Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa
File: 3136382e3132312e36342e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier: KmzceVuYG7se4wNmBfeTB/cVGU1toHDfy7u0mBSVxJQ=
Subject key identifier: 95:5F:88:BF:3B:62:97:97:F5:A4:94:6E:26:59:6A:B1:60:1B:9B:7B
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 40C1CE9C5AAE02E1B80032F7B3AD4AD3E55C9564
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa
Signing time: Tue 06 May 2025 00:49:49 +0000
ROA not before: Tue 06 May 2025 00:44:49 +0000
ROA not after: Tue 05 May 2026 00:49:49 +0000
asID: 28649
IP address blocks: 168.121.64.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c1:ce:9c:5a:ae:02:e1:b8:00:32:f7:b3:ad:4a:d3:e5:5c:95:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:44:49 2025 GMT
Not After : May 5 00:49:49 2026 GMT
Subject: CN=955F88BF3B629797F5A4946E26596AB1601B9B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:b4:15:39:9b:27:7c:e0:9e:e9:b6:b0:37:
7c:2d:39:11:3d:1b:c9:f6:e9:f3:f3:e7:4a:0a:a5:
02:9a:df:b7:70:f3:52:92:a0:b9:73:d0:f6:3b:c3:
f8:ea:8a:ff:12:e0:d4:49:00:51:0f:a6:6f:79:52:
d1:c8:f5:6a:c3:a2:9c:42:72:b8:d4:43:04:c4:92:
37:aa:49:92:bc:95:95:49:d7:2b:66:7b:b1:38:43:
9a:67:71:55:69:45:70:e8:88:1a:4a:9c:ef:dd:72:
4c:7d:d9:ea:01:19:41:5c:fc:d1:6b:18:68:87:b1:
40:9e:bc:01:cc:d8:80:08:53:ed:d0:6a:0e:f4:9b:
fe:4e:18:c6:38:2b:0e:41:69:8d:1c:f3:df:31:30:
d3:2c:54:f4:b1:6c:f7:61:15:14:49:ec:4a:1a:52:
32:6d:0f:76:6e:bf:cf:cc:21:6c:f9:be:85:41:6f:
24:3d:a3:b9:d5:cb:dd:fe:44:01:50:64:97:aa:f2:
79:a7:7b:6a:3d:d3:ff:f0:8b:6c:87:98:4a:17:13:
9a:7c:b2:e2:ba:8d:87:65:2b:d1:0e:79:2b:dc:d2:
a2:98:b3:34:f1:e3:59:fb:a0:b8:01:37:59:5d:29:
0d:8b:98:7d:f8:6d:bb:f8:be:a3:ee:25:65:22:b9:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5F:88:BF:3B:62:97:97:F5:A4:94:6E:26:59:6A:B1:60:1B:9B:7B
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.64.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:2b:80:41:79:f3:fe:51:b2:b0:9d:34:58:f3:b2:36:2a:c4:
a1:14:e9:92:40:55:3f:1b:e1:09:a5:56:b6:8e:bd:78:68:c9:
41:d3:fe:79:be:81:49:66:30:06:a9:35:5f:1e:14:1b:90:fc:
5e:5e:b4:62:8e:7b:91:b8:62:b2:83:2e:8c:af:74:2a:62:97:
a5:99:01:78:31:61:a0:13:52:3f:c1:bb:e8:6a:84:9d:b4:9a:
67:d7:62:59:2a:34:5e:73:97:7f:b6:ef:5b:f5:bd:27:16:2c:
fc:41:5b:c0:e2:c8:fe:4a:25:32:1c:1c:fe:09:28:4f:13:52:
52:73:ff:89:f2:1f:8c:d6:26:1c:c5:2d:f1:b4:8f:a1:5d:5a:
14:b8:da:00:41:88:0b:9a:02:b5:1c:b8:96:60:e8:d1:6d:d1:
9c:17:e6:d6:91:6f:24:d0:81:be:7d:ce:9b:ce:fb:ab:d2:bd:
7c:f7:10:63:be:58:a8:cc:3e:7e:0b:eb:5a:15:af:36:3a:14:
4b:41:ad:9d:33:54:f5:34:73:15:e1:84:cc:79:65:51:42:a7:
00:70:ce:1a:01:36:5b:86:09:45:a7:98:00:9e:1f:a5:89:fc:
04:34:fb:49:3a:b0:66:9c:f0:dc:08:ce:b5:8d:ab:56:d2:d4:
0f:9a:27:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:23 2025 by rpki-client