Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa
File: 3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier: KGmtYZg8uieHVYAYvE6AE33X7A1OtlUL7NsP+k1cb+4=
Subject key identifier: D6:74:38:45:9A:BD:86:F7:C0:55:94:B7:4D:F3:0A:BB:49:AF:5C:B9
Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial: 0835179650AA694C310E1774C14A435998EC8B38
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa
Signing time: Sat 19 Apr 2025 20:40:38 +0000
ROA not before: Sat 19 Apr 2025 20:35:38 +0000
ROA not after: Sat 18 Apr 2026 20:40:38 +0000
asID: 266178
IP address blocks: 192.144.67.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:35:17:96:50:aa:69:4c:31:0e:17:74:c1:4a:43:59:98:ec:8b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Validity
Not Before: Apr 19 20:35:38 2025 GMT
Not After : Apr 18 20:40:38 2026 GMT
Subject: CN=D67438459ABD86F7C05594B74DF30ABB49AF5CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:e8:ac:35:40:c7:c5:ca:73:31:ff:81:22:
b4:ad:92:6d:ff:59:ad:84:6e:4c:e6:0a:be:47:b9:
d1:77:9a:86:47:ec:70:a0:7b:30:d6:9b:02:d9:59:
ed:cf:94:28:7d:97:6e:3e:8b:71:91:06:54:01:ec:
4f:76:06:99:fb:28:c3:5f:b5:6a:85:cc:db:51:37:
8e:0d:0d:75:6f:0d:46:32:c0:b3:b3:38:38:81:0f:
41:ac:c4:6e:a7:e0:d1:3c:ff:16:ed:97:bf:f9:a6:
ee:fa:c6:22:a7:b0:74:ed:8f:8e:66:65:82:9f:c6:
d2:cc:bb:81:fa:d1:bb:8d:dc:61:d6:41:01:ab:6d:
46:b8:95:d6:11:71:c6:08:c9:41:d4:88:e4:64:ad:
ee:34:9a:9e:a9:57:24:83:c7:24:3d:17:7d:ec:be:
f5:36:21:f4:45:85:b7:8d:cd:fa:53:bd:d5:16:51:
e8:4f:25:c0:b7:72:10:b4:9b:d5:b2:bb:6a:4a:c6:
59:bf:26:5d:f7:b3:3d:fb:f4:77:8e:f5:1d:3b:7b:
51:90:ef:5e:06:50:8a:53:63:ed:7c:9f:9f:f6:21:
a7:a7:f4:e1:b0:9f:c1:40:5d:4c:a3:a1:5d:87:b7:
59:f5:86:d0:f7:f3:9f:13:9a:2e:4d:20:e3:0f:72:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:74:38:45:9A:BD:86:F7:C0:55:94:B7:4D:F3:0A:BB:49:AF:5C:B9
X509v3 Authority Key Identifier:
keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36372e302f32342d3234203d3e20323636313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.67.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a5:80:b5:a7:9c:61:c3:79:7d:96:49:15:63:28:f8:d8:4c:
c9:10:ab:b6:f0:2f:9b:a6:3c:b8:11:9d:3a:c1:dc:33:8b:9f:
88:a4:b7:de:c6:1d:be:88:34:76:78:ff:b2:76:a1:69:c4:24:
f4:d3:0c:dd:32:cc:0a:58:0a:df:9e:26:5d:bc:33:30:20:f5:
2f:ac:33:0a:7f:8e:76:b8:f4:83:6b:cf:e9:79:40:4b:15:b3:
0c:a7:62:80:22:46:11:3d:be:16:4a:6b:bf:6b:c8:3a:be:7b:
87:f4:7e:b6:80:13:07:20:97:f7:35:da:50:ff:85:de:a6:f7:
21:8d:d4:59:af:d2:12:ea:21:70:17:1e:ac:db:14:fd:f9:52:
4f:c3:cf:50:bc:2f:e1:b5:9d:ec:2e:de:20:a4:99:78:56:5b:
d9:4f:b0:b6:fd:10:fe:50:33:5e:83:9b:84:c3:cd:65:e3:e7:
f5:5e:7c:7b:67:bf:2b:78:2e:9b:c1:dc:5a:65:80:e6:cf:9a:
94:02:0e:9b:9e:30:c2:a1:5e:0a:48:bd:ed:81:99:b1:25:60:
da:cf:08:62:e2:bc:84:e9:39:0b:39:9a:26:25:23:37:41:05:
21:49:98:0e:e2:5a:f9:84:aa:9a:38:14:ec:cc:2c:6b:ac:c1:
00:71:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:09 2025 by rpki-client