Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/3133382e39392e3230342e302f32322d3332203d3e203532363836.roa
File: 3133382e39392e3230342e302f32322d3332203d3e203532363836.roa (raw, json)
Hash identifier: Z6OrbC1SMVuYRackykPTasodPlsx8Y6XqOnsRwTr4n8=
Subject key identifier: 00:82:B3:B7:F1:06:EB:AE:4F:FD:71:AF:C3:68:F7:09:0D:2A:36:15
Certificate issuer: /CN=58C5F53743423A04F872235EDB5D2DA1789CC7AA
Certificate serial: 26588E4BF7235A40841419900D49C8AB1AD1B5BF
Authority key identifier: 58:C5:F5:37:43:42:3A:04:F8:72:23:5E:DB:5D:2D:A1:78:9C:C7:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C5F53743423A04F872235EDB5D2DA1789CC7AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/3133382e39392e3230342e302f32322d3332203d3e203532363836.roa
Signing time: Fri 27 Dec 2024 13:38:33 +0000
ROA not before: Fri 27 Dec 2024 13:33:33 +0000
ROA not after: Fri 26 Dec 2025 13:38:33 +0000
asID: 52686
IP address blocks: 138.99.204.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:58:8e:4b:f7:23:5a:40:84:14:19:90:0d:49:c8:ab:1a:d1:b5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C5F53743423A04F872235EDB5D2DA1789CC7AA
Validity
Not Before: Dec 27 13:33:33 2024 GMT
Not After : Dec 26 13:38:33 2025 GMT
Subject: CN=0082B3B7F106EBAE4FFD71AFC368F7090D2A3615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:bc:fe:28:4e:89:1d:6a:e5:81:c3:c5:e8:
25:97:0b:15:62:81:66:33:3c:b7:dc:26:74:69:4c:
f0:80:92:88:5e:74:86:a4:a4:d0:b6:14:e3:10:8c:
bc:46:44:cc:88:8f:b8:a5:36:43:71:b0:aa:cf:ac:
45:e4:cf:6e:98:f1:85:b4:d5:fa:25:61:34:c0:c1:
f7:3d:f3:40:38:cf:a3:8b:b7:f2:ac:ed:2e:7f:85:
be:db:4a:87:00:f4:c8:24:2f:b7:0b:0b:40:3d:d1:
a4:f9:03:84:bd:4d:d2:cd:21:19:31:4c:51:89:97:
fc:1e:f2:b6:75:ee:d8:be:43:85:1b:5b:ed:7e:4e:
e8:95:51:66:65:a1:12:b2:2c:8a:72:29:0b:4a:9d:
97:de:bb:fa:d5:2b:be:2b:21:40:e3:28:35:00:3f:
2e:cc:48:6f:f4:b2:f7:d8:79:d0:7b:c4:58:8a:08:
82:70:13:cf:d1:74:0b:d9:4a:38:13:29:9e:48:cf:
02:48:43:33:e3:22:5c:b4:ed:f6:1e:6a:50:36:dd:
e9:fb:e7:8a:f8:1a:c3:67:d3:49:f7:94:da:b7:81:
40:81:6e:ca:63:2d:01:7e:a5:f3:f8:71:39:71:c1:
de:25:42:7b:2f:49:fa:19:90:1a:cc:02:09:7b:c5:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:B3:B7:F1:06:EB:AE:4F:FD:71:AF:C3:68:F7:09:0D:2A:36:15
X509v3 Authority Key Identifier:
keyid:58:C5:F5:37:43:42:3A:04:F8:72:23:5E:DB:5D:2D:A1:78:9C:C7:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/58C5F53743423A04F872235EDB5D2DA1789CC7AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58C5F53743423A04F872235EDB5D2DA1789CC7AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/3133382e39392e3230342e302f32322d3332203d3e203532363836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:16:dd:7d:ad:67:44:33:19:96:87:0a:af:a3:f0:f6:5e:db:
90:90:64:d4:dd:e5:0d:ab:e6:97:f3:f5:82:55:f1:b0:b9:0e:
a1:14:87:ff:c7:a4:ba:26:11:17:ea:9a:ff:06:e5:3d:4d:e5:
00:e7:7c:fd:9c:ea:ef:b7:3c:1c:ce:a1:26:79:16:d3:a7:34:
82:1b:0d:86:92:4d:6a:2c:53:53:08:fc:41:93:f8:4c:21:b6:
ff:9f:9e:79:ab:32:6e:e8:0f:14:e4:72:e8:f9:dd:a2:3a:92:
1e:f0:94:3e:5d:43:87:e3:28:f7:e2:b0:40:8d:3b:96:ac:4c:
37:42:46:45:0e:75:de:a9:c3:5c:94:fc:ac:29:82:29:60:78:
09:27:51:ca:2c:33:e4:81:d4:57:de:47:62:89:63:0f:7d:99:
e6:87:21:c0:4e:a7:22:9f:bc:1f:2e:9a:5e:5b:63:56:0d:64:
4a:7f:61:48:3d:66:b0:ea:97:fc:8a:6d:45:13:cb:f4:15:25:
de:76:8c:89:ce:18:03:df:b7:b7:05:3e:6f:31:06:c7:aa:3e:
92:99:81:0a:84:3d:de:19:c8:d3:eb:88:17:8a:88:1a:38:27:
6b:d6:f9:55:e8:8d:ed:21:fa:52:fa:c5:55:19:69:be:e4:04:
0a:8a:63:64
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJliOS/cjWkCEFBmQDUnIqxrRtb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThDNUY1Mzc0MzQyM0EwNEY4NzIyMzVFREI1RDJEQTE3
ODlDQzdBQTAeFw0yNDEyMjcxMzMzMzNaFw0yNTEyMjYxMzM4MzNaMDMxMTAvBgNV
BAMTKDAwODJCM0I3RjEwNkVCQUU0RkZENzFBRkMzNjhGNzA5MEQyQTM2MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptLz+KE6JHWrlgcPF6CWXCxVi
gWYzPLfcJnRpTPCAkohedIakpNC2FOMQjLxGRMyIj7ilNkNxsKrPrEXkz26Y8YW0
1folYTTAwfc980A4z6OLt/Ks7S5/hb7bSocA9MgkL7cLC0A90aT5A4S9TdLNIRkx
TFGJl/we8rZ17ti+Q4UbW+1+TuiVUWZloRKyLIpyKQtKnZfeu/rVK74rIUDjKDUA
Py7MSG/0svfYedB7xFiKCIJwE8/RdAvZSjgTKZ5IzwJIQzPjIly07fYealA23en7
54r4GsNn00n3lNq3gUCBbspjLQF+pfP4cTlxwd4lQnsvSfoZkBrMAgl7xfA/AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUAIKzt/EG665P/XGvw2j3CQ0qNhUwHwYDVR0j
BBgwFoAUWMX1N0NCOgT4ciNe210toXicx6owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Wbzl4OFZlR2RuUXZ3VXRSdm12V1Vkc0trOFZaYXFBY2pRQk04UFZNSFA3
LzAvNThDNUY1Mzc0MzQyM0EwNEY4NzIyMzVFREI1RDJEQTE3ODlDQzdBQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81OEM1RjUzNzQzNDIzQTA0Rjg3
MjIzNUVEQjVEMkRBMTc4OUNDN0FBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9W
bzl4OFZlR2RuUXZ3VXRSdm12V1Vkc0trOFZaYXFBY2pRQk04UFZNSFA3LzAvMzEz
MzM4MmUzOTM5MmUzMjMwMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMyMzYz
ODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCimPMMA0GCSqGSIb3DQEBCwUAA4IBAQBuFt19rWdEMxmW
hwqvo/D2XtuQkGTU3eUNq+aX8/WCVfGwuQ6hFIf/x6S6JhEX6pr/BuU9TeUA53z9
nOrvtzwczqEmeRbTpzSCGw2Gkk1qLFNTCPxBk/hMIbb/n555qzJu6A8U5HLo+d2i
OpIe8JQ+XUOH4yj34rBAjTuWrEw3QkZFDnXeqcNclPysKYIpYHgJJ1HKLDPkgdRX
3kdiiWMPfZnmhyHATqcin7wfLppeW2NWDWRKf2FIPWaw6pf8im1FE8v0FSXedoyJ
zhgD37e3BT5vMQbHqj6SmYEKhD3eGcjT64gXiogaOCdr1vlV6I3tIfpS+sVVGWm+
5AQKimNk
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:27 2025 by rpki-client