![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AYoBxC7i8b43q1WaUJMMstcrEYZC8MbHVkJ1fVsjMVLa/0/3138392e33362e3139322e302f32302d3234203d3e203238333038.roa
File: 3138392e33362e3139322e302f32302d3234203d3e203238333038.roa (raw, json)
Hash identifier: R2mZK+TaO4ma+ikqQKIjqKAHwzW8SZrvLgKhhrTLeLg=
Subject key identifier: 29:7A:AC:C7:1F:18:93:F6:6D:3A:FF:F0:D9:B8:43:28:5F:45:3C:3C
Certificate issuer: /CN=674D27108A6EC83400943385C1756694BC5C0227
Certificate serial: 6978E3165C180B248DF7C8B11A4B19D5E8E7F324
Authority key identifier: 67:4D:27:10:8A:6E:C8:34:00:94:33:85:C1:75:66:94:BC:5C:02:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674D27108A6EC83400943385C1756694BC5C0227.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AYoBxC7i8b43q1WaUJMMstcrEYZC8MbHVkJ1fVsjMVLa/0/3138392e33362e3139322e302f32302d3234203d3e203238333038.roa
Signing time: Fri 18 Oct 2024 14:32:41 +0000
ROA not before: Fri 18 Oct 2024 14:27:41 +0000
ROA not after: Fri 17 Oct 2025 14:32:41 +0000
asID: 28308
IP address blocks: 189.36.192.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:78:e3:16:5c:18:0b:24:8d:f7:c8:b1:1a:4b:19:d5:e8:e7:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674D27108A6EC83400943385C1756694BC5C0227
Validity
Not Before: Oct 18 14:27:41 2024 GMT
Not After : Oct 17 14:32:41 2025 GMT
Subject: CN=297AACC71F1893F66D3AFFF0D9B843285F453C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:2b:19:aa:dc:39:55:e5:c1:57:45:98:6f:
17:4d:05:a9:ef:50:11:9f:cb:2b:2d:aa:31:85:53:
0c:c7:33:57:d0:6d:73:17:a2:12:f7:c1:62:b7:62:
70:9b:db:a7:a2:ab:c8:59:c9:b4:9c:87:cd:c1:e9:
8c:9c:8b:d0:c3:23:00:ad:b6:ab:6a:c2:2a:ff:13:
4a:27:8e:80:e9:0d:e1:19:95:38:87:8e:18:5f:8b:
97:de:63:b1:27:bc:a1:37:3f:1d:25:3f:4e:7f:df:
07:9e:3b:82:37:4f:39:9d:82:2c:ec:ba:a4:0e:23:
44:e6:1f:d3:7d:ff:5a:14:47:41:2e:f7:e3:a9:3a:
8f:02:03:06:8c:2f:cb:c0:b6:aa:02:46:05:2c:be:
9b:a1:6c:45:bc:f5:f9:6a:d9:a0:cf:50:f5:aa:94:
7d:bf:cb:ac:53:11:2b:24:86:65:f5:c6:d4:e9:40:
e2:cf:6d:8e:08:19:fd:bb:49:f6:90:80:84:0d:82:
1a:58:38:64:c6:81:7d:9e:80:45:b2:09:95:1b:5a:
03:ef:70:c1:ef:8a:44:4c:51:86:f6:c9:40:02:9c:
be:f1:5e:27:d6:19:a2:04:cd:4e:45:46:1a:08:5c:
00:af:b1:46:56:f2:c1:5e:95:f3:43:93:69:76:0b:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7A:AC:C7:1F:18:93:F6:6D:3A:FF:F0:D9:B8:43:28:5F:45:3C:3C
X509v3 Authority Key Identifier:
keyid:67:4D:27:10:8A:6E:C8:34:00:94:33:85:C1:75:66:94:BC:5C:02:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AYoBxC7i8b43q1WaUJMMstcrEYZC8MbHVkJ1fVsjMVLa/0/674D27108A6EC83400943385C1756694BC5C0227.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674D27108A6EC83400943385C1756694BC5C0227.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYoBxC7i8b43q1WaUJMMstcrEYZC8MbHVkJ1fVsjMVLa/0/3138392e33362e3139322e302f32302d3234203d3e203238333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.36.192.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:cf:a3:6f:b8:56:5a:b8:00:14:fa:54:ab:d4:f8:67:b0:3c:
57:67:e8:be:1d:3f:83:81:04:27:99:dd:3e:c2:e2:5c:74:6a:
73:6c:1a:7e:32:3b:36:c3:f4:9f:fc:61:44:04:6d:ad:87:d7:
92:82:f2:fe:79:e8:59:ef:9d:7e:d7:fb:79:c2:7b:5c:86:ed:
a0:92:6c:fe:a8:45:15:27:dc:7c:79:9f:ab:2f:26:59:5b:97:
8d:ff:0f:22:c5:a2:4e:a6:83:cd:c3:cc:ca:a3:a9:48:4e:c9:
0d:6e:fb:40:e2:45:5a:81:4b:d8:d3:81:13:0a:25:a8:45:76:
d1:79:bd:73:b0:59:49:e6:5d:2f:ea:1f:12:1f:fc:33:2d:ef:
41:03:5c:96:96:84:ec:6c:62:c7:73:ce:32:16:f9:72:36:d0:
0c:86:26:5e:d8:01:c6:c2:43:77:4a:88:66:f7:88:5b:d8:81:
c8:b2:f0:f6:a6:9b:a8:db:ed:3a:dc:20:d6:62:9b:a0:71:11:
9b:40:8e:4e:69:52:c2:e0:2c:d7:0f:ef:55:3f:81:ce:ec:ef:
92:6b:87:7c:f4:a0:c3:58:c6:c9:3d:20:e0:44:4e:b1:e3:a9:
56:da:91:c0:fa:88:82:c7:df:27:02:7a:06:f0:c2:77:df:06:
e9:30:e8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:48 2025 by rpki-client