Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139362e302f32322d3234203d3e20323637343834.roa
File: 3138372e38352e3139362e302f32322d3234203d3e20323637343834.roa (raw, json)
Hash identifier: gs/crYWgPi35x+cAVuqVfMkTbVcaBzgTkQ1gkjd2O+o=
Subject key identifier: 28:AA:2A:CF:50:A6:E3:AC:B7:7F:EF:A2:28:92:21:F7:87:CA:64:28
Certificate issuer: /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial: 0471393A2F6AE8BF430EB78E6448F2B76E0B5F4E
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139362e302f32322d3234203d3e20323637343834.roa
Signing time: Mon 10 Feb 2025 14:34:14 +0000
ROA not before: Mon 10 Feb 2025 14:29:14 +0000
ROA not after: Mon 09 Feb 2026 14:34:14 +0000
asID: 267484
IP address blocks: 187.85.196.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:71:39:3a:2f:6a:e8:bf:43:0e:b7:8e:64:48:f2:b7:6e:0b:5f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Validity
Not Before: Feb 10 14:29:14 2025 GMT
Not After : Feb 9 14:34:14 2026 GMT
Subject: CN=28AA2ACF50A6E3ACB77FEFA2289221F787CA6428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:10:12:78:22:ee:b7:73:ca:8c:5c:aa:d6:
a8:6d:0e:2a:51:ec:4b:d8:a8:40:16:a7:81:4c:e0:
e4:1c:12:3a:6f:fc:8e:e7:27:f6:b3:9d:be:9f:1a:
d0:79:b1:2a:6a:4d:b0:35:e7:ab:22:44:ff:c5:2d:
76:ca:5f:e0:3d:43:e2:33:59:59:70:30:00:7b:1f:
21:c7:1b:6c:e2:ee:b7:7f:6d:0e:fa:58:13:f4:a2:
c6:6c:1d:81:72:92:6e:e7:c1:18:5a:b1:1d:0c:0c:
36:a1:b0:38:0c:f0:67:1b:43:4a:43:62:fc:b2:46:
2d:3e:b6:da:d4:f8:91:4b:98:5e:b8:b7:b9:ec:a3:
e8:27:17:d2:db:ca:5d:52:92:f1:87:fe:41:a5:ea:
97:78:00:5d:e7:a6:b5:9d:da:d3:f1:a0:fe:cb:9b:
79:21:63:ee:04:28:86:97:b8:72:52:62:33:d4:2c:
2c:9c:55:a7:d9:0e:7a:c0:47:e5:24:57:3b:ed:e2:
5a:d6:00:fa:48:0f:71:1b:02:f0:57:38:da:f5:8e:
9d:ae:a5:36:75:00:d0:a5:64:51:82:a8:f6:b1:e8:
6e:53:06:69:49:c1:54:12:55:91:a1:08:7b:7d:c8:
25:34:14:bb:c5:85:60:c6:72:da:ec:79:c3:b9:52:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AA:2A:CF:50:A6:E3:AC:B7:7F:EF:A2:28:92:21:F7:87:CA:64:28
X509v3 Authority Key Identifier:
keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139362e302f32322d3234203d3e20323637343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.85.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:97:d3:f6:16:3f:ff:7d:a7:ab:49:13:a5:02:16:20:8e:12:
2b:d1:d7:e5:3a:cc:14:f3:d6:9e:71:e9:f7:91:1a:87:d1:8e:
a3:3c:75:7c:63:74:24:5c:5f:40:ca:fc:f6:4e:8c:ea:bc:05:
a6:70:b2:b7:45:9e:10:1f:79:e0:d5:ab:dd:06:91:c5:8f:de:
24:82:31:c2:9f:a3:93:b7:05:f2:cd:26:2d:ad:f2:3f:fc:ac:
21:d7:dd:77:7c:76:f1:0a:a4:ce:41:d0:c6:af:e3:9e:61:62:
ef:a4:91:90:92:a1:8b:df:8c:f8:9e:97:41:29:e6:03:06:47:
a5:2a:15:fb:09:e7:78:41:dc:c3:cc:70:76:ca:cd:e6:b8:f7:
7a:6e:cb:ce:0a:a9:18:d4:54:f1:60:56:98:9e:9f:26:46:34:
02:45:ff:18:f2:d5:e6:01:9f:ca:44:98:c6:76:af:c7:47:88:
bd:80:9f:89:d1:de:75:f8:e4:89:3b:0c:8e:ec:26:e4:6d:0d:
cb:7c:63:8e:99:f9:a0:11:ea:68:5f:81:78:e0:e7:1e:ca:86:
fc:96:ec:60:75:26:40:22:8e:d9:a0:28:ff:83:3c:35:06:2c:
54:89:c5:e2:4c:4d:70:ed:86:f9:ee:fe:31:1c:bb:a8:50:0f:
29:03:b0:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBHE5Oi9q6L9DDreOZEjyt24LX04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRkE4QzBFODA0QjRDRkM4REQxRTA1M0MyNDU0ODFF
RDBGNjZDMjAeFw0yNTAyMTAxNDI5MTRaFw0yNjAyMDkxNDM0MTRaMDMxMTAvBgNV
BAMTKDI4QUEyQUNGNTBBNkUzQUNCNzdGRUZBMjI4OTIyMUY3ODdDQTY0MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rBASeCLut3PKjFyq1qhtDipR
7EvYqEAWp4FM4OQcEjpv/I7nJ/aznb6fGtB5sSpqTbA156siRP/FLXbKX+A9Q+Iz
WVlwMAB7HyHHG2zi7rd/bQ76WBP0osZsHYFykm7nwRhasR0MDDahsDgM8GcbQ0pD
YvyyRi0+ttrU+JFLmF64t7nso+gnF9Lbyl1SkvGH/kGl6pd4AF3nprWd2tPxoP7L
m3khY+4EKIaXuHJSYjPULCycVafZDnrAR+UkVzvt4lrWAPpID3EbAvBXONr1jp2u
pTZ1ANClZFGCqPax6G5TBmlJwVQSVZGhCHt9yCU0FLvFhWDGctrsecO5UpEnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKKoqz1Cm46y3f++iKJIh94fKZCgwHwYDVR0j
BBgwFoAUpR+owOgEtM/I3R4FPCRUge0PZsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC9BNTFGQThDMEU4MDRCNENGQzhERDFFMDUzQzI0NTQ4MUVEMEY2NkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MUZBOEMwRTgwNEI0Q0ZD
OEREMUUwNTNDMjQ1NDgxRUQwRjY2QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM3MmUzODM1MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7VcQwDQYJKoZIhvcNAQELBQADggEBAGuX0/YW
P/99p6tJE6UCFiCOEivR1+U6zBTz1p5x6feRGofRjqM8dXxjdCRcX0DK/PZOjOq8
BaZwsrdFnhAfeeDVq90GkcWP3iSCMcKfo5O3BfLNJi2t8j/8rCHX3Xd8dvEKpM5B
0Mav455hYu+kkZCSoYvfjPiel0Ep5gMGR6UqFfsJ53hB3MPMcHbKzea493puy84K
qRjUVPFgVpienyZGNAJF/xjy1eYBn8pEmMZ2r8dHiL2An4nR3nX45Ik7DI7sJuRt
Dct8Y46Z+aAR6mhfgXjg5x7KhvyW7GB1JkAijtmgKP+DPDUGLFSJxeJMTXDthvnu
/jEcu6hQDykDsNc=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:13 2025 by rpki-client