Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32322d3232203d3e203238313834.roa
File: 3138392e38392e36382e302f32322d3232203d3e203238313834.roa (raw, json)
Hash identifier: P0aIsA//fzxiIPmAeBcn5cdOYgiY5Ah7Y0X4YJjp9S4=
Subject key identifier: AD:7A:A5:AF:36:B8:75:E0:6D:D2:DA:BE:D6:45:52:64:DB:BB:38:A4
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: 4FF1753840E1184022435F415D624E15B429893C
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32322d3232203d3e203238313834.roa
Signing time: Mon 24 Mar 2025 18:06:32 +0000
ROA not before: Mon 24 Mar 2025 18:01:32 +0000
ROA not after: Mon 23 Mar 2026 18:06:32 +0000
asID: 28184
IP address blocks: 189.89.68.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f1:75:38:40:e1:18:40:22:43:5f:41:5d:62:4e:15:b4:29:89:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Mar 24 18:01:32 2025 GMT
Not After : Mar 23 18:06:32 2026 GMT
Subject: CN=AD7AA5AF36B875E06DD2DABED6455264DBBB38A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:a3:9d:84:ef:cf:bd:27:50:9e:e0:af:c3:
d7:c5:26:51:d7:80:73:48:14:6d:7c:c9:cb:fe:f6:
ed:46:7c:5c:c1:0d:93:a4:0f:14:15:8a:99:0f:5e:
ef:7a:3a:b6:59:f2:d9:6e:42:11:c5:c0:06:c3:33:
aa:7a:b3:f5:75:1c:09:86:df:25:80:5d:c5:81:d1:
09:18:80:1f:24:7a:a2:06:3a:3f:a6:31:23:d3:eb:
a1:89:68:57:03:bf:13:06:0c:6b:f6:94:9e:9b:c4:
09:39:18:1a:de:06:d2:0a:58:f1:4b:fd:1e:01:31:
c9:e2:2d:68:e2:15:fa:74:d0:7a:c6:4b:e1:20:cc:
be:21:a9:b8:56:31:23:32:d3:0b:c6:aa:57:29:c6:
1b:92:a2:9a:ad:88:64:b8:ef:8a:53:e4:d5:62:9b:
5e:ad:60:85:16:ad:ad:5f:ac:6e:99:f3:84:ee:0b:
dd:f2:88:35:79:38:ea:77:c8:8a:c8:96:b7:8d:34:
0f:28:b0:16:2f:0e:af:3a:79:56:de:4d:ee:eb:22:
49:b9:8e:14:84:10:42:fa:93:38:00:b0:f7:72:a2:
02:25:b0:e3:28:29:e4:8a:9c:d9:8b:d3:59:c0:a5:
eb:de:84:fa:19:cd:23:99:7f:9e:11:7f:0a:44:a0:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7A:A5:AF:36:B8:75:E0:6D:D2:DA:BE:D6:45:52:64:DB:BB:38:A4
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32322d3232203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.68.0/22
Signature Algorithm: sha256WithRSAEncryption
13:98:62:f4:28:4d:c3:ed:3d:b1:4e:d0:30:f1:51:7b:c2:95:
00:15:a5:00:d1:7c:5c:db:9a:6c:97:c9:3e:44:3a:a4:79:7e:
7b:7c:e7:7a:fe:53:3f:c8:d6:86:9c:71:9c:5e:fe:60:f8:59:
09:9c:90:78:b1:4c:a1:79:02:f1:43:72:10:ae:56:f3:ce:84:
4e:87:05:fc:dc:89:ca:4d:68:69:c8:f6:b5:39:cb:0b:77:17:
a2:74:75:68:59:b8:8b:ff:6e:c4:8c:39:e8:c9:86:8d:ab:3a:
68:6a:4e:d5:d7:bc:80:90:7b:a7:ba:89:17:ee:e3:ce:f6:5e:
b3:25:22:24:5a:df:0f:8a:81:b0:b9:8d:97:ef:97:e8:c2:8a:
63:2d:94:7f:2f:a0:7a:c7:46:9c:98:35:f2:ba:9f:19:39:8c:
cf:b9:e8:fd:c3:95:b5:4a:82:1c:59:49:41:3a:f6:a6:3a:82:
ff:aa:f3:87:a9:5a:b1:7e:cd:35:61:9f:e2:47:e1:bb:91:82:
17:de:68:61:4f:a2:f3:af:8a:72:2c:ac:1a:81:2b:4d:08:5e:
40:b4:cb:50:2d:ff:68:2e:3a:40:d1:8c:06:2e:91:d9:b8:a9:
06:54:09:a2:3a:ba:10:ce:d7:af:21:90:c7:d0:dd:3a:24:de:
1d:c8:90:67
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUT/F1OEDhGEAiQ19BXWJOFbQpiTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDNkUwNTg3RkQ3RjcwMDExMzQ3QTlCOTM2NzlBMTEx
QTlBN0ZCOTAeFw0yNTAzMjQxODAxMzJaFw0yNjAzMjMxODA2MzJaMDMxMTAvBgNV
BAMTKEFEN0FBNUFGMzZCODc1RTA2REQyREFCRUQ2NDU1MjY0REJCQjM4QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFI6OdhO/PvSdQnuCvw9fFJlHX
gHNIFG18ycv+9u1GfFzBDZOkDxQVipkPXu96OrZZ8tluQhHFwAbDM6p6s/V1HAmG
3yWAXcWB0QkYgB8keqIGOj+mMSPT66GJaFcDvxMGDGv2lJ6bxAk5GBreBtIKWPFL
/R4BMcniLWjiFfp00HrGS+EgzL4hqbhWMSMy0wvGqlcpxhuSopqtiGS474pT5NVi
m16tYIUWra1frG6Z84TuC93yiDV5OOp3yIrIlreNNA8osBYvDq86eVbeTe7rIkm5
jhSEEEL6kzgAsPdyogIlsOMoKeSKnNmL01nApevehPoZzSOZf54RfwpEoFBhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUrXqlrza4deBt0tq+1kVSZNu7OKQwHwYDVR0j
BBgwFoAU8sbgWH/X9wARNHqbk2eaERqaf7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9GMkM2RTA1ODdGRDdGNzAwMTEzNDdBOUI5MzY3OUExMTFBOUE3RkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQzZFMDU4N0ZEN0Y3MDAx
MTM0N0E5QjkzNjc5QTExMUE5QTdGQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr1ZRDANBgkqhkiG9w0BAQsFAAOCAQEAE5hi9ChNw+09
sU7QMPFRe8KVABWlANF8XNuabJfJPkQ6pHl+e3znev5TP8jWhpxxnF7+YPhZCZyQ
eLFMoXkC8UNyEK5W886ETocF/NyJyk1oacj2tTnLC3cXonR1aFm4i/9uxIw56MmG
jas6aGpO1de8gJB7p7qJF+7jzvZesyUiJFrfD4qBsLmNl++X6MKKYy2Ufy+gesdG
nJg18rqfGTmMz7no/cOVtUqCHFlJQTr2pjqC/6rzh6lasX7NNWGf4kfhu5GCF95o
YU+i86+KciysGoErTQheQLTLUC3/aC46QNGMBi6R2bipBlQJojq6EM7XryGQx9Dd
OiTeHciQZw==
-----END CERTIFICATE-----
Generated at Sat May 3 17:26:49 2025 by rpki-client