Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234392e302f32342d3234203d3e20323636313633.roa
File: 3138362e322e3234392e302f32342d3234203d3e20323636313633.roa (raw, json)
Hash identifier: 6MXlPH9fjSEAa18wwXN2da6S697XSntOEbYqwJyKXT8=
Subject key identifier: 59:F2:44:CA:0F:2A:4B:6C:97:81:6E:01:5A:7F:A5:A8:5C:2C:C9:EF
Certificate issuer: /CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Certificate serial: 45AF5C6D4F9FECCCDC16721E047820F3734E5FB9
Authority key identifier: 2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234392e302f32342d3234203d3e20323636313633.roa
Signing time: Fri 20 Dec 2024 21:17:06 +0000
ROA not before: Fri 20 Dec 2024 21:12:06 +0000
ROA not after: Fri 19 Dec 2025 21:17:06 +0000
asID: 266163
IP address blocks: 186.2.249.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:af:5c:6d:4f:9f:ec:cc:dc:16:72:1e:04:78:20:f3:73:4e:5f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87
Validity
Not Before: Dec 20 21:12:06 2024 GMT
Not After : Dec 19 21:17:06 2025 GMT
Subject: CN=59F244CA0F2A4B6C97816E015A7FA5A85C2CC9EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:67:e3:e9:b5:a6:4c:c4:5a:6b:54:be:75:
59:0c:ac:b4:db:79:6d:ee:fb:38:9a:eb:26:1a:73:
07:fd:bd:18:9f:48:6f:fd:33:b1:ac:1d:d2:f5:e3:
e6:a4:a4:02:46:b0:10:9f:15:68:c1:fc:97:d9:94:
2f:0e:cd:f3:49:d1:c8:c8:90:c6:62:e6:db:63:7c:
c7:15:e4:2c:f7:69:5b:bf:09:f6:8d:71:ad:4f:51:
bd:32:86:8c:5e:62:93:da:78:5e:89:fe:88:89:2a:
6d:f8:06:ed:8e:53:dd:a3:63:17:37:8c:e5:35:bf:
f7:a3:5b:4c:57:80:3f:e2:56:01:4c:ac:b6:66:2a:
ce:1e:cb:73:06:4b:62:3a:7e:c5:b3:22:00:30:7f:
29:56:ee:db:f8:fc:b7:71:d4:f9:55:41:19:b7:a6:
f3:44:e5:d3:ac:d6:d0:c1:3c:db:eb:1d:40:2c:fd:
93:fa:bc:94:56:cb:a9:ea:3c:55:da:24:4b:fa:3a:
6f:9c:c0:2d:2c:c6:ed:80:a6:d8:db:0a:33:fd:e5:
06:7f:dd:d1:25:65:73:ff:03:a5:53:5e:2d:e2:59:
d2:63:e0:12:11:c3:03:3e:e8:a7:ce:fc:5c:e5:2f:
02:5a:df:cf:14:9b:5d:42:7d:3f:07:cb:03:7e:35:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F2:44:CA:0F:2A:4B:6C:97:81:6E:01:5A:7F:A5:A8:5C:2C:C9:EF
X509v3 Authority Key Identifier:
keyid:2B:AF:E0:86:77:92:E7:C6:6C:D4:11:36:79:F3:E9:B7:AD:5F:1E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BAFE0867792E7C66CD4113679F3E9B7AD5F1E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234392e302f32342d3234203d3e20323636313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.2.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:db:2c:18:b6:91:f5:d1:eb:24:69:db:69:b9:eb:9e:00:2f:
19:d6:fc:64:ae:67:81:ff:8e:f9:4d:e7:f4:10:de:32:d9:2b:
8c:1d:27:c8:ec:bd:67:ba:c2:6a:f8:df:20:03:b2:ef:bb:58:
c3:d6:b9:d4:67:81:7a:16:f5:4c:ca:60:f4:59:94:6e:84:c0:
4a:5f:88:57:09:e5:8d:ca:70:07:51:bd:6a:ae:17:74:df:8d:
e7:3b:d6:c6:3c:65:96:f1:a3:55:10:2a:73:d6:8d:e6:33:b3:
60:1c:6b:a9:31:a0:24:57:66:d7:4a:4f:d7:ea:cd:3c:69:6f:
19:16:b2:54:cf:da:8c:e7:09:20:5e:95:83:08:c1:ff:b4:6f:
64:50:03:c0:15:35:62:a9:ae:a2:5f:35:23:b0:62:db:6f:93:
ac:e7:3a:8c:ce:e0:66:31:16:da:3b:9b:2b:9f:4a:00:b9:82:
89:b9:9c:8e:b6:85:b9:52:fc:12:3d:c3:48:f1:b1:e5:44:4f:
cf:aa:c3:26:c0:19:78:0c:18:f8:05:0d:1b:25:fe:2a:cc:34:
9f:f1:2e:6e:ba:76:34:77:4f:0e:fd:9d:80:37:86:e5:e2:95:
96:a7:f8:5a:70:f1:42:c3:40:99:53:d3:75:a3:2f:e4:42:a1:
ed:d0:52:43
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURa9cbU+f7MzcFnIeBHgg83NOX7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJBRkUwODY3NzkyRTdDNjZDRDQxMTM2NzlGM0U5QjdB
RDVGMUU4NzAeFw0yNDEyMjAyMTEyMDZaFw0yNTEyMTkyMTE3MDZaMDMxMTAvBgNV
BAMTKDU5RjI0NENBMEYyQTRCNkM5NzgxNkUwMTVBN0ZBNUE4NUMyQ0M5RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquGfj6bWmTMRaa1S+dVkMrLTb
eW3u+zia6yYacwf9vRifSG/9M7GsHdL14+akpAJGsBCfFWjB/JfZlC8OzfNJ0cjI
kMZi5ttjfMcV5Cz3aVu/CfaNca1PUb0yhoxeYpPaeF6J/oiJKm34Bu2OU92jYxc3
jOU1v/ejW0xXgD/iVgFMrLZmKs4ey3MGS2I6fsWzIgAwfylW7tv4/Ldx1PlVQRm3
pvNE5dOs1tDBPNvrHUAs/ZP6vJRWy6nqPFXaJEv6Om+cwC0sxu2AptjbCjP95QZ/
3dElZXP/A6VTXi3iWdJj4BIRwwM+6KfO/FzlLwJa388Um11CfT8HywN+NaUZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWfJEyg8qS2yXgW4BWn+lqFwsye8wHwYDVR0j
BBgwFoAUK6/ghneS58Zs1BE2efPpt61fHocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1
a2IvMC8yQkFGRTA4Njc3OTJFN0M2NkNENDExMzY3OUYzRTlCN0FENUYxRTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQUZFMDg2Nzc5MkU3QzY2
Q0Q0MTEzNjc5RjNFOUI3QUQ1RjFFODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKS1BzVGM1dldiQzJraEZqRXlrMkJ1NUJCbTN6dHI1czF0bmdEd1R0dWtiLzAv
MzEzODM2MmUzMjJlMzIzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAugL5MA0GCSqGSIb3DQEBCwUAA4IBAQB+2ywYtpH1
0eskadtpueueAC8Z1vxkrmeB/475Tef0EN4y2SuMHSfI7L1nusJq+N8gA7Lvu1jD
1rnUZ4F6FvVMymD0WZRuhMBKX4hXCeWNynAHUb1qrhd0343nO9bGPGWW8aNVECpz
1o3mM7NgHGupMaAkV2bXSk/X6s08aW8ZFrJUz9qM5wkgXpWDCMH/tG9kUAPAFTVi
qa6iXzUjsGLbb5Os5zqMzuBmMRbaO5srn0oAuYKJuZyOtoW5UvwSPcNI8bHlRE/P
qsMmwBl4DBj4BQ0bJf4qzDSf8S5uunY0d08O/Z2AN4bl4pWWp/hacPFCw0CZU9N1
oy/kQqHt0FJD
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:59:29 2025 by rpki-client