Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa
File: 3138392e38392e37322e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier: /Cg9kfuwihcNIGtE94vZCRQljyk9gZQXdREYw3cIgFE=
Subject key identifier: FC:30:BD:42:D5:44:E1:20:A9:D0:AD:32:E9:34:47:6F:13:A7:02:3B
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: 416A808862F82CF57EF4E76C01B8F83E69FEA43B
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa
Signing time: Wed 04 Dec 2024 17:35:28 +0000
ROA not before: Wed 04 Dec 2024 17:30:28 +0000
ROA not after: Wed 03 Dec 2025 17:35:28 +0000
asID: 28184
IP address blocks: 189.89.72.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:6a:80:88:62:f8:2c:f5:7e:f4:e7:6c:01:b8:f8:3e:69:fe:a4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Dec 4 17:30:28 2024 GMT
Not After : Dec 3 17:35:28 2025 GMT
Subject: CN=FC30BD42D544E120A9D0AD32E934476F13A7023B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:95:36:bf:de:8a:75:ce:49:20:10:c7:4f:
99:fb:10:dd:8d:a7:32:c9:7c:d4:ad:d3:bb:35:d0:
6f:bc:53:79:e2:52:a6:49:60:11:19:8d:f3:4c:de:
86:47:6e:e1:20:10:eb:f9:ea:f6:41:26:d8:0f:bc:
47:0b:d5:94:1f:26:13:42:5e:61:7b:0c:fd:2d:e7:
cc:a6:96:67:04:9c:39:04:46:10:79:61:33:5c:e3:
1c:58:b5:32:d8:02:9e:f0:d3:3a:1b:d6:5d:87:8a:
21:a8:1e:5f:f8:55:c7:db:8a:a0:3b:ef:d7:16:7d:
7b:67:43:ba:ab:37:c2:c7:78:12:8c:dd:7e:82:f9:
8d:63:9c:3b:30:1a:10:64:d5:2e:b0:86:ef:9c:45:
6b:b9:5f:b0:c4:c9:2e:e5:6c:fa:d2:07:2f:89:11:
65:a4:16:5b:79:29:9c:73:19:e1:09:da:fa:6e:81:
e2:5f:77:ce:9c:f5:a6:4a:7d:65:c3:36:af:4d:e1:
de:d9:86:1f:d6:45:03:ba:53:37:89:44:12:b2:70:
7c:af:77:e6:b5:f8:27:f1:7f:64:6d:91:86:c9:97:
a9:d6:04:32:e6:05:9b:aa:29:cd:1c:98:d6:87:b9:
b3:94:d8:d0:5a:8c:81:dc:ec:5a:ca:85:4e:ca:20:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:BD:42:D5:44:E1:20:A9:D0:AD:32:E9:34:47:6F:13:A7:02:3B
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32342d3234203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.72.0/24
Signature Algorithm: sha256WithRSAEncryption
07:73:ba:2d:90:08:68:7c:f7:d2:40:10:d9:f8:27:75:fc:8d:
22:c3:86:0a:cb:fa:35:a2:15:a3:67:a3:a1:84:46:2f:eb:9c:
b2:8d:e6:74:29:9f:1c:58:cd:e8:b1:91:ec:18:e5:dc:33:95:
00:8a:13:6b:81:24:12:7c:3e:0c:50:ea:f2:29:0b:bf:7c:65:
46:f8:99:ee:b5:30:4f:3b:df:52:c8:91:80:1b:50:09:c8:d4:
4c:87:ea:b0:54:10:d7:b0:45:87:b2:e0:00:11:9d:41:ea:87:
1a:02:c2:2d:bb:db:cf:aa:29:56:90:93:02:c9:af:e6:4d:3f:
ad:38:7b:1e:1a:05:9c:dc:eb:ba:2f:81:8b:e2:29:6a:f2:7d:
9f:66:1c:ad:9e:6a:bc:dd:98:6f:16:b1:f2:28:ff:be:92:82:
4f:b9:25:ac:bb:cb:5a:16:09:ef:d8:ca:38:62:d3:a6:1d:eb:
72:e4:82:9c:22:e8:31:43:f5:f0:42:b0:02:7d:25:20:be:e6:
5d:66:9d:d0:82:d4:4e:9b:88:69:d0:ea:69:f5:55:9a:a1:9b:
29:76:9e:9f:a2:34:27:20:c3:4d:eb:74:5d:74:87:cf:c5:17:
bd:36:dd:1a:59:5a:ca:2f:8c:50:ee:46:14:4a:95:bc:ee:04:
0b:6b:b3:01
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQWqAiGL4LPV+9OdsAbj4Pmn+pDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDNkUwNTg3RkQ3RjcwMDExMzQ3QTlCOTM2NzlBMTEx
QTlBN0ZCOTAeFw0yNDEyMDQxNzMwMjhaFw0yNTEyMDMxNzM1MjhaMDMxMTAvBgNV
BAMTKEZDMzBCRDQyRDU0NEUxMjBBOUQwQUQzMkU5MzQ0NzZGMTNBNzAyM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8k5U2v96Kdc5JIBDHT5n7EN2N
pzLJfNSt07s10G+8U3niUqZJYBEZjfNM3oZHbuEgEOv56vZBJtgPvEcL1ZQfJhNC
XmF7DP0t58ymlmcEnDkERhB5YTNc4xxYtTLYAp7w0zob1l2HiiGoHl/4VcfbiqA7
79cWfXtnQ7qrN8LHeBKM3X6C+Y1jnDswGhBk1S6whu+cRWu5X7DEyS7lbPrSBy+J
EWWkFlt5KZxzGeEJ2vpugeJfd86c9aZKfWXDNq9N4d7Zhh/WRQO6UzeJRBKycHyv
d+a1+Cfxf2RtkYbJl6nWBDLmBZuqKc0cmNaHubOU2NBajIHc7FrKhU7KICMBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/DC9QtVE4SCp0K0y6TRHbxOnAjswHwYDVR0j
BBgwFoAU8sbgWH/X9wARNHqbk2eaERqaf7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9GMkM2RTA1ODdGRDdGNzAwMTEzNDdBOUI5MzY3OUExMTFBOUE3RkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQzZFMDU4N0ZEN0Y3MDAx
MTM0N0E5QjkzNjc5QTExMUE5QTdGQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZSDANBgkqhkiG9w0BAQsFAAOCAQEAB3O6LZAIaHz3
0kAQ2fgndfyNIsOGCsv6NaIVo2ejoYRGL+ucso3mdCmfHFjN6LGR7Bjl3DOVAIoT
a4EkEnw+DFDq8ikLv3xlRviZ7rUwTzvfUsiRgBtQCcjUTIfqsFQQ17BFh7LgABGd
QeqHGgLCLbvbz6opVpCTAsmv5k0/rTh7HhoFnNzrui+Bi+IpavJ9n2YcrZ5qvN2Y
bxax8ij/vpKCT7klrLvLWhYJ79jKOGLTph3rcuSCnCLoMUP18EKwAn0lIL7mXWad
0ILUTpuIadDqafVVmqGbKXaen6I0JyDDTet0XXSHz8UXvTbdGllayi+MUO5GFEqV
vO4EC2uzAQ==
-----END CERTIFICATE-----
Generated at Sun May 4 03:12:50 2025 by rpki-client