Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
File: 3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa (raw, json)
Hash identifier: ZyMLVxBCpNonWLSQbRPG0YVKqtnFPE8jRm3gUFjB4Uw=
Subject key identifier: 91:85:90:04:1C:09:F2:6E:BB:82:7E:D8:D5:64:A6:C2:E5:B9:43:3F
Certificate issuer: /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial: 3748F36C9D5C8D1AD3E9F23D522C5E36CDEE92F4
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
Signing time: Mon 10 Feb 2025 14:30:49 +0000
ROA not before: Mon 10 Feb 2025 14:25:49 +0000
ROA not after: Mon 09 Feb 2026 14:30:49 +0000
asID: 53143
IP address blocks: 168.195.236.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:48:f3:6c:9d:5c:8d:1a:d3:e9:f2:3d:52:2c:5e:36:cd:ee:92:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Validity
Not Before: Feb 10 14:25:49 2025 GMT
Not After : Feb 9 14:30:49 2026 GMT
Subject: CN=918590041C09F26EBB827ED8D564A6C2E5B9433F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:08:b8:45:a8:b7:54:b2:d1:ef:ad:c4:2d:
3b:96:7b:24:38:03:9c:c8:cf:58:a6:5f:c8:17:2a:
71:28:cd:3c:83:8e:66:51:83:35:79:a7:a4:12:51:
1b:10:ac:7e:6f:f2:54:80:d0:9b:27:31:de:6a:7d:
4a:8e:6c:cf:29:c3:75:54:b0:d9:26:ed:fb:e6:3a:
ef:86:9f:31:d0:2d:85:af:05:b4:ec:5c:11:42:3d:
9c:26:a3:41:16:a6:38:c6:7a:cd:85:a5:80:da:83:
e0:14:ec:b1:23:7a:e3:cf:c9:66:31:02:23:df:51:
5c:de:f4:4c:81:8e:e4:23:90:20:ed:4e:e5:02:4d:
bf:24:7f:95:a3:f0:36:a9:47:f3:d2:76:a9:1a:0a:
85:b0:b0:a1:80:fb:e8:3a:53:71:c1:c9:c2:19:04:
06:14:d7:ca:c7:f0:ab:95:2a:4d:78:b5:97:b7:b5:
a4:e8:0a:30:aa:61:60:ff:31:ed:cc:ce:97:da:ce:
5a:41:a1:33:5e:de:8d:78:19:a2:42:d7:0d:83:e0:
89:10:a2:12:a4:d0:ce:d1:1a:f4:26:ff:56:af:5b:
0b:28:e6:4d:0d:9d:e8:4d:62:2d:17:2c:16:bd:40:
75:b7:d9:7a:5a:f0:5a:a8:41:55:e7:55:f2:2b:85:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:90:04:1C:09:F2:6E:BB:82:7E:D8:D5:64:A6:C2:E5:B9:43:3F
X509v3 Authority Key Identifier:
keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3136382e3139352e3233362e302f32322d3234203d3e203533313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:06:34:24:c6:d0:e2:60:64:f1:28:24:1e:f7:f4:5f:df:9e:
b9:c2:1a:2d:e1:da:bd:1e:7c:a2:c5:9f:44:5f:70:49:17:8a:
94:b8:2b:7f:35:a2:8a:d5:03:c8:5c:21:48:f7:d0:3a:72:d9:
c2:16:64:6f:b0:0e:b2:5c:a9:d8:f7:09:e9:3c:95:d4:83:ce:
71:bc:26:6b:49:0f:7b:94:7b:8c:ba:7d:9d:83:5c:69:5e:53:
b2:5b:d0:0a:8d:cc:f1:b0:7f:f9:79:66:3a:37:d8:e0:5b:2e:
28:ff:6f:a8:48:c5:da:84:76:6a:c2:24:d3:f1:32:0e:a7:0b:
60:96:81:a3:b1:ee:ae:aa:f7:13:5c:6b:0c:31:12:f0:c5:3d:
68:a3:0b:23:9e:f1:dc:25:ce:07:63:55:de:06:b0:2f:5b:b7:
8f:ce:46:08:cd:89:48:d9:26:1e:25:d8:7c:e8:b8:1b:5a:c6:
41:42:17:70:bf:08:77:d4:e1:af:8b:3a:5a:fe:e7:a1:7b:ce:
e0:24:f9:db:b2:69:fc:0c:5a:af:5f:10:27:21:64:1d:ba:b8:
6b:27:3e:6d:dd:5f:93:60:98:46:cf:3f:22:b0:b3:59:0f:f5:
d1:5e:59:7c:2a:8e:ab:66:c0:21:2f:60:27:96:80:9a:01:91:
fb:45:79:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN0jzbJ1cjRrT6fI9UixeNs3ukvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRkE4QzBFODA0QjRDRkM4REQxRTA1M0MyNDU0ODFF
RDBGNjZDMjAeFw0yNTAyMTAxNDI1NDlaFw0yNjAyMDkxNDMwNDlaMDMxMTAvBgNV
BAMTKDkxODU5MDA0MUMwOUYyNkVCQjgyN0VEOEQ1NjRBNkMyRTVCOTQzM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiVwi4Rai3VLLR763ELTuWeyQ4
A5zIz1imX8gXKnEozTyDjmZRgzV5p6QSURsQrH5v8lSA0JsnMd5qfUqObM8pw3VU
sNkm7fvmOu+GnzHQLYWvBbTsXBFCPZwmo0EWpjjGes2FpYDag+AU7LEjeuPPyWYx
AiPfUVze9EyBjuQjkCDtTuUCTb8kf5Wj8DapR/PSdqkaCoWwsKGA++g6U3HBycIZ
BAYU18rH8KuVKk14tZe3taToCjCqYWD/Me3MzpfazlpBoTNe3o14GaJC1w2D4IkQ
ohKk0M7RGvQm/1avWwso5k0NnehNYi0XLBa9QHW32Xpa8FqoQVXnVfIrhR+fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkYWQBBwJ8m67gn7Y1WSmwuW5Qz8wHwYDVR0j
BBgwFoAUpR+owOgEtM/I3R4FPCRUge0PZsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC9BNTFGQThDMEU4MDRCNENGQzhERDFFMDUzQzI0NTQ4MUVEMEY2NkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MUZBOEMwRTgwNEI0Q0ZD
OEREMUUwNTNDMjQ1NDgxRUQwRjY2QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzNjM4MmUzMTM5MzUyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzMzMTM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKow+wwDQYJKoZIhvcNAQELBQADggEBAHwGNCTG
0OJgZPEoJB739F/fnrnCGi3h2r0efKLFn0RfcEkXipS4K381oorVA8hcIUj30Dpy
2cIWZG+wDrJcqdj3Cek8ldSDznG8JmtJD3uUe4y6fZ2DXGleU7Jb0AqNzPGwf/l5
Zjo32OBbLij/b6hIxdqEdmrCJNPxMg6nC2CWgaOx7q6q9xNcawwxEvDFPWijCyOe
8dwlzgdjVd4GsC9bt4/ORgjNiUjZJh4l2HzouBtaxkFCF3C/CHfU4a+LOlr+56F7
zuAk+duyafwMWq9fECchZB26uGsnPm3dX5NgmEbPPyKws1kP9dFeWXwqjqtmwCEv
YCeWgJoBkftFeTI=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:27 2025 by rpki-client