Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/3138392e33392e39362e302f32302d3332203d3e203238333035.roa
File: 3138392e33392e39362e302f32302d3332203d3e203238333035.roa (raw, json)
Hash identifier: YG1K/ShgfdXloHQLk0pvW55EZVjg/llKx1Tuu6evW98=
Subject key identifier: A2:86:C0:1D:0C:EE:27:A2:0E:CF:13:37:D1:A2:9F:21:98:29:EA:3C
Certificate issuer: /CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
Certificate serial: 28D00F5851324A18A9A23C73A55EA277CABB77DF
Authority key identifier: F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/3138392e33392e39362e302f32302d3332203d3e203238333035.roa
Signing time: Sat 05 Oct 2024 16:33:43 +0000
ROA not before: Sat 05 Oct 2024 16:28:43 +0000
ROA not after: Sat 04 Oct 2025 16:33:43 +0000
asID: 28305
IP address blocks: 189.39.96.0/20 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d0:0f:58:51:32:4a:18:a9:a2:3c:73:a5:5e:a2:77:ca:bb:77:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2
Validity
Not Before: Oct 5 16:28:43 2024 GMT
Not After : Oct 4 16:33:43 2025 GMT
Subject: CN=A286C01D0CEE27A20ECF1337D1A29F219829EA3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:72:21:6c:93:34:22:51:d9:a4:7f:f6:9b:
ac:d3:9c:1d:81:5c:ca:c8:5d:e2:22:d8:f9:49:11:
86:37:d8:42:8f:f8:f2:28:95:7e:bc:f8:22:64:1c:
f1:1a:a4:31:10:6a:95:b4:27:49:ef:eb:9f:fb:91:
61:2b:b4:8c:c5:dd:a8:94:35:1c:3b:d2:91:32:fa:
ca:f6:f0:df:64:ce:cf:66:44:a9:81:b2:57:6d:d5:
4b:bc:80:d7:4d:1d:03:40:c9:78:b1:0a:cd:a0:40:
1a:28:fe:04:a2:e4:aa:d1:4b:37:f4:4a:5e:29:dc:
25:23:e9:9e:09:4f:2c:f4:34:25:07:9d:bf:f0:bd:
5f:ef:6e:d1:18:32:38:de:ee:c2:af:2d:e2:53:9d:
93:95:43:75:b8:81:31:8f:7e:e2:67:66:65:85:af:
65:99:36:e3:75:f2:7c:9e:a7:2c:6f:84:2a:d9:4e:
81:d7:16:87:8b:e3:7e:21:f6:47:59:5c:4f:79:07:
c8:46:ee:4f:47:c9:0f:84:64:b7:d1:0c:46:ae:da:
e6:d7:27:e1:ec:0c:2e:c3:2b:ec:61:16:10:fb:f0:
c7:5b:fc:60:55:fe:8c:8b:5f:1d:4c:7b:29:84:54:
dc:b7:dd:25:3b:91:b6:05:d1:ab:39:19:d9:3e:b4:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:86:C0:1D:0C:EE:27:A2:0E:CF:13:37:D1:A2:9F:21:98:29:EA:3C
X509v3 Authority Key Identifier:
keyid:F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/3138392e33392e39362e302f32302d3332203d3e203238333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.39.96.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:80:0d:c5:8d:bc:a2:7d:c6:ea:29:f1:89:cd:2c:54:86:95:
e5:b8:60:e6:c0:89:59:8e:8d:f2:c4:54:e5:17:ca:19:db:ce:
9d:b7:7e:15:ea:95:eb:0f:c1:13:b2:35:54:38:9a:2c:1c:90:
d8:ce:4b:b6:48:0e:d4:16:df:6b:05:fb:b5:b3:5a:81:3f:8a:
fc:06:1f:33:37:9f:a2:b8:0d:ca:a1:d5:03:6f:e0:69:f8:b8:
51:5c:e9:0f:ce:dd:f6:df:8c:cc:24:d2:14:2c:3f:b9:09:51:
af:a1:c3:15:3a:42:18:df:28:69:cc:f2:37:14:62:04:09:07:
1f:c5:43:ab:c3:5a:f5:81:16:a0:ff:4c:d2:bb:23:c4:44:5b:
33:78:ba:c2:5b:f0:18:99:16:d7:37:d9:65:1c:20:06:64:9f:
58:38:c6:86:9b:14:84:8d:cd:7f:ed:cd:98:93:4f:cb:3e:85:
b7:ad:95:0a:6b:c0:37:22:93:7b:3c:05:92:b4:07:a2:82:fc:
cd:af:32:9d:71:6d:53:96:78:9f:fe:d0:31:45:34:72:97:f0:
4e:3f:7e:c0:4b:e8:5c:1e:65:35:54:5c:77:9c:a9:8e:4b:23:
e8:2f:0b:3a:7d:0e:2b:68:b1:db:f8:21:37:17:09:dd:d3:b1:
55:fa:f0:7b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKNAPWFEyShipojxzpV6id8q7d98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY4NTVDMzc4RjlDOUNBMzcxQ0VBQTM0MEE5RkNCRjQ4
RkM5REZBMjAeFw0yNDEwMDUxNjI4NDNaFw0yNTEwMDQxNjMzNDNaMDMxMTAvBgNV
BAMTKEEyODZDMDFEMENFRTI3QTIwRUNGMTMzN0QxQTI5RjIxOTgyOUVBM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qnIhbJM0IlHZpH/2m6zTnB2B
XMrIXeIi2PlJEYY32EKP+PIolX68+CJkHPEapDEQapW0J0nv65/7kWErtIzF3aiU
NRw70pEy+sr28N9kzs9mRKmBsldt1Uu8gNdNHQNAyXixCs2gQBoo/gSi5KrRSzf0
Sl4p3CUj6Z4JTyz0NCUHnb/wvV/vbtEYMjje7sKvLeJTnZOVQ3W4gTGPfuJnZmWF
r2WZNuN18nyepyxvhCrZToHXFoeL434h9kdZXE95B8hG7k9HyQ+EZLfRDEau2ubX
J+HsDC7DK+xhFhD78Mdb/GBV/oyLXx1MeymEVNy33SU7kbYF0as5Gdk+tEQDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUoobAHQzuJ6IOzxM30aKfIZgp6jwwHwYDVR0j
BBgwFoAU9oVcN4+cnKNxzqo0Cp/L9I/J36IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW1XUURSWG82Y2QyeDhLc2VkZG5rdktraG0zVUFLek56b3ZDWUU4Vnpo
NUcvMC9GNjg1NUMzNzhGOUM5Q0EzNzFDRUFBMzQwQTlGQ0JGNDhGQzlERkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2ODU1QzM3OEY5QzlDQTM3
MUNFQUEzNDBBOUZDQkY0OEZDOURGQTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzltV1FEUlhvNmNkMng4S3NlZGRua3ZLa2htM1VBS3pOem92Q1lFOFZ6aDVHLzAv
MzEzODM5MmUzMzM5MmUzOTM2MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzODMz
MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0nYDANBgkqhkiG9w0BAQsFAAOCAQEALYANxY28on3G
6inxic0sVIaV5bhg5sCJWY6N8sRU5RfKGdvOnbd+FeqV6w/BE7I1VDiaLByQ2M5L
tkgO1BbfawX7tbNagT+K/AYfMzeforgNyqHVA2/gafi4UVzpD87d9t+MzCTSFCw/
uQlRr6HDFTpCGN8oaczyNxRiBAkHH8VDq8Na9YEWoP9M0rsjxERbM3i6wlvwGJkW
1zfZZRwgBmSfWDjGhpsUhI3Nf+3NmJNPyz6Ft62VCmvANyKTezwFkrQHooL8za8y
nXFtU5Z4n/7QMUU0cpfwTj9+wEvoXB5lNVRcd5ypjksj6C8LOn0OK2ix2/ghNxcJ
3dOxVfrwew==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:00 2025 by rpki-client