Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3234392e3132382e302f31392d3332203d3e203238363439.roa
File: 3138362e3234392e3132382e302f31392d3332203d3e203238363439.roa (raw, json)
Hash identifier: 4bJ4WVusjKrM6jQfo4zVkc1GIIeUr9n+H7NAhqFXld0=
Subject key identifier: 35:D2:8E:4E:8C:06:81:F0:BA:68:D9:F9:7A:06:9F:97:2D:37:EE:6B
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 6C8DAD81BA186E5797C978D7CFE993F37E68C2CE
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3234392e3132382e302f31392d3332203d3e203238363439.roa
Signing time: Tue 06 May 2025 00:49:51 +0000
ROA not before: Tue 06 May 2025 00:44:51 +0000
ROA not after: Tue 05 May 2026 00:49:51 +0000
asID: 28649
IP address blocks: 186.249.128.0/19 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8d:ad:81:ba:18:6e:57:97:c9:78:d7:cf:e9:93:f3:7e:68:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:44:51 2025 GMT
Not After : May 5 00:49:51 2026 GMT
Subject: CN=35D28E4E8C0681F0BA68D9F97A069F972D37EE6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:0a:20:ab:b1:7c:50:0c:a1:fc:26:b8:7c:
15:1c:b6:6e:a2:3b:36:bf:a6:ed:60:5a:80:d9:2f:
b4:5e:20:84:ee:e3:2d:5b:9d:ce:98:19:09:72:12:
c0:6f:30:60:99:7d:84:c7:dc:11:b3:27:b4:61:1e:
d1:9e:b9:1e:31:4d:8b:f3:28:d9:68:1f:04:0a:11:
ab:48:96:46:f7:e5:47:da:5a:2a:3e:68:b6:36:49:
1d:20:25:ff:d8:ff:79:d0:39:52:1a:84:a6:3e:cd:
bb:3b:02:e7:36:e2:07:6a:0d:ac:ba:a6:84:5d:14:
6f:69:9c:2e:af:55:1f:bd:b1:57:6c:95:0c:c9:87:
99:bf:37:85:5d:de:38:5a:5b:e7:60:d9:5a:29:e8:
47:69:63:af:0b:17:d5:8c:4f:ce:f3:d8:09:a4:1c:
01:3d:dd:e8:72:6a:64:9b:bb:2c:62:e8:8e:25:7c:
e8:64:5a:bf:3f:b2:4d:e9:a6:b3:ce:68:d8:98:38:
f5:f0:06:dd:2b:60:53:83:62:36:91:b7:77:b6:d5:
d9:cb:72:f0:4d:f9:fc:cb:cf:01:48:17:9c:58:1e:
bc:78:1d:02:76:21:45:84:17:b4:91:dd:ad:98:9e:
12:46:0f:e4:5e:3b:b8:cb:93:49:f0:e2:a6:51:ad:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D2:8E:4E:8C:06:81:F0:BA:68:D9:F9:7A:06:9F:97:2D:37:EE:6B
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3234392e3132382e302f31392d3332203d3e203238363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.249.128.0/19
Signature Algorithm: sha256WithRSAEncryption
af:f0:91:a8:02:66:dd:2a:65:78:16:8c:ae:a5:9f:08:5e:82:
ab:06:12:22:d1:40:e3:0c:da:8b:66:4a:e1:33:8a:8e:fe:f8:
e5:7b:e8:d0:51:4b:ef:d4:d3:22:af:dd:2a:75:d0:10:75:6b:
ab:a8:0a:d9:c8:76:e3:8d:dd:2d:3c:0e:6d:13:ae:89:1a:76:
34:69:50:b9:09:d7:13:09:cd:cd:39:f7:01:33:5f:69:f2:89:
54:80:9e:43:a0:c0:17:0d:0f:69:f7:4a:85:99:a2:07:ec:3d:
84:05:30:8e:7f:67:3a:e0:ef:06:75:4f:57:72:4d:00:64:73:
88:31:e3:68:bc:9f:0f:ba:cd:f4:b2:fc:ca:57:cd:a0:d7:09:
9c:5a:3a:34:c7:b2:cb:cf:a6:a3:c5:4f:8c:8c:46:16:89:ab:
bd:26:10:e2:cb:dc:28:c0:48:a3:e4:37:30:16:48:59:8f:a5:
31:e5:98:44:ce:7d:72:98:e7:20:f6:bb:31:28:ab:fa:b5:ba:
73:b8:22:55:a1:a9:92:f1:ff:4e:58:d9:6f:09:aa:ee:e2:1c:
aa:b0:c1:da:82:82:2d:8d:a2:a9:c3:eb:1b:33:3c:68:06:1f:
5b:c0:41:1f:8c:30:50:cb:6a:1e:aa:fe:4b:e6:89:f5:9d:a8:
30:20:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:40:39 2025 by rpki-client