
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa
File: 3138392e33362e3232342e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier: uaCPXZ01x6hQttvsHqDxWlE+9aOGgJFG7Xm6SZIWD1Y=
Subject key identifier: D2:42:10:D3:C8:5C:03:9A:48:20:3B:82:8E:9B:A3:9E:4A:CD:77:61
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 7159B2EC3E5DF067B3B751850917B63A378D05AF
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa
Signing time: Tue 06 May 2025 00:49:48 +0000
ROA not before: Tue 06 May 2025 00:44:48 +0000
ROA not after: Tue 05 May 2026 00:49:48 +0000
asID: 28649
IP address blocks: 189.36.224.0/20 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:59:b2:ec:3e:5d:f0:67:b3:b7:51:85:09:17:b6:3a:37:8d:05:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:44:48 2025 GMT
Not After : May 5 00:49:48 2026 GMT
Subject: CN=D24210D3C85C039A48203B828E9BA39E4ACD7761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:b1:23:a1:76:97:06:dd:0e:d5:0c:a3:53:
d9:72:6b:f6:75:b1:04:2c:1e:b6:94:00:53:a1:29:
80:90:8e:ef:21:9c:23:c2:f3:b5:17:40:4b:d7:53:
c7:02:2a:0b:20:95:dd:b7:b8:81:2a:b0:c3:8c:ab:
a5:4d:c1:38:ca:aa:b7:3e:48:89:d8:2f:d3:17:3b:
79:91:ce:9b:41:7b:a6:9e:57:18:f7:50:ed:31:5b:
b4:42:53:ec:e5:df:f4:09:20:65:c5:51:6c:af:30:
94:4c:0f:dc:9b:90:a7:de:eb:45:08:cb:ce:d6:9f:
98:d0:a5:95:fe:7a:8b:0d:02:74:a0:85:7a:35:32:
38:08:4c:59:bc:7f:9d:d8:aa:47:5a:16:d9:38:55:
3f:5d:b1:69:98:b7:f8:14:9a:7d:64:4e:18:ef:41:
77:72:a4:f4:81:f9:de:03:42:81:9c:fa:02:05:c1:
79:b8:03:2f:95:57:6d:01:5d:76:c2:99:9b:4f:4d:
89:64:66:2a:93:27:f7:81:e1:f7:83:f1:87:89:25:
ea:29:48:f6:ec:ab:7e:56:fb:4d:17:d5:a5:24:45:
ef:61:f4:e3:4c:72:01:66:2c:61:f0:4f:6e:49:f2:
69:34:a1:e7:7f:5e:d6:d8:12:85:36:3b:31:f2:72:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:10:D3:C8:5C:03:9A:48:20:3B:82:8E:9B:A3:9E:4A:CD:77:61
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.36.224.0/20
Signature Algorithm: sha256WithRSAEncryption
95:06:68:39:cd:0f:6c:92:1e:4c:d0:c0:eb:96:f7:bb:d7:8a:
b6:55:9c:66:1c:8e:a8:a6:a4:b1:4a:b2:23:9d:46:2a:ed:8c:
bd:cb:49:0a:3c:d8:47:d7:a5:90:28:24:b2:3f:43:5d:53:ff:
10:55:0b:f4:28:a5:c8:81:43:76:7d:45:89:55:60:ec:8d:6c:
ae:8f:2d:19:31:83:39:7a:37:77:17:41:ec:3f:29:77:ae:7a:
76:29:00:4b:58:57:18:9d:3d:53:7d:67:f8:9d:b5:ad:e2:56:
5c:ad:48:c5:12:50:50:8f:22:4b:84:c2:02:fe:88:61:d5:e4:
97:fd:e3:bc:19:8a:42:38:00:f2:74:64:07:84:f0:0b:87:d5:
65:7e:9b:e4:1c:07:5b:2f:60:18:d0:b7:2a:79:7e:e8:0e:f5:
2f:24:7e:37:5f:14:af:2f:e0:97:50:97:e7:27:c5:49:9d:25:
13:ff:c8:37:1d:98:c4:07:76:4a:fa:59:b3:4c:60:ee:9e:b1:
a3:51:1b:cd:68:af:30:3a:76:a9:56:a8:66:52:fd:76:2b:70:
7b:25:ae:54:b6:2d:fd:f1:d7:9a:47:fd:94:54:2e:68:2f:c5:
4f:45:3a:54:6c:df:47:00:55:7a:5d:9f:6a:62:8f:c5:ce:8c:
c9:48:8e:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcVmy7D5d8Gezt1GFCRe2OjeNBa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM5M0UxMDM5OTJGNThEQ0EwMUY0OUNGMzRFOTkzMzdG
Q0YwREI0MzAeFw0yNTA1MDYwMDQ0NDhaFw0yNjA1MDUwMDQ5NDhaMDMxMTAvBgNV
BAMTKEQyNDIxMEQzQzg1QzAzOUE0ODIwM0I4MjhFOUJBMzlFNEFDRDc3NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMbEjoXaXBt0O1QyjU9lya/Z1
sQQsHraUAFOhKYCQju8hnCPC87UXQEvXU8cCKgsgld23uIEqsMOMq6VNwTjKqrc+
SInYL9MXO3mRzptBe6aeVxj3UO0xW7RCU+zl3/QJIGXFUWyvMJRMD9ybkKfe60UI
y87Wn5jQpZX+eosNAnSghXo1MjgITFm8f53YqkdaFtk4VT9dsWmYt/gUmn1kThjv
QXdypPSB+d4DQoGc+gIFwXm4Ay+VV20BXXbCmZtPTYlkZiqTJ/eB4feD8YeJJeop
SPbsq35W+00X1aUkRe9h9ONMcgFmLGHwT25J8mk0oed/XtbYEoU2OzHyckpVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0kIQ08hcA5pIIDuCjpujnkrNd2EwHwYDVR0j
BBgwFoAUHJPhA5kvWNygH0nPNOmTN/zw20MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8xQzkzRTEwMzk5MkY1OERDQTAxRjQ5Q0YzNEU5OTMzN0ZDRjBEQjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDOTNFMTAzOTkyRjU4RENB
MDFGNDlDRjM0RTk5MzM3RkNGMERCNDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzODM5MmUzMzM2MmUzMjMyMzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvSTgMA0GCSqGSIb3DQEBCwUAA4IBAQCVBmg5zQ9s
kh5M0MDrlve714q2VZxmHI6opqSxSrIjnUYq7Yy9y0kKPNhH16WQKCSyP0NdU/8Q
VQv0KKXIgUN2fUWJVWDsjWyujy0ZMYM5ejd3F0HsPyl3rnp2KQBLWFcYnT1TfWf4
nbWt4lZcrUjFElBQjyJLhMIC/ohh1eSX/eO8GYpCOADydGQHhPALh9VlfpvkHAdb
L2AY0LcqeX7oDvUvJH43XxSvL+CXUJfnJ8VJnSUT/8g3HZjEB3ZK+lmzTGDunrGj
URvNaK8wOnapVqhmUv12K3B7Ja5Uti398deaR/2UVC5oL8VPRTpUbN9HAFV6XZ9q
Yo/FzozJSI5T
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:09 2025 by rpki-client