Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/3138392e33362e3134302e302f32322d3234203d3e20323730363031.roa
File: 3138392e33362e3134302e302f32322d3234203d3e20323730363031.roa (raw, json)
Hash identifier: J4208QiAZPlrbT3IYRyyJvBZkczh63j6zlcHJIj8fgc=
Subject key identifier: B4:58:75:2A:2B:97:52:86:01:CE:43:80:DB:D3:25:FD:D0:B3:C6:56
Certificate issuer: /CN=D6DC68A6023AA2D9CE6A0F13893738F3846790E6
Certificate serial: 2E171CBB43BAA24575720C0EDFC2658E8BE6B2A2
Authority key identifier: D6:DC:68:A6:02:3A:A2:D9:CE:6A:0F:13:89:37:38:F3:84:67:90:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6DC68A6023AA2D9CE6A0F13893738F3846790E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/3138392e33362e3134302e302f32322d3234203d3e20323730363031.roa
Signing time: Fri 28 Mar 2025 12:50:00 +0000
ROA not before: Fri 28 Mar 2025 12:45:00 +0000
ROA not after: Fri 27 Mar 2026 12:50:00 +0000
asID: 270601
IP address blocks: 189.36.140.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:17:1c:bb:43:ba:a2:45:75:72:0c:0e:df:c2:65:8e:8b:e6:b2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6DC68A6023AA2D9CE6A0F13893738F3846790E6
Validity
Not Before: Mar 28 12:45:00 2025 GMT
Not After : Mar 27 12:50:00 2026 GMT
Subject: CN=B458752A2B97528601CE4380DBD325FDD0B3C656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:06:6a:c5:92:98:c0:22:b7:00:b9:5b:a7:
2a:3e:70:80:1a:48:7a:7d:13:10:82:ef:64:57:ea:
45:2f:5b:a0:26:a5:f9:57:d2:77:46:7a:ad:2d:76:
22:e1:8b:c0:29:1e:b7:bd:fd:b4:0c:0a:7b:3f:5f:
3d:06:a1:ff:db:c7:27:93:12:2f:89:71:4a:4c:cd:
c9:1c:6d:a5:7e:1a:86:ab:e1:cc:2c:aa:38:b8:95:
4b:49:29:1b:81:c6:ef:d3:bf:70:a3:ca:60:f3:a2:
c1:12:48:5d:19:5e:d4:b0:d0:8f:8a:57:8d:73:63:
0f:6b:2f:5b:2e:7c:07:40:22:51:c7:2f:61:85:ab:
22:a5:02:aa:dc:d3:4d:a9:b6:3a:dd:a6:28:11:7f:
34:00:ba:3b:ec:d3:e3:3e:34:af:26:cc:64:bc:da:
ae:b4:93:f6:04:41:ce:d3:de:72:94:fe:07:b7:30:
92:88:1d:e8:96:e7:fa:11:39:52:cd:10:ac:37:44:
da:5b:a0:94:e3:4d:6c:7d:a1:53:bb:98:b5:04:ca:
2a:f5:ea:e7:b3:30:b7:ba:a9:a6:d3:bd:c9:9d:9c:
70:27:ca:9c:a8:51:2c:0b:fd:3d:03:7d:3d:f5:ec:
17:21:b3:2f:ea:f5:f7:60:a4:ba:36:be:9f:c2:72:
0a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:75:2A:2B:97:52:86:01:CE:43:80:DB:D3:25:FD:D0:B3:C6:56
X509v3 Authority Key Identifier:
keyid:D6:DC:68:A6:02:3A:A2:D9:CE:6A:0F:13:89:37:38:F3:84:67:90:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/D6DC68A6023AA2D9CE6A0F13893738F3846790E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6DC68A6023AA2D9CE6A0F13893738F3846790E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/3138392e33362e3134302e302f32322d3234203d3e20323730363031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.36.140.0/22
Signature Algorithm: sha256WithRSAEncryption
57:c4:b8:d8:14:4d:4b:f6:8d:60:10:78:6b:b5:91:b9:c8:5c:
86:c5:d0:22:56:6b:2e:51:be:24:7a:4d:e3:c3:42:14:5a:a4:
cb:3b:2d:09:f4:3f:03:79:cc:bc:4e:4f:70:d2:8a:54:5f:88:
5e:ae:12:0d:1a:fd:d4:0b:c6:92:e6:93:58:ee:0e:08:23:c7:
c4:71:b4:3e:7e:88:24:41:f1:43:f7:6a:03:7c:aa:17:54:7a:
1d:25:c6:4a:46:98:57:21:4f:8b:df:a2:27:84:19:8a:d8:13:
9a:92:bd:c3:a2:14:15:91:5b:36:00:36:97:c9:0c:36:f3:91:
20:d0:6d:62:58:e2:70:aa:e0:85:15:52:00:2f:ad:63:9b:53:
eb:e9:d4:1e:67:62:da:e3:07:72:3c:92:ca:e9:48:d6:65:da:
b2:28:3b:cc:e7:7a:cc:8f:fb:0b:e2:25:d1:fa:8d:b0:e2:d4:
94:e6:2e:1e:03:ef:14:71:7b:24:12:04:d4:34:d3:f3:7a:48:
ed:52:3b:e0:59:a0:1a:64:ce:a7:15:e8:76:6f:5d:a7:2c:5f:
ca:bd:18:6b:16:99:2b:6b:31:18:67:3b:78:35:cc:45:20:21:
4c:38:35:0a:8b:15:46:30:5a:4b:16:0f:35:80:42:38:43:40:
ac:aa:9f:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULhccu0O6okV1cgwO38JljovmsqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZEQzY4QTYwMjNBQTJEOUNFNkEwRjEzODkzNzM4RjM4
NDY3OTBFNjAeFw0yNTAzMjgxMjQ1MDBaFw0yNjAzMjcxMjUwMDBaMDMxMTAvBgNV
BAMTKEI0NTg3NTJBMkI5NzUyODYwMUNFNDM4MERCRDMyNUZERDBCM0M2NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxywZqxZKYwCK3ALlbpyo+cIAa
SHp9ExCC72RX6kUvW6AmpflX0ndGeq0tdiLhi8ApHre9/bQMCns/Xz0Gof/bxyeT
Ei+JcUpMzckcbaV+Goar4cwsqji4lUtJKRuBxu/Tv3CjymDzosESSF0ZXtSw0I+K
V41zYw9rL1sufAdAIlHHL2GFqyKlAqrc002ptjrdpigRfzQAujvs0+M+NK8mzGS8
2q60k/YEQc7T3nKU/ge3MJKIHeiW5/oROVLNEKw3RNpboJTjTWx9oVO7mLUEyir1
6uezMLe6qabTvcmdnHAnypyoUSwL/T0DfT317Bchsy/q9fdgpLo2vp/CcgrTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtFh1KiuXUoYBzkOA29Ml/dCzxlYwHwYDVR0j
BBgwFoAU1txopgI6otnOag8TiTc484RnkOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnVlR0c4a0V0azFYdGh0SEw0S0dENTI2cGVHenFrTjY4anNhUWRuY1Bi
OE4vMC9ENkRDNjhBNjAyM0FBMkQ5Q0U2QTBGMTM4OTM3MzhGMzg0Njc5MEU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2REM2OEE2MDIzQUEyRDlD
RTZBMEYxMzg5MzczOEYzODQ2NzkwRTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z1ZUdHOGtFdGsxWHRodEhMNEtHRDUyNnBlR3pxa042OGpzYVFkbmNQYjhOLzAv
MzEzODM5MmUzMzM2MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9JIwwDQYJKoZIhvcNAQELBQADggEBAFfEuNgU
TUv2jWAQeGu1kbnIXIbF0CJWay5RviR6TePDQhRapMs7LQn0PwN5zLxOT3DSilRf
iF6uEg0a/dQLxpLmk1juDggjx8RxtD5+iCRB8UP3agN8qhdUeh0lxkpGmFchT4vf
oieEGYrYE5qSvcOiFBWRWzYANpfJDDbzkSDQbWJY4nCq4IUVUgAvrWObU+vp1B5n
YtrjB3I8ksrpSNZl2rIoO8znesyP+wviJdH6jbDi1JTmLh4D7xRxeyQSBNQ00/N6
SO1SO+BZoBpkzqcV6HZvXacsX8q9GGsWmStrMRhnO3g1zEUgIUw4NQqLFUYwWksW
DzWAQjhDQKyqn3g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:03 2025 by rpki-client