Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
File: 3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier: 3w6Krw4LoMGWshcuAXsLa2gVX7bnYMBso8HKpcrS0Ps=
Subject key identifier: 48:A6:12:8C:08:F9:D4:54:E6:65:74:48:97:EB:62:C4:AE:57:9B:5D
Certificate issuer: /CN=6480808F2DB085F4192DC9A7B2841A9AB635552E
Certificate serial: 351FEC9B6A2B0B2CD45DD64DAF1C4EBF6CBC418A
Authority key identifier: 64:80:80:8F:2D:B0:85:F4:19:2D:C9:A7:B2:84:1A:9A:B6:35:55:2E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
Signing time: Thu 02 Oct 2025 14:06:44 +0000
ROA not before: Thu 02 Oct 2025 14:01:44 +0000
ROA not after: Thu 01 Oct 2026 14:06:44 +0000
asID: 262675
IP address blocks: 186.233.228.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1f:ec:9b:6a:2b:0b:2c:d4:5d:d6:4d:af:1c:4e:bf:6c:bc:41:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6480808F2DB085F4192DC9A7B2841A9AB635552E
Validity
Not Before: Oct 2 14:01:44 2025 GMT
Not After : Oct 1 14:06:44 2026 GMT
Subject: CN=48A6128C08F9D454E665744897EB62C4AE579B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:4c:c0:7f:8a:e2:f6:cf:bd:a1:ed:1e:af:
fa:4d:2f:c4:3d:4f:cb:fe:b1:a5:c5:21:2f:e3:81:
1b:8c:8a:14:71:71:12:81:83:02:65:a9:2a:28:63:
ac:d7:c8:14:93:1e:c1:5b:fd:2c:bf:7a:f6:f6:5a:
ba:37:3a:d9:43:96:8b:07:da:1f:dd:90:2a:14:4e:
41:78:81:e9:a8:8b:86:28:f0:4a:3c:57:34:0c:29:
5b:b4:9c:4b:85:d8:a8:3b:df:7f:a8:89:97:f7:c2:
63:68:03:3a:36:82:c2:e4:7c:24:c4:b3:f3:e7:13:
74:a0:48:d0:2b:2b:30:71:cd:a9:ad:78:c6:be:47:
5f:04:ce:11:5f:8d:3a:c5:ef:1e:53:ab:dc:2a:9c:
98:73:f2:8b:3e:5f:9a:b4:9c:fe:23:8a:9a:1d:c0:
00:a9:52:3c:b2:4c:5b:48:0a:7b:d1:d0:b1:4c:d1:
0b:f9:1f:02:e3:6e:a1:7f:c5:bd:57:b0:5d:73:39:
b3:92:90:03:45:30:88:fe:77:91:19:84:2a:0f:c5:
59:a2:bd:07:34:cc:7b:97:87:2b:f5:f4:f8:98:d2:
0c:54:c9:40:04:24:dc:cc:37:b5:98:91:05:93:a1:
4f:28:c3:d0:07:dc:af:15:3c:4f:1e:dc:fc:49:d4:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A6:12:8C:08:F9:D4:54:E6:65:74:48:97:EB:62:C4:AE:57:9B:5D
X509v3 Authority Key Identifier:
keyid:64:80:80:8F:2D:B0:85:F4:19:2D:C9:A7:B2:84:1A:9A:B6:35:55:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/6480808F2DB085F4192DC9A7B2841A9AB635552E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6480808F2DB085F4192DC9A7B2841A9AB635552E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.233.228.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f2:63:33:ae:0d:3b:06:6a:8d:ea:fd:c8:7e:b1:0e:62:2c:
88:d5:72:83:d9:65:b3:65:a2:cc:f1:95:8e:75:16:a2:ad:b6:
31:cc:7e:46:4c:dc:d1:8b:c3:47:21:b0:fe:42:a6:ed:d5:c2:
c8:d4:a0:df:7b:87:67:4f:3e:9d:7c:ff:17:e2:43:4e:4d:59:
23:02:9b:a0:8c:ed:64:52:71:48:79:44:13:3b:8d:70:d5:9b:
d6:76:54:3b:4e:c9:ff:dd:4b:f6:a0:bb:ed:37:e1:bf:ab:88:
36:fd:a5:95:b6:6e:ec:78:80:da:7c:9b:f2:d7:32:7a:01:df:
bd:95:ca:5b:33:28:7a:86:f3:38:a8:37:52:12:38:14:b1:3a:
f5:42:47:91:9d:3b:90:6d:4f:e2:47:90:99:92:6e:94:a7:c4:
45:db:b3:2f:18:f8:b9:0a:0a:98:d0:91:71:f7:c5:31:69:37:
29:84:08:9c:01:a7:75:75:e4:ab:09:41:d5:c8:fa:3b:80:27:
55:a4:2e:92:d7:c0:3f:1d:c4:20:97:49:36:5b:d8:09:6a:a9:
a0:83:ff:9e:91:83:b4:e1:7b:0b:86:1a:9b:d1:34:40:34:76:
dd:3a:59:70:46:cb:7e:62:cf:c0:03:b7:cf:32:26:6a:0f:f2:
db:23:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:50 2025 by rpki-client