Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e312e302f32342d3234203d3e203533313536.roa
File: 3138362e3231312e312e302f32342d3234203d3e203533313536.roa (raw, json)
Hash identifier: tGmDXzZBOk2Z4wPuV7ZdVoIS4K9uEzeopJWrBJHXDwA=
Subject key identifier: 19:C6:91:AB:4E:61:F1:B7:47:9B:16:ED:0D:B9:AF:B3:15:F5:C1:AC
Certificate issuer: /CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Certificate serial: 29354095D4E63B7563B3384390550A0BE8584736
Authority key identifier: BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e312e302f32342d3234203d3e203533313536.roa
Signing time: Fri 04 Apr 2025 11:43:33 +0000
ROA not before: Fri 04 Apr 2025 11:38:33 +0000
ROA not after: Fri 03 Apr 2026 11:43:33 +0000
asID: 53156
IP address blocks: 186.211.1.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:35:40:95:d4:e6:3b:75:63:b3:38:43:90:55:0a:0b:e8:58:47:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BED400A73F58C91A8818D8830C03AD69A939B9B0
Validity
Not Before: Apr 4 11:38:33 2025 GMT
Not After : Apr 3 11:43:33 2026 GMT
Subject: CN=19C691AB4E61F1B7479B16ED0DB9AFB315F5C1AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:92:97:98:86:60:44:d6:0c:85:be:94:d7:
03:02:13:25:50:84:4e:f0:1c:1d:2e:a8:21:67:d2:
13:da:37:65:4f:c6:30:01:57:ef:1f:e3:ed:35:5a:
5a:01:a9:e1:27:1b:92:7c:36:4a:e5:12:8e:19:07:
72:62:f3:4a:67:ab:40:46:53:9f:cd:ef:02:b0:9b:
4a:a4:61:12:6a:c5:2c:dd:90:1a:12:65:81:d0:f0:
58:fe:92:36:60:94:b6:b7:e1:78:00:5d:f3:60:b6:
42:50:46:9f:4a:cc:14:34:8c:66:b9:7b:e8:b5:be:
e3:1a:ce:00:d7:d0:ed:16:e3:9d:07:f2:00:e2:62:
cc:f1:bb:c9:21:8d:a0:40:fe:68:5d:63:33:87:da:
79:17:dc:8c:37:b2:bc:57:1a:ad:56:ee:06:19:a1:
e6:74:54:a6:e4:df:3a:a6:86:5d:e5:37:89:25:ce:
c5:aa:37:77:68:93:1a:30:7a:7b:89:07:4f:a3:3f:
84:68:e4:5e:5b:19:aa:b3:16:41:24:a4:17:4a:78:
18:e4:b0:34:b5:d5:31:32:d9:db:36:32:fa:f6:da:
f3:4c:0c:de:36:65:a3:39:1e:4c:b5:5a:69:eb:87:
6f:26:57:47:9f:49:3a:62:a0:b2:b7:ad:45:b9:af:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C6:91:AB:4E:61:F1:B7:47:9B:16:ED:0D:B9:AF:B3:15:F5:C1:AC
X509v3 Authority Key Identifier:
keyid:BE:D4:00:A7:3F:58:C9:1A:88:18:D8:83:0C:03:AD:69:A9:39:B9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/BED400A73F58C91A8818D8830C03AD69A939B9B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED400A73F58C91A8818D8830C03AD69A939B9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e312e302f32342d3234203d3e203533313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.211.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:dc:8c:ac:41:4f:fb:43:80:a9:8b:48:c6:55:00:e5:4e:d2:
45:6c:cf:22:cd:4d:bc:56:54:40:da:9a:c1:13:c5:fe:f0:e2:
c5:6f:0b:75:98:75:db:c9:2a:15:47:ae:ad:e1:e2:a5:13:70:
28:f2:9c:24:7c:10:a3:87:13:ac:63:fb:b8:22:a8:68:74:37:
47:4d:fb:0a:ad:e3:20:b9:ba:41:00:28:c5:ca:63:b8:d3:4e:
5d:1a:9e:bb:a2:c6:6b:55:40:66:e8:cb:35:b9:97:7d:06:c5:
91:10:16:08:e2:52:fd:3b:6c:91:fb:51:86:f7:04:36:7d:33:
34:93:14:9b:dd:d6:1b:da:45:d5:d9:60:10:58:b0:67:f3:cc:
72:ec:a8:ee:f8:7b:ab:78:fa:76:00:5b:95:0a:fa:e4:70:a9:
8d:aa:18:e6:7a:e5:60:54:44:d8:77:e4:1b:ef:04:ea:35:82:
ff:cb:60:4c:e2:b0:3c:ba:89:c0:f8:1f:d6:e6:91:cf:97:b4:
5d:88:19:0d:e2:6e:3f:9c:17:95:e3:3f:78:de:52:ae:f7:4c:
a3:76:6f:9a:40:39:48:19:de:df:b3:a1:ad:c4:83:1a:41:a7:
6b:11:a4:ec:17:65:93:dd:3d:e1:83:02:03:4c:0c:0f:b8:d3:
cc:d6:a5:16
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKTVAldTmO3VjszhDkFUKC+hYRzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVENDAwQTczRjU4QzkxQTg4MThEODgzMEMwM0FENjlB
OTM5QjlCMDAeFw0yNTA0MDQxMTM4MzNaFw0yNjA0MDMxMTQzMzNaMDMxMTAvBgNV
BAMTKDE5QzY5MUFCNEU2MUYxQjc0NzlCMTZFRDBEQjlBRkIzMTVGNUMxQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWmJKXmIZgRNYMhb6U1wMCEyVQ
hE7wHB0uqCFn0hPaN2VPxjABV+8f4+01WloBqeEnG5J8NkrlEo4ZB3Ji80pnq0BG
U5/N7wKwm0qkYRJqxSzdkBoSZYHQ8Fj+kjZglLa34XgAXfNgtkJQRp9KzBQ0jGa5
e+i1vuMazgDX0O0W450H8gDiYszxu8khjaBA/mhdYzOH2nkX3Iw3srxXGq1W7gYZ
oeZ0VKbk3zqmhl3lN4klzsWqN3dokxowenuJB0+jP4Ro5F5bGaqzFkEkpBdKeBjk
sDS11TEy2ds2Mvr22vNMDN42ZaM5Hky1Wmnrh28mV0efSTpioLK3rUW5ryt5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUGcaRq05h8bdHmxbtDbmvsxX1wawwHwYDVR0j
BBgwFoAUvtQApz9YyRqIGNiDDAOtaak5ubAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0p0d0hzQ3BmUUV6Rm5uRWpVaU5ROUM3N0J6UEVUOHU4Y2l5eHZKTnBC
N28vMC9CRUQ0MDBBNzNGNThDOTFBODgxOEQ4ODMwQzAzQUQ2OUE5MzlCOUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFRDQwMEE3M0Y1OEM5MUE4
ODE4RDg4MzBDMDNBRDY5QTkzOUI5QjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dKdHdIc0NwZlFFekZubkVqVWlOUTlDNzdCelBFVDh1OGNpeXh2Sk5wQjdvLzAv
MzEzODM2MmUzMjMxMzEyZTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMx
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALrTATANBgkqhkiG9w0BAQsFAAOCAQEAs9yMrEFP+0OA
qYtIxlUA5U7SRWzPIs1NvFZUQNqawRPF/vDixW8LdZh128kqFUeureHipRNwKPKc
JHwQo4cTrGP7uCKoaHQ3R037Cq3jILm6QQAoxcpjuNNOXRqeu6LGa1VAZujLNbmX
fQbFkRAWCOJS/TtskftRhvcENn0zNJMUm93WG9pF1dlgEFiwZ/PMcuyo7vh7q3j6
dgBblQr65HCpjaoY5nrlYFRE2HfkG+8E6jWC/8tgTOKwPLqJwPgf1uaRz5e0XYgZ
DeJuP5wXleM/eN5SrvdMo3ZvmkA5SBne37OhrcSDGkGnaxGk7Bdlk9094YMCA0wM
D7jTzNalFg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 11:02:37 2025 by rpki-client