Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa
File: 3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa (raw, json)
Hash identifier: tUzGOECjVfzjZtmPKmJuWHj0wIk38Be3q8JvMbEjvKg=
Subject key identifier: 08:24:1D:B0:E4:F6:50:CF:DF:36:90:F9:96:B6:DF:5D:B8:E8:06:F1
Certificate issuer: /CN=1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76
Certificate serial: 1BB3F6F9055A969BB6E3F2BAD29E685EA192B073
Authority key identifier: 1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa
Signing time: Tue 21 Jan 2025 20:53:56 +0000
ROA not before: Tue 21 Jan 2025 20:48:56 +0000
ROA not after: Tue 20 Jan 2026 20:53:56 +0000
asID: 11432
IP address blocks: 200.201.128.0/19 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b3:f6:f9:05:5a:96:9b:b6:e3:f2:ba:d2:9e:68:5e:a1:92:b0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76
Validity
Not Before: Jan 21 20:48:56 2025 GMT
Not After : Jan 20 20:53:56 2026 GMT
Subject: CN=08241DB0E4F650CFDF3690F996B6DF5DB8E806F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:87:b6:7d:ca:33:22:67:cc:b1:e9:58:ca:
71:85:5d:0e:72:31:2f:89:f5:49:e5:df:e0:00:36:
ac:97:bd:4d:cc:ba:f0:91:73:cb:66:f2:5c:3e:e9:
1b:88:f8:6a:20:65:33:21:f7:6b:a8:c6:ae:2e:0a:
b2:d8:c0:e3:75:63:05:37:41:ec:16:71:f9:b4:c9:
01:38:23:b2:d1:7b:73:5e:19:51:92:b4:91:ce:70:
99:d7:f6:6d:2c:c3:94:01:fd:44:ae:72:c2:12:b9:
53:bb:3d:98:c3:64:e8:54:8e:3e:d9:ed:5f:cc:4c:
a2:e6:45:98:2f:cb:02:a0:7f:65:80:bb:3f:5a:c3:
ed:1e:58:8f:5a:5b:3d:64:0e:5a:fe:8a:da:63:72:
da:b4:7a:84:a8:92:7b:79:e5:fe:84:bf:e3:8f:32:
e0:6e:fe:59:a0:02:66:4e:ae:cc:3b:38:ed:de:72:
56:12:78:17:0e:3f:9c:ba:8f:d1:0e:c0:18:88:98:
d9:27:ec:39:89:37:dc:7c:c1:77:a2:06:17:8d:e9:
d6:d8:35:e6:e5:04:40:b1:16:2d:50:75:66:27:d1:
61:69:27:59:5c:f7:5c:24:b3:70:8c:34:db:e0:78:
30:9a:19:5a:52:31:2d:e8:8d:26:9b:cd:f5:22:96:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:24:1D:B0:E4:F6:50:CF:DF:36:90:F9:96:B6:DF:5D:B8:E8:06:F1
X509v3 Authority Key Identifier:
keyid:1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3230312e3132382e302f31392d3234203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.201.128.0/19
Signature Algorithm: sha256WithRSAEncryption
98:22:9a:7c:d9:2b:94:fd:66:66:3f:fc:b1:fe:2c:04:37:c2:
64:42:ee:7d:78:83:6c:5f:bf:67:2d:aa:b0:d0:6d:37:92:2c:
6f:6a:48:5a:13:9c:3f:00:57:1e:ea:f0:0d:cf:fb:88:1d:79:
70:34:11:8c:47:bf:26:26:d4:42:fc:da:87:54:9d:65:39:5d:
d9:70:a3:34:a1:2f:73:28:67:22:3d:ba:b3:50:cc:4e:2a:0d:
94:ff:f9:9c:85:a9:0e:02:68:15:19:af:0b:81:22:91:21:63:
73:e6:e8:bd:b5:41:b3:c0:37:1f:18:9f:e9:4e:0f:c6:06:b9:
16:e6:33:46:59:a7:45:b4:a7:34:3f:64:20:1c:a3:82:ff:fb:
4f:b3:df:9a:4d:c8:e6:c4:90:7d:c5:59:7c:3a:c8:e4:e6:33:
b2:9c:3a:f7:96:54:eb:bc:4a:36:26:97:e3:c0:5a:f6:c2:66:
05:7d:52:1b:41:01:a6:b4:9f:dc:22:6f:52:d7:bf:45:8c:c8:
09:2c:0e:83:05:d4:15:d3:99:30:ff:e3:5f:00:7f:a8:ff:69:
34:4f:eb:30:46:c6:68:a9:27:37:7d:6f:3a:db:28:2a:d1:22:
8d:0a:e8:29:c7:23:ec:62:1e:49:11:91:8d:02:32:f6:62:d2:
ad:4e:bb:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG7P2+QValpu24/K60p5oXqGSsHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFCNTRBNEYwNTRFM0JGRDc4OEJEQzQ1RkYxQjZDNzcz
OUJCOUQ3NjAeFw0yNTAxMjEyMDQ4NTZaFw0yNjAxMjAyMDUzNTZaMDMxMTAvBgNV
BAMTKDA4MjQxREIwRTRGNjUwQ0ZERjM2OTBGOTk2QjZERjVEQjhFODA2RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+Ie2fcozImfMselYynGFXQ5y
MS+J9Unl3+AANqyXvU3MuvCRc8tm8lw+6RuI+GogZTMh92uoxq4uCrLYwON1YwU3
QewWcfm0yQE4I7LRe3NeGVGStJHOcJnX9m0sw5QB/USucsISuVO7PZjDZOhUjj7Z
7V/MTKLmRZgvywKgf2WAuz9aw+0eWI9aWz1kDlr+itpjctq0eoSoknt55f6Ev+OP
MuBu/lmgAmZOrsw7OO3eclYSeBcOP5y6j9EOwBiImNkn7DmJN9x8wXeiBheN6dbY
NeblBECxFi1QdWYn0WFpJ1lc91wks3CMNNvgeDCaGVpSMS3ojSabzfUilid/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCCQdsOT2UM/fNpD5lrbfXbjoBvEwHwYDVR0j
BBgwFoAUGrVKTwVOO/14i9xF/xtsdzm7nXYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC8xQUI1NEE0RjA1NEUzQkZENzg4QkRDNDVGRjFCNkM3NzM5QkI5RDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBQjU0QTRGMDU0RTNCRkQ3
ODhCREM0NUZGMUI2Qzc3MzlCQjlENzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAv
MzIzMDMwMmUzMjMwMzEyZTMxMzIzODJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMx
MzEzNDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAXIyYAwDQYJKoZIhvcNAQELBQADggEBAJgimnzZ
K5T9ZmY//LH+LAQ3wmRC7n14g2xfv2ctqrDQbTeSLG9qSFoTnD8AVx7q8A3P+4gd
eXA0EYxHvyYm1EL82odUnWU5XdlwozShL3MoZyI9urNQzE4qDZT/+ZyFqQ4CaBUZ
rwuBIpEhY3Pm6L21QbPANx8Yn+lOD8YGuRbmM0ZZp0W0pzQ/ZCAco4L/+0+z35pN
yObEkH3FWXw6yOTmM7KcOveWVOu8SjYml+PAWvbCZgV9UhtBAaa0n9wib1LXv0WM
yAksDoMF1BXTmTD/418Af6j/aTRP6zBGxmipJzd9bzrbKCrRIo0K6CnHI+xiHkkR
kY0CMvZi0q1OuyQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:48:53 2025 by rpki-client