![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32322d3332203d3e20323731343034.roa
File: 3138312e3138392e32382e302f32322d3332203d3e20323731343034.roa (raw, json)
Hash identifier: PrZrbjifVct11zcRosTESj2jDve8G1AJd+e5ziMCdX4=
Subject key identifier: C7:28:73:F2:EF:95:82:F3:94:73:A8:D9:BE:21:69:86:E3:02:CB:C0
Certificate issuer: /CN=A4D51BDA3FEC571926CB55CDEEBD6475B65C631F
Certificate serial: 43B732ACA3431809832FA13FADE0B3FBFEBC8D9C
Authority key identifier: A4:D5:1B:DA:3F:EC:57:19:26:CB:55:CD:EE:BD:64:75:B6:5C:63:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32322d3332203d3e20323731343034.roa
Signing time: Tue 19 Nov 2024 14:54:19 +0000
ROA not before: Tue 19 Nov 2024 14:49:19 +0000
ROA not after: Tue 18 Nov 2025 14:54:19 +0000
asID: 271404
IP address blocks: 181.189.28.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b7:32:ac:a3:43:18:09:83:2f:a1:3f:ad:e0:b3:fb:fe:bc:8d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D51BDA3FEC571926CB55CDEEBD6475B65C631F
Validity
Not Before: Nov 19 14:49:19 2024 GMT
Not After : Nov 18 14:54:19 2025 GMT
Subject: CN=C72873F2EF9582F39473A8D9BE216986E302CBC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:f8:2b:92:ef:3e:2e:96:00:a2:db:2d:aa:
a9:c2:ec:d2:71:00:2b:09:9a:a3:8f:65:2d:01:da:
04:a9:ea:19:8a:91:4a:18:f2:73:4c:16:a7:28:69:
bf:4f:65:f2:6e:61:bc:df:f7:a9:89:cf:db:e2:58:
02:8a:f7:ba:23:24:89:56:c3:70:b2:cc:f2:39:6e:
45:58:90:4d:b7:2c:02:27:bf:ef:01:3e:8b:63:4c:
07:6a:c6:3e:7d:35:b9:89:8d:cc:49:0f:82:8f:d7:
01:90:bd:09:fd:59:41:89:b0:6c:d6:b4:15:0c:26:
d5:4c:86:ef:cf:36:59:cf:13:61:33:99:5e:17:ef:
bb:ca:f2:2b:bd:43:04:39:a3:b6:ad:44:65:02:16:
67:78:ad:50:7c:47:10:96:49:9a:1d:e6:09:d0:8c:
0b:bb:7a:54:d2:d6:02:b4:8f:8d:ab:2e:35:17:6d:
f8:b0:4c:21:f6:ad:93:c8:37:3e:84:75:80:39:13:
bf:9c:5c:13:0c:39:59:0e:e2:99:92:62:33:7c:8d:
43:95:67:cf:7f:9d:3f:c7:8c:03:af:9f:a8:66:5e:
12:5a:4c:9f:48:60:28:45:37:c1:63:e6:38:7f:ac:
13:b8:8a:f2:36:d2:a3:06:d8:c5:19:0e:2a:06:ed:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:28:73:F2:EF:95:82:F3:94:73:A8:D9:BE:21:69:86:E3:02:CB:C0
X509v3 Authority Key Identifier:
keyid:A4:D5:1B:DA:3F:EC:57:19:26:CB:55:CD:EE:BD:64:75:B6:5C:63:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32322d3332203d3e20323731343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.28.0/22
Signature Algorithm: sha256WithRSAEncryption
83:7e:2a:8d:77:13:a2:98:e7:98:c0:e7:79:fa:3f:39:e0:62:
c2:44:38:64:3f:19:ee:19:0e:ed:73:11:da:0c:b1:8e:c3:75:
dc:da:c6:c4:d3:f6:60:0f:ac:f0:0d:bb:45:d5:af:23:b0:e4:
7a:f0:1a:49:08:38:01:1f:5d:f6:b8:4a:fd:84:56:59:58:6f:
9b:d8:e5:7b:5d:9d:ba:05:73:a0:9d:4f:ea:38:f2:29:fa:0a:
3f:8d:89:14:f7:3a:cd:ac:15:d0:f0:e3:8e:28:87:0d:68:89:
5f:1f:0f:ae:b3:b9:5e:24:fa:75:71:ff:c4:7c:d5:ed:9b:e4:
8b:f0:16:b3:a8:1a:68:c1:b4:74:0c:9f:41:70:31:85:51:79:
9e:b2:0e:e2:aa:d6:f7:9d:6c:95:5c:2b:01:83:21:cb:64:ff:
fa:ed:0b:f0:0f:04:85:1d:dd:7d:12:7e:7d:b9:da:a4:de:f4:
37:df:a1:40:8c:e4:8c:90:0d:fa:35:ce:be:74:76:df:90:b8:
af:22:08:85:aa:91:75:3d:6b:c4:d1:4b:7a:4b:40:9e:73:b2:
32:fc:fc:51:6c:fe:87:06:33:df:c6:17:ed:02:f2:19:b9:a4:
e1:db:56:4a:4c:e3:68:a6:17:52:9b:70:e6:40:63:39:66:1d:
67:eb:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:05 2025 by rpki-client