Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa
File: 3138392e38392e37362e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier: mfzgwRWJ8BR22nUUxQloMB85CUPTNv1dNhfFRwDamgo=
Subject key identifier: 6D:05:0A:75:5E:29:42:45:36:91:9F:3C:A8:33:09:30:3A:6A:89:20
Certificate issuer: /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial: 3E985153001077D627DF2B0E95B862E61AE69C4C
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa
Signing time: Mon 17 Mar 2025 14:16:02 +0000
ROA not before: Mon 17 Mar 2025 14:11:02 +0000
ROA not after: Mon 16 Mar 2026 14:16:02 +0000
asID: 28184
IP address blocks: 189.89.76.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:98:51:53:00:10:77:d6:27:df:2b:0e:95:b8:62:e6:1a:e6:9c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Validity
Not Before: Mar 17 14:11:02 2025 GMT
Not After : Mar 16 14:16:02 2026 GMT
Subject: CN=6D050A755E29424536919F3CA83309303A6A8920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:dd:a7:18:7a:fd:01:2f:2c:63:02:c6:d7:
46:31:44:27:30:3c:ca:e4:48:c2:cf:b6:56:7d:35:
43:97:e4:a7:ef:fe:aa:dc:01:1e:e5:97:dc:a4:1c:
73:34:a7:86:74:95:91:bc:f1:38:33:a4:59:61:95:
ce:85:b5:e4:6c:11:f4:71:d4:ce:5c:58:82:20:f4:
1b:7f:de:b4:a1:d3:a9:a3:2a:3e:67:77:26:94:65:
a4:f1:65:61:8b:aa:80:31:4f:2d:aa:e6:70:88:27:
13:77:42:03:16:07:01:d2:fe:85:5e:52:a2:ab:0b:
9b:7e:f9:5f:cd:73:06:5f:8c:b9:c9:bf:a6:07:c5:
96:8c:c9:45:35:31:79:d2:6c:73:1b:d9:ae:72:8b:
3e:e2:81:e5:36:cc:51:68:04:14:6e:22:02:f1:b1:
45:f7:27:c9:b8:6d:42:78:61:20:73:a2:86:8d:0c:
c3:14:b2:a3:49:17:49:7f:c4:27:12:13:26:66:a5:
90:9f:6a:ed:e9:b2:68:44:a8:dc:e9:5b:d1:c2:13:
81:47:4d:fc:a5:bd:40:ec:8a:1c:c1:9b:4c:85:75:
6e:4f:c6:03:90:fc:1c:9b:be:54:86:ef:d0:89:8f:
aa:81:67:23:a9:a9:37:3e:a8:66:93:a5:b9:b8:7a:
16:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:05:0A:75:5E:29:42:45:36:91:9F:3C:A8:33:09:30:3A:6A:89:20
X509v3 Authority Key Identifier:
keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.76.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bd:be:77:0c:14:09:ac:2e:c7:e8:da:51:c3:f0:1c:59:bb:
9d:40:c6:38:dd:97:7c:4e:3b:bd:e9:d6:58:e7:e2:d6:db:8c:
bd:80:fc:bc:5b:44:d9:51:50:33:4d:f0:d9:c3:08:7b:25:67:
4e:d8:3b:05:8b:42:12:f5:63:9e:05:d6:4b:08:fc:f5:35:6d:
f0:32:c7:72:6e:a2:84:84:8e:20:84:79:c3:dc:47:77:29:16:
d6:54:8b:26:d1:42:38:65:2f:cd:f8:21:5a:2c:53:40:83:9f:
31:2c:ae:4a:60:58:db:51:e8:69:c5:7f:a4:81:a6:87:ee:27:
f0:cd:45:ea:d8:59:e2:de:8a:f8:14:69:1d:b6:00:b5:4d:70:
3d:a1:68:bc:b0:26:27:13:6c:53:6f:9b:7b:ce:46:ab:92:e8:
8c:5c:81:3e:1d:55:a9:4c:77:71:e2:5f:4f:21:2c:d2:32:fc:
7f:18:a5:79:b6:08:ed:d0:82:5f:b4:7a:cf:6c:b6:56:aa:97:
03:5a:3e:e6:28:ce:73:b2:ef:7a:55:9a:b5:12:fa:fe:36:9b:
bc:c6:be:79:9f:ae:b8:48:47:d2:3e:ee:ec:aa:fa:97:bc:98:
8a:e9:02:99:0f:b3:e0:5f:8a:d3:8c:3c:17:4c:f7:eb:a2:66:
3a:8d:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:58:05 2025 by rpki-client