Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
File: 3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier: UdUJFPdyA3uUYEjjT07w/WmAoU8W0Hrf9y/vSp9sc3w=
Subject key identifier: 69:A1:1B:B7:AB:B1:EA:99:A2:E5:1B:5B:D9:AF:2B:D9:68:88:8C:DF
Certificate issuer: /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial: 01DA0D30A24416AA295B16EFDC25125FEAE9DBE6
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
Signing time: Mon 10 Feb 2025 14:30:11 +0000
ROA not before: Mon 10 Feb 2025 14:25:11 +0000
ROA not after: Mon 09 Feb 2026 14:30:11 +0000
asID: 28349
IP address blocks: 189.126.176.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:da:0d:30:a2:44:16:aa:29:5b:16:ef:dc:25:12:5f:ea:e9:db:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Validity
Not Before: Feb 10 14:25:11 2025 GMT
Not After : Feb 9 14:30:11 2026 GMT
Subject: CN=69A11BB7ABB1EA99A2E51B5BD9AF2BD968888CDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:31:05:84:88:4e:c6:39:8b:47:14:3e:42:
75:47:a6:cc:48:70:38:13:0c:41:d6:01:ff:ab:68:
e0:51:55:81:5c:e7:06:36:2b:f2:dd:f6:ab:2f:e6:
2a:e0:a5:75:0f:ee:45:27:ea:33:cb:2f:47:f5:1f:
66:b6:3b:6c:a0:73:6e:31:15:09:9e:cc:a1:e6:e8:
5b:20:19:0d:d5:23:66:6c:ab:b4:24:b6:ef:1c:b1:
ea:e3:1f:96:f3:7b:7b:e9:17:0f:4a:41:07:ae:dc:
f7:9d:8a:ee:42:a8:96:0c:91:b4:1d:ae:9c:c5:e0:
74:d4:0f:c3:22:00:a7:16:f0:a0:a2:6c:4a:aa:5a:
68:01:ec:68:de:74:05:09:57:b7:8a:1e:f7:78:a1:
da:d9:75:d3:de:31:c4:09:4e:34:c6:60:f9:ee:eb:
77:66:88:cd:6a:be:33:6b:95:9d:ee:ef:df:db:92:
4d:5a:c7:cb:53:17:ca:5c:ac:ef:9b:21:76:28:90:
b3:5b:cc:13:30:5b:c2:c5:57:48:fc:ac:c6:9e:8c:
75:9e:b6:81:93:62:89:93:d2:c5:18:0e:9c:0a:9f:
80:48:c3:43:97:22:86:73:d1:cb:47:e4:e7:d9:b6:
61:9b:73:b6:09:4b:60:11:eb:1c:ba:f6:9e:83:a1:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A1:1B:B7:AB:B1:EA:99:A2:E5:1B:5B:D9:AF:2B:D9:68:88:8C:DF
X509v3 Authority Key Identifier:
keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:a1:9d:52:df:a9:2a:2c:12:05:9f:3b:c6:dd:4e:63:fa:46:
c0:b7:f1:92:0a:8d:1b:a7:af:85:ce:a0:50:35:24:16:5e:35:
6a:9a:19:b2:cc:27:15:2e:ca:a3:71:d6:78:43:b4:ce:73:f2:
03:d4:a8:f4:b7:9d:01:cd:7c:e4:d5:6b:c7:bb:9e:33:52:d1:
68:90:c6:d2:09:4d:e0:d0:a1:58:e5:9e:b8:a9:67:f1:ad:da:
1d:56:cf:f6:f9:ed:bb:4e:1c:ca:22:43:25:b7:b5:03:13:df:
5c:66:f8:a7:3d:2a:c5:fd:6c:3f:4b:30:80:de:44:5d:e2:d8:
39:1b:a5:ba:9e:b3:8a:67:53:8a:a0:15:42:45:11:3b:39:65:
ae:f6:2e:79:d6:11:e3:ba:2a:9d:50:ff:99:a8:df:94:84:e1:
18:d5:44:65:18:94:ee:d5:12:64:a9:17:6c:fd:b9:47:f4:fa:
c2:42:c1:7f:18:eb:7c:ef:66:ea:70:aa:eb:e6:ae:54:7d:d1:
b0:20:ac:bf:69:09:c1:91:cb:60:ab:cf:06:bd:91:e7:ab:2b:
1e:ad:11:0c:61:3a:61:c7:ea:fd:89:27:ec:01:22:a3:51:10:
da:04:74:25:fa:3a:37:8b:50:b9:ef:58:5b:f0:a8:23:8b:b1:
fd:f9:26:68
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAdoNMKJEFqopWxbv3CUSX+rp2+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRkE4QzBFODA0QjRDRkM4REQxRTA1M0MyNDU0ODFF
RDBGNjZDMjAeFw0yNTAyMTAxNDI1MTFaFw0yNjAyMDkxNDMwMTFaMDMxMTAvBgNV
BAMTKDY5QTExQkI3QUJCMUVBOTlBMkU1MUI1QkQ5QUYyQkQ5Njg4ODhDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+TEFhIhOxjmLRxQ+QnVHpsxI
cDgTDEHWAf+raOBRVYFc5wY2K/Ld9qsv5irgpXUP7kUn6jPLL0f1H2a2O2ygc24x
FQmezKHm6FsgGQ3VI2Zsq7Qktu8cserjH5bze3vpFw9KQQeu3Pediu5CqJYMkbQd
rpzF4HTUD8MiAKcW8KCibEqqWmgB7GjedAUJV7eKHvd4odrZddPeMcQJTjTGYPnu
63dmiM1qvjNrlZ3u79/bkk1ax8tTF8pcrO+bIXYokLNbzBMwW8LFV0j8rMaejHWe
toGTYomT0sUYDpwKn4BIw0OXIoZz0ctH5OfZtmGbc7YJS2AR6xy69p6Doe55AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaaEbt6ux6pmi5Rtb2a8r2WiIjN8wHwYDVR0j
BBgwFoAUpR+owOgEtM/I3R4FPCRUge0PZsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC9BNTFGQThDMEU4MDRCNENGQzhERDFFMDUzQzI0NTQ4MUVEMEY2NkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MUZBOEMwRTgwNEI0Q0ZD
OEREMUUwNTNDMjQ1NDgxRUQwRjY2QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM5MmUzMTMyMzYyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9frAwDQYJKoZIhvcNAQELBQADggEBAJuhnVLf
qSosEgWfO8bdTmP6RsC38ZIKjRunr4XOoFA1JBZeNWqaGbLMJxUuyqNx1nhDtM5z
8gPUqPS3nQHNfOTVa8e7njNS0WiQxtIJTeDQoVjlnripZ/Gt2h1Wz/b57btOHMoi
QyW3tQMT31xm+Kc9KsX9bD9LMIDeRF3i2Dkbpbqes4pnU4qgFUJFETs5Za72LnnW
EeO6Kp1Q/5mo35SE4RjVRGUYlO7VEmSpF2z9uUf0+sJCwX8Y63zvZupwquvmrlR9
0bAgrL9pCcGRy2Crzwa9keerKx6tEQxhOmHH6v2JJ+wBIqNRENoEdCX6OjeLULnv
WFvwqCOLsf35Jmg=
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:31:09 2025 by rpki-client