Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e3130392e3134342e302f32302d3332203d3e203238363638.roa
File: 3138372e3130392e3134342e302f32302d3332203d3e203238363638.roa (raw, json)
Hash identifier: WQjC9iwLHt1itxW766SQQU0neFDPzj4Fm/WVD6ZBXcI=
Subject key identifier: 91:1B:7D:C3:94:CE:63:FE:D6:FD:D1:DB:4D:39:98:F4:E4:78:23:2D
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 7983E00C9D3394D347902101A5E2CD50EB9DFCBB
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e3130392e3134342e302f32302d3332203d3e203238363638.roa
Signing time: Tue 06 May 2025 00:54:50 +0000
ROA not before: Tue 06 May 2025 00:49:50 +0000
ROA not after: Tue 05 May 2026 00:54:50 +0000
asID: 28668
IP address blocks: 187.109.144.0/20 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:83:e0:0c:9d:33:94:d3:47:90:21:01:a5:e2:cd:50:eb:9d:fc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:49:50 2025 GMT
Not After : May 5 00:54:50 2026 GMT
Subject: CN=911B7DC394CE63FED6FDD1DB4D3998F4E478232D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:8d:09:80:e6:5b:aa:96:b7:e3:21:5f:35:
7f:a0:1e:bb:ef:4f:bf:28:84:ff:67:0b:97:ce:dd:
66:bf:1e:93:9a:b3:26:29:a4:d4:d7:9d:ca:21:65:
5c:7d:cd:37:a4:2e:b8:f9:1c:04:a6:7a:bf:76:1b:
f9:fa:00:cf:68:7b:5a:ba:2a:c5:9a:34:5a:40:bc:
c2:c9:91:a5:12:af:1c:20:fc:23:b5:c9:fc:12:20:
0b:60:44:31:04:e8:16:2f:ab:c2:87:cc:bd:6d:cf:
fb:2b:3b:2d:2a:2c:97:81:4d:2a:c7:a6:e5:d1:33:
08:fa:dd:b1:69:c1:43:5a:5d:91:68:1c:d8:fb:ca:
98:6d:51:e8:c7:0d:da:08:e7:13:d4:ab:d2:a2:dc:
6f:20:42:c9:d6:0a:03:2a:79:df:14:1a:c9:21:1d:
29:eb:fe:4c:f1:c6:0a:fb:39:be:e2:0f:67:ad:4b:
a5:62:98:aa:3f:ad:9c:af:ca:ef:27:9a:94:5e:04:
1b:70:ac:0d:74:a3:75:46:73:96:31:5f:ba:cd:4c:
03:ed:cc:a5:71:2c:6a:48:1b:2a:15:aa:3f:a4:d9:
16:f8:44:06:b3:2d:53:97:19:a8:4b:2e:ac:22:db:
21:26:c3:5c:e3:30:01:5e:d5:3d:96:a4:02:5b:62:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1B:7D:C3:94:CE:63:FE:D6:FD:D1:DB:4D:39:98:F4:E4:78:23:2D
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e3130392e3134342e302f32302d3332203d3e203238363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.109.144.0/20
Signature Algorithm: sha256WithRSAEncryption
82:c6:93:4b:24:ea:44:6a:1e:5a:b3:c0:1e:8c:ec:1f:7e:ad:
82:17:46:67:54:f7:9d:19:4a:af:6e:3c:e7:98:dc:d7:f6:ef:
a1:25:94:49:1f:c7:ec:80:6a:fd:d9:a8:21:6f:35:93:f2:84:
68:b9:12:2c:b4:35:01:41:4a:97:86:9a:46:1d:27:8c:a3:1b:
17:03:cf:0a:91:07:a6:23:5a:60:8b:34:b6:41:cc:b7:e4:54:
6c:51:fb:b0:2a:d7:38:f1:f1:cb:37:06:24:2a:29:e9:e6:1e:
42:34:90:b6:c9:0f:db:15:eb:27:43:2e:97:3f:90:5b:0d:62:
1c:8f:7c:dd:2b:97:25:e6:ae:57:49:58:21:99:7b:78:4a:c7:
0a:d2:f6:41:71:7a:ec:f3:49:9b:00:64:e8:50:ed:16:1e:73:
f2:11:51:bd:46:d9:15:3e:43:f9:78:b0:ec:1b:36:cc:f2:29:
05:92:1e:f3:61:31:54:03:d0:fc:59:88:f1:00:9c:8b:2d:f4:
04:24:35:d1:94:14:a1:8e:06:9c:93:f9:12:95:69:44:98:32:
c3:76:d1:ba:91:c3:df:dc:ce:36:e2:3c:52:77:45:c6:85:ca:
f5:51:69:24:65:6e:10:48:02:f8:32:86:d6:20:e1:39:cd:a2:
70:bd:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:24 2025 by rpki-client