:bf:1c:68
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPdrzjs9ww+1DWJeEE6yiKEK8BTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQ2MkJCMjUyNEQ4OEMxMDlBNzhGMjIzRENCRDQyQzBD
OTc2MDlFQjAeFw0yNTA1MjMyMzIwMjhaFw0yNjA1MjIyMzI1MjhaMDMxMTAvBgNV
BAMTKEMzQTczMEY0MkVFM0U4MjcyM0FENEI0QUU4ODEwOEQzNTVDRjMzNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfFDd6YYN/qumjqAH/Mg9+Y1YX
IcvDUlPnYY3k6UDODJ/zbu2Kdy8WgRnf09ofnslW7+Z7g/3MnjSM75jT4RaYZ1GH
BeSvZmNve8y0GMAYa5goDXDFQ3uf0lr0G3phYRgo4Xv4/RPYGDoiGqGx/gPzThnP
PML9te8mftpO+qmCor2UqsnGnJ7t0hciHrt3bmyRHYUFWbMIRUileDkkfNfoG1sh
XFLm+/56hWxzLra60s27axm0DKnz+ujKu/Q76Wk+trHIjO0mh+2lsMBIyiDgjFZJ
nHWgt120KjsvE0yBOcBlBKbK96JYdNvtw7EUQDFKbb4Z/4tbS67c+0rERnMLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw6cw9C7j6CcjrUtK6IEI01XPM1EwHwYDVR0j
BBgwFoAU9GK7JSTYjBCaePIj3L1CwMl2CeswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0t5aFN0RFVFTG1nbWVFZGZMOTdudjNkaWt1UXhmQzhwTUFNNXY0a1Zm
VkEvMC9GNDYyQkIyNTI0RDg4QzEwOUE3OEYyMjNEQ0JENDJDMEM5NzYwOUVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0NjJCQjI1MjREODhDMTA5
QTc4RjIyM0RDQkQ0MkMwQzk3NjA5RUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLeWhTdERVRUxtZ21lRWRmTDk3bnYzZGlrdVF4ZkM4cE1BTTV2NGtWZlZBLzAv
MzEzODM5MmUzMTMyMzYyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9flcwDQYJKoZIhvcNAQELBQADggEBAE8TvhKT
6p4SvpMMkQUbYtkGcNQxEb/Jv8Sm2ZDtS+1gysqFe3olHpfyf5m94o3MVZ4Ugoy6
LkqtotpRHt8snuuGC8YM30N2+yf0O1UPmoPQ64khD21wiE91KI6i1CXYUBKkEaRm
2ujS3h8XnYJERp7mzjXLqaM8+asX+FBGs+AKwHttv3j6TrAnUx62f0hC7bhBSxiS
r2kB6hQX9xeC27wx/gRYNfokidx4XS3iMgB13Ac7CznoZIbkmjQng2yi0avvTDse
MIy0SvhrQzCFQawNaHHLvjkamkWjy0hfx3dw60H64sb3bC/0Kbd/UpTLfCAzy4zR
fyrifZ+R3Mu/HGg=
-----END CERTIFICATE-----
Generated at Thu Jun 19 17:17:55 2025 by rpki-client