![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35322e302f32322d3234203d3e20323633393032.roa
File: 3133382e3230342e35322e302f32322d3234203d3e20323633393032.roa (raw, json)
Hash identifier: jQtW5eNJ80rAVneWPFlUcajCNQxZWtoK55Lan2scPH8=
Subject key identifier: AB:3B:5C:60:A5:2C:E0:47:FD:2D:86:88:BB:FB:33:0B:B8:18:E9:97
Certificate issuer: /CN=6C01E915198D0CB1928705B73EF78F8E17FEF297
Certificate serial: 11DE012FE296AC085484C5DC3578D8DB98242EC9
Authority key identifier: 6C:01:E9:15:19:8D:0C:B1:92:87:05:B7:3E:F7:8F:8E:17:FE:F2:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C01E915198D0CB1928705B73EF78F8E17FEF297.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35322e302f32322d3234203d3e20323633393032.roa
Signing time: Wed 18 Dec 2024 18:09:22 +0000
ROA not before: Wed 18 Dec 2024 18:04:22 +0000
ROA not after: Wed 17 Dec 2025 18:09:22 +0000
asID: 263902
IP address blocks: 138.204.52.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:de:01:2f:e2:96:ac:08:54:84:c5:dc:35:78:d8:db:98:24:2e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C01E915198D0CB1928705B73EF78F8E17FEF297
Validity
Not Before: Dec 18 18:04:22 2024 GMT
Not After : Dec 17 18:09:22 2025 GMT
Subject: CN=AB3B5C60A52CE047FD2D8688BBFB330BB818E997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:db:d1:b5:90:b9:77:5b:86:47:27:f3:b2:
13:94:98:8b:ba:9d:42:c5:3f:07:bd:ca:11:46:c1:
61:b8:32:bc:83:69:53:95:4b:15:ec:47:ee:b5:4e:
22:da:5c:c7:e5:1a:87:76:d4:1d:34:52:69:25:ee:
69:3d:35:f3:7b:0a:62:87:b0:12:9d:0f:98:44:f1:
87:a8:3d:a7:2c:6f:45:d1:9e:ba:ea:ac:ae:bc:81:
24:d3:3a:5d:15:21:bf:4d:c8:40:29:05:da:5d:84:
91:c8:a5:65:40:23:80:de:4d:96:01:f8:a7:c1:ce:
b0:46:8c:bc:42:f6:39:b7:45:8f:5c:5a:7f:69:6b:
b7:f6:f5:81:5d:40:0a:81:97:c8:32:37:97:89:f3:
1c:5e:6e:6d:8b:83:fd:ab:29:cd:62:84:96:c8:f4:
8e:a2:16:07:a3:93:ea:2e:aa:79:43:68:b9:6e:d5:
e5:56:ac:52:52:85:d3:fe:98:c0:77:68:cf:ae:25:
49:67:c7:67:b9:ee:a4:36:f2:3e:fa:47:03:c7:42:
c5:9d:48:e3:8d:08:25:9b:44:e4:45:5f:f2:84:0b:
29:3c:7f:e7:19:7d:24:2a:e7:97:00:00:a1:43:b7:
58:df:d9:03:da:e1:d7:b7:29:b8:82:10:8a:eb:a6:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:5C:60:A5:2C:E0:47:FD:2D:86:88:BB:FB:33:0B:B8:18:E9:97
X509v3 Authority Key Identifier:
keyid:6C:01:E9:15:19:8D:0C:B1:92:87:05:B7:3E:F7:8F:8E:17:FE:F2:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/6C01E915198D0CB1928705B73EF78F8E17FEF297.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C01E915198D0CB1928705B73EF78F8E17FEF297.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35322e302f32322d3234203d3e20323633393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.52.0/22
Signature Algorithm: sha256WithRSAEncryption
37:81:66:c5:fc:a8:0c:41:03:ed:3b:56:92:6d:c1:72:f1:c7:
5a:38:19:3a:ba:f1:c2:f0:3b:7b:71:aa:99:42:d5:8b:c3:f1:
e9:b0:2e:1d:a9:f7:40:1b:99:6f:ba:b7:12:25:42:64:61:6b:
83:df:7d:30:a2:3f:32:b2:b7:3a:d7:9e:c5:3a:fb:8d:5a:78:
2e:61:44:91:f1:b8:8b:19:f7:a9:99:c2:b9:43:fb:af:47:b6:
4f:54:96:cd:dd:48:25:f4:56:4b:4e:de:c7:bb:1f:81:ca:07:
e5:00:db:82:d9:09:81:b8:5e:93:b6:de:38:4b:22:a7:76:a0:
a7:3d:52:d0:79:d0:3a:1a:5a:dc:e2:4a:7e:47:24:25:1a:52:
7e:5d:6d:88:a6:44:a8:66:6d:b7:bc:2e:0e:bb:12:dc:98:42:
a7:46:2e:65:57:7a:bf:b1:97:c3:d5:3c:7f:ac:a1:3e:06:70:
a6:6c:98:6a:30:4e:d1:e5:80:71:9a:9f:b0:14:96:ea:3d:43:
e2:d9:62:6e:5d:83:a4:b7:9e:91:95:41:8f:45:ca:24:e5:38:
ca:36:15:7c:cb:cc:11:ac:6c:c8:6e:97:20:c3:8a:2a:33:f7:
cd:c3:3c:93:43:99:70:59:c1:55:5f:bf:cf:7d:90:53:a1:2f:
1a:06:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:57 2025 by rpki-client