Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e302e32302e302f32322d3332203d3e203238363638.roa
File: 3137302e302e32302e302f32322d3332203d3e203238363638.roa (raw, json)
Hash identifier: EFaHK4OMyBfieZQZ0p5vzvhRm5/9hur7mJODNDgESuw=
Subject key identifier: A7:D5:04:DC:07:ED:52:0F:9D:AD:6D:DF:08:A1:F0:76:D9:A5:A0:8F
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 25754A44EB178698D8FB283FD016F3282DC3763A
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e302e32302e302f32322d3332203d3e203238363638.roa
Signing time: Tue 06 May 2025 00:54:51 +0000
ROA not before: Tue 06 May 2025 00:49:51 +0000
ROA not after: Tue 05 May 2026 00:54:51 +0000
asID: 28668
IP address blocks: 170.0.20.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:75:4a:44:eb:17:86:98:d8:fb:28:3f:d0:16:f3:28:2d:c3:76:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:49:51 2025 GMT
Not After : May 5 00:54:51 2026 GMT
Subject: CN=A7D504DC07ED520F9DAD6DDF08A1F076D9A5A08F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:23:77:d9:75:13:87:84:1a:2e:77:52:2b:
17:48:70:0f:1f:6f:4e:cb:d3:93:b0:48:4a:50:df:
32:23:59:a1:06:ed:73:fe:b2:0c:da:a4:51:04:35:
48:0f:ed:c1:9c:7f:5e:d1:47:ca:f8:e7:b2:5c:57:
58:d9:30:2f:e6:c2:0b:fa:f6:77:8e:0c:6c:b5:40:
d7:77:1c:04:4b:9e:c6:33:c7:f3:bd:ba:8a:a8:b2:
b7:e1:c9:f6:92:45:43:65:30:83:86:5c:1e:0e:98:
de:b2:20:4e:8c:83:06:06:ca:1b:71:a1:50:94:25:
76:e2:88:61:52:fc:9c:f4:ab:7f:b6:2b:32:24:f5:
bb:75:9a:b1:e6:94:59:06:6f:c7:cf:cc:0b:e7:62:
71:c5:c2:66:7f:ef:5e:36:87:65:6a:4c:c9:6b:06:
9b:96:41:d2:0a:ae:b1:9e:02:16:66:76:49:12:99:
ef:28:3f:1c:d4:09:71:eb:81:37:70:da:15:9c:97:
c8:8f:c5:95:0c:c9:0a:c0:93:ad:a6:3c:64:64:8e:
e6:c1:c1:3f:7d:32:dd:12:f5:b7:25:99:fe:6e:9b:
9b:0e:64:d3:6a:fc:75:ce:9d:6d:60:be:b2:fb:b1:
69:65:3d:08:de:73:07:c1:9a:a6:5a:7e:c9:06:f2:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D5:04:DC:07:ED:52:0F:9D:AD:6D:DF:08:A1:F0:76:D9:A5:A0:8F
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e302e32302e302f32322d3332203d3e203238363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.20.0/22
Signature Algorithm: sha256WithRSAEncryption
04:5a:5f:7f:65:e2:08:8b:fc:e1:a5:2e:13:8a:a5:e3:d8:a2:
54:36:25:08:18:93:cd:f2:ef:bc:25:2e:94:95:6e:0a:0f:99:
03:a2:c3:16:79:f3:dc:24:b1:ef:f3:db:51:18:c4:b2:e2:9e:
ae:90:ee:ea:d2:f7:17:3a:ee:31:41:07:13:38:15:8d:9e:cc:
94:a0:08:11:8a:be:96:d3:99:1c:c8:5a:ac:44:35:46:1f:75:
68:bd:fe:6b:5d:18:9c:54:c0:92:e9:2a:b6:08:42:d8:0c:36:
5d:95:62:61:14:33:11:ef:f3:ae:43:2a:1c:b5:6a:d3:5b:b0:
fa:97:be:2a:06:17:1e:96:f7:03:d2:09:27:0b:a3:a5:ec:a7:
c0:46:b4:ed:b6:27:4e:2d:c9:8c:b2:1e:b4:eb:48:92:68:96:
b9:92:0a:67:1b:d0:2d:5c:db:88:32:f3:3d:57:7b:0d:87:54:
64:67:b5:e2:8b:b2:da:77:b7:d6:13:aa:7e:21:20:28:78:58:
30:c3:dd:78:81:e1:da:c4:0a:e9:b6:c2:18:60:93:aa:41:cd:
80:6a:60:c5:69:c0:aa:d6:c5:d4:85:44:40:39:0f:2d:c9:9f:
d4:ec:77:08:f3:9a:7e:96:05:e8:b8:bf:3f:54:f1:38:30:f9:
57:76:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:18:02 2025 by rpki-client