Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e38352e33322e302f32302d3332203d3e203238363638.roa
File: 3138372e38352e33322e302f32302d3332203d3e203238363638.roa (raw, json)
Hash identifier: 9WePUamk2xuxsHE3d2W2+5wVzAirNf1xOgRnZtOHNIU=
Subject key identifier: F6:45:74:FD:46:2D:7C:4D:E3:F7:BC:94:32:D4:91:EE:72:6B:46:8D
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 0AEE044A72C2A9F9E6F12069C43CA0096066AD2C
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e38352e33322e302f32302d3332203d3e203238363638.roa
Signing time: Tue 06 May 2025 00:54:50 +0000
ROA not before: Tue 06 May 2025 00:49:50 +0000
ROA not after: Tue 05 May 2026 00:54:50 +0000
asID: 28668
IP address blocks: 187.85.32.0/20 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ee:04:4a:72:c2:a9:f9:e6:f1:20:69:c4:3c:a0:09:60:66:ad:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:49:50 2025 GMT
Not After : May 5 00:54:50 2026 GMT
Subject: CN=F64574FD462D7C4DE3F7BC9432D491EE726B468D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:9f:0e:8d:43:ce:42:2b:0d:86:c9:ed:0f:
12:45:73:00:5a:f6:61:56:7f:2f:36:3e:a5:c9:31:
bb:29:74:e5:fd:e1:85:08:b2:43:dc:ed:ff:d7:97:
86:93:31:bc:40:b3:d7:30:04:bd:c7:d9:70:84:ec:
15:9d:f1:01:0d:a6:cd:da:54:5a:9f:a2:d2:2e:26:
83:46:3b:94:0e:ee:9f:3c:ae:34:a8:54:85:e0:76:
ce:38:7b:04:6c:c1:fc:56:30:ef:93:c3:f5:96:91:
5b:b1:ba:e0:a1:23:cf:ae:0f:15:38:ec:9b:d5:6a:
49:ea:78:06:42:13:a7:75:03:08:5c:68:89:90:f2:
27:9c:5b:40:97:28:3e:fd:c9:e2:27:2e:26:3a:88:
c8:8e:ab:25:5d:08:15:7c:6e:49:bb:51:0b:2d:30:
c8:b4:05:be:e8:5b:fe:e8:10:9a:f2:68:82:47:53:
fb:57:c9:0b:9c:96:3b:fd:90:3d:08:da:e7:01:8f:
74:14:a9:02:e0:09:bc:53:3a:7a:b2:86:e6:24:e9:
49:8c:fe:1e:4e:e7:88:fc:d7:0c:f2:79:c2:b2:25:
ca:91:b9:d7:ce:fd:a5:b3:38:4e:bd:cf:52:0a:9e:
0f:f3:f9:3e:b8:a6:d9:54:72:cb:52:2d:cf:b2:13:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:45:74:FD:46:2D:7C:4D:E3:F7:BC:94:32:D4:91:EE:72:6B:46:8D
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e38352e33322e302f32302d3332203d3e203238363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.85.32.0/20
Signature Algorithm: sha256WithRSAEncryption
65:f7:4e:04:a6:da:d2:06:f7:70:bf:bb:ac:a5:0d:8d:9c:84:
11:0f:24:2b:7c:ed:9a:8e:8a:7a:48:17:74:19:22:48:e4:ba:
19:f1:ec:1b:9a:8c:49:0b:cc:26:73:f4:da:19:c6:95:17:31:
1c:db:51:eb:d2:04:f9:22:5e:48:d8:28:c1:b2:f3:16:3d:86:
f7:72:85:33:09:c6:db:cd:35:e9:39:62:27:d0:79:76:d9:3a:
51:65:4f:dd:29:35:a3:ae:5a:53:99:e9:30:7c:37:1e:c3:83:
0e:85:49:f2:ae:3b:27:5e:c1:88:e7:3d:19:b0:8f:2f:c2:ba:
89:19:f6:9e:02:a7:21:5e:8d:e5:7f:52:11:8f:74:c5:fd:4e:
dc:7a:8f:8b:6c:af:e9:73:19:6d:14:43:91:18:66:e8:75:33:
0b:58:38:c5:a6:41:ae:45:bf:1b:cc:75:30:fc:13:9b:b8:da:
a0:0d:ef:9f:2b:6c:f8:35:2b:7d:06:fc:e6:ea:f3:ba:06:19:
8f:16:3c:08:e6:f4:ba:68:11:01:07:ff:ad:f7:ae:f3:a3:0c:
02:ba:65:83:7d:c0:7a:20:74:3b:dc:d3:2f:be:d0:51:dd:88:
6c:8a:ba:e8:e2:18:69:6d:f7:2d:67:1d:8f:1b:c3:91:3f:cf:
7c:c6:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:05 2025 by rpki-client