Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137392e3132352e3132382e302f31372d3332203d3e203238363439.roa
File: 3137392e3132352e3132382e302f31372d3332203d3e203238363439.roa (raw, json)
Hash identifier: PcZ+WZOtk8kP55M43fU68arm6e3c0ZDfEwhadi17YoM=
Subject key identifier: 9C:D5:C4:C4:1A:26:53:94:D2:85:E5:38:F8:9E:B5:2F:15:7D:46:30
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 63CDA8F0E6D8DD847CFC2C81580AFADBC6B18C06
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137392e3132352e3132382e302f31372d3332203d3e203238363439.roa
Signing time: Tue 06 May 2025 00:49:49 +0000
ROA not before: Tue 06 May 2025 00:44:49 +0000
ROA not after: Tue 05 May 2026 00:49:49 +0000
asID: 28649
IP address blocks: 179.125.128.0/17 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cd:a8:f0:e6:d8:dd:84:7c:fc:2c:81:58:0a:fa:db:c6:b1:8c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:44:49 2025 GMT
Not After : May 5 00:49:49 2026 GMT
Subject: CN=9CD5C4C41A265394D285E538F89EB52F157D4630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:ff:b9:21:9a:64:8f:7d:d1:e3:d5:0c:72:
fd:b7:ed:9d:33:ba:1c:c5:8b:d9:30:25:cb:51:52:
0e:de:a2:25:19:37:e5:4d:23:1a:68:6a:78:e6:0d:
ee:91:0e:c5:12:d9:66:01:a3:e1:44:37:5d:4f:cd:
e6:ae:61:6b:e2:fc:e1:67:ac:06:dc:f8:b8:b4:30:
2f:bd:02:bb:e4:a2:10:29:52:03:f1:7d:26:ef:b4:
8c:b0:a9:61:a9:dd:02:f1:21:76:f3:0c:30:e0:3c:
5c:04:3e:0c:3c:57:53:41:d0:c9:25:ef:f9:d2:0f:
14:96:8b:a6:9c:cd:e3:14:db:36:4b:63:22:ca:ee:
e3:73:0a:40:04:7c:31:95:71:67:b6:f3:ab:a1:16:
77:5e:2f:f4:69:21:44:97:b0:b3:52:59:80:30:4b:
89:7d:ff:6d:93:1b:b4:e9:b8:56:48:36:d0:42:ce:
32:8e:07:25:f7:2a:3d:17:14:8b:0b:eb:09:f8:0c:
99:24:7b:ea:e9:6e:8a:be:d7:1c:79:b3:2f:85:77:
57:fc:bb:79:0f:3e:5b:f0:1c:d0:c7:cb:08:91:75:
ac:07:07:7b:83:62:04:a9:46:08:39:d8:aa:a3:f2:
05:9a:12:b0:65:fc:d6:01:38:1c:02:0d:6e:21:e0:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D5:C4:C4:1A:26:53:94:D2:85:E5:38:F8:9E:B5:2F:15:7D:46:30
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137392e3132352e3132382e302f31372d3332203d3e203238363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.125.128.0/17
Signature Algorithm: sha256WithRSAEncryption
09:5a:a6:9e:4e:9c:3d:42:76:db:43:42:b9:5e:ad:a0:aa:2e:
21:11:83:4f:18:69:de:29:89:ef:ac:aa:7e:24:ab:f8:08:38:
5d:43:8d:46:38:2b:d8:6c:b0:2b:1d:a4:a1:3a:0f:ae:55:ec:
21:2c:a2:4f:a6:e7:e0:0d:4e:3f:0e:5d:fe:9e:59:e5:5e:8e:
2a:ed:2d:cb:64:a2:36:54:79:58:af:5c:fe:1d:08:97:21:fe:
e8:24:cc:3e:2b:47:00:8b:84:cf:57:e9:99:d5:ca:01:4d:5d:
a0:e9:8c:7f:09:9b:05:92:9d:96:37:18:90:ef:81:a1:56:dd:
af:f2:33:8d:be:a6:bd:03:b9:54:c0:f0:34:ce:81:a3:3d:1c:
37:59:5a:0a:bc:f8:43:6f:af:71:4a:a7:19:6c:1f:49:af:38:
0c:45:5c:d1:a5:c0:73:01:67:3a:2c:0a:6d:37:54:b2:8c:42:
03:f2:59:88:17:7a:87:20:db:60:ad:52:5d:99:56:07:7f:4a:
ac:26:a0:96:dd:0f:c5:89:71:d3:a2:47:33:52:04:7d:bb:69:
1d:39:39:7c:23:a4:c2:ef:be:e9:5f:90:ac:2a:13:de:89:6d:
a7:cd:36:b5:5c:62:16:92:23:1b:12:cf:0d:f3:15:c0:11:43:
49:7c:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:04 2025 by rpki-client