Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3132302e302f32322d3332203d3e203238363439.roa
File: 3137302e38332e3132302e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier: Fx/79+30r24jIdSCPuLnBJ9z4WYYFTXcSgeFHjV5du8=
Subject key identifier: C0:A8:F3:76:98:07:6B:FC:14:65:6A:05:02:22:BD:87:D4:F4:A1:C2
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 0A150CCF8C9AA65B26D811BAE0E35C4E0C575478
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3132302e302f32322d3332203d3e203238363439.roa
Signing time: Tue 06 May 2025 00:49:49 +0000
ROA not before: Tue 06 May 2025 00:44:49 +0000
ROA not after: Tue 05 May 2026 00:49:49 +0000
asID: 28649
IP address blocks: 170.83.120.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:15:0c:cf:8c:9a:a6:5b:26:d8:11:ba:e0:e3:5c:4e:0c:57:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:44:49 2025 GMT
Not After : May 5 00:49:49 2026 GMT
Subject: CN=C0A8F37698076BFC14656A050222BD87D4F4A1C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:17:d8:6d:b6:9f:dc:bd:65:94:05:f5:72:
b8:e8:7f:e7:97:c7:a4:27:95:4e:95:82:7b:ba:bb:
1e:41:a3:1b:bb:20:ff:7f:6f:9b:c9:70:4f:68:65:
ee:84:d6:01:98:04:f2:65:1e:17:5e:86:3c:99:6d:
61:68:49:de:2c:65:22:8f:0a:2a:9d:ee:db:f9:7c:
88:02:64:7e:26:4c:ef:a2:79:e1:74:e7:44:a4:4a:
61:81:0a:73:53:dc:c9:01:60:5d:14:41:d4:6d:ec:
c6:7f:68:69:34:3b:50:24:14:d1:25:01:c1:2a:d1:
01:3f:a3:16:55:d3:15:1a:7d:7c:34:e9:28:b2:ac:
76:a7:5b:37:6f:73:e9:93:06:e7:dd:87:d5:ef:cd:
8a:10:43:87:e3:b8:86:a2:59:07:c7:19:31:af:94:
8a:2c:8a:d9:05:8a:42:3f:ac:76:ab:d1:64:89:16:
f2:9b:0b:06:ff:9e:23:1e:16:00:d0:ea:34:e1:9f:
b8:38:dc:ca:13:b4:f8:71:88:11:86:72:04:f6:d1:
7d:07:54:65:2c:94:db:b6:ef:e1:12:29:9d:df:bf:
67:14:90:8e:ab:55:3b:15:34:ce:4d:1b:dc:1a:1c:
d1:4e:bf:e5:cb:96:0e:a6:a0:18:8f:98:5b:ee:81:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A8:F3:76:98:07:6B:FC:14:65:6A:05:02:22:BD:87:D4:F4:A1:C2
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3132302e302f32322d3332203d3e203238363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:c7:bf:d8:d5:e1:b1:1c:14:2e:d1:14:1a:a0:38:1f:61:cf:
2f:d9:02:f8:1d:e0:c6:e7:3b:5d:3f:f8:9f:8c:26:69:35:c9:
62:78:23:fd:6d:a3:a5:ca:ef:7b:15:94:77:35:56:c0:2e:1c:
fb:9d:bd:8b:15:87:c7:4c:f1:83:c9:1d:93:e6:9e:80:72:3a:
02:58:81:1c:a3:35:5f:e9:4c:96:23:08:47:8e:e1:c5:25:e3:
47:9c:7e:b6:36:0d:ae:f2:a3:ef:ac:46:55:c9:74:99:ea:ef:
f7:9b:07:39:c8:08:a4:2c:31:95:b6:c8:61:77:0f:dd:ae:b4:
79:a5:73:b5:4d:c4:50:63:38:d0:e6:c3:01:a4:29:01:dc:14:
fd:f7:12:60:09:6f:ce:20:fb:50:3b:bc:62:7e:28:ae:4a:3b:
78:4a:40:40:08:09:ed:6b:62:37:ee:03:5a:e5:eb:9c:f4:d5:
0b:87:16:68:0c:f9:1b:47:8e:8e:e1:05:16:c2:cc:f6:88:e0:
ca:6d:60:56:e9:94:b9:60:eb:f6:8d:a4:79:a3:e0:25:5f:82:
38:79:86:49:8f:03:84:12:47:67:3c:b3:3d:b9:68:13:b1:39:
f7:f5:1e:be:3e:3b:78:f2:39:fd:7a:f3:91:f3:e0:c9:36:47:
13:54:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:08:51 2025 by rpki-client