Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e3139322e302f32302d3332203d3e203238363439.roa
File: 3230312e33332e3139322e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier: mtmNq83NxdYS3HCyDjCtt9Usc2tgLgqqOah11tw88HY=
Subject key identifier: F3:2F:50:39:FA:97:4C:DD:70:BA:9D:F8:54:19:8E:1E:14:2B:AD:88
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 0723C2BE82C5976A36BB5B802EE26F2105F1DB71
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e3139322e302f32302d3332203d3e203238363439.roa
Signing time: Tue 06 May 2025 00:49:49 +0000
ROA not before: Tue 06 May 2025 00:44:49 +0000
ROA not after: Tue 05 May 2026 00:49:49 +0000
asID: 28649
IP address blocks: 201.33.192.0/20 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:23:c2:be:82:c5:97:6a:36:bb:5b:80:2e:e2:6f:21:05:f1:db:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:44:49 2025 GMT
Not After : May 5 00:49:49 2026 GMT
Subject: CN=F32F5039FA974CDD70BA9DF854198E1E142BAD88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:67:c5:d3:64:d1:6a:d1:70:ce:03:e1:5a:
1f:e5:a6:9b:f1:0b:13:82:65:1a:f8:bb:a8:81:87:
21:56:d6:59:53:ae:d9:24:15:09:6c:8c:89:77:d1:
66:fe:28:6f:16:ac:43:2e:d8:0d:02:28:39:bd:fc:
4a:b9:5e:3d:96:54:11:ec:aa:27:d3:c0:5d:d5:b3:
f0:59:d5:25:f4:a0:54:1a:78:45:71:d7:8e:ce:03:
17:9b:85:53:ad:c7:3b:78:7c:ac:1b:f7:18:33:c4:
c4:aa:ed:e6:0e:d9:64:4e:82:36:e1:ac:b4:bf:be:
a8:b5:37:19:81:aa:3d:23:8b:90:0e:7a:19:4b:09:
32:39:f1:1b:29:ec:dc:c3:db:7b:9b:85:72:67:b0:
83:0b:f9:06:34:6d:c9:9c:5f:d5:69:10:c1:7b:1c:
71:91:7d:b4:90:35:de:c3:5c:50:e5:18:29:d7:0b:
85:29:9d:61:e9:60:34:ca:86:67:96:97:16:f7:bc:
0e:c7:75:76:5c:4e:98:bf:81:3a:43:74:77:fc:83:
75:43:52:bb:49:17:e6:e9:9e:7b:f0:41:ae:c9:c8:
9c:6a:d6:ce:d0:04:6a:78:3a:a9:e0:c3:4b:56:5c:
88:84:7b:1f:87:83:3c:06:04:3f:d6:62:2e:bd:96:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:50:39:FA:97:4C:DD:70:BA:9D:F8:54:19:8E:1E:14:2B:AD:88
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e3139322e302f32302d3332203d3e203238363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.33.192.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:e0:84:e8:05:cb:f1:ee:d0:1a:74:a7:c5:57:a0:52:ca:71:
dd:71:d6:77:a0:1a:6b:cb:42:b7:54:6b:64:48:a1:56:77:7a:
4e:2e:47:61:7a:9b:63:78:65:fd:07:57:79:b3:37:4a:8a:93:
9b:ce:c4:94:6a:c6:bb:31:f8:76:8e:bf:c3:a0:30:50:ec:e6:
68:19:84:69:4b:f7:35:9e:b4:94:43:a8:78:12:a3:6a:1c:4e:
ad:63:d6:a9:54:d7:58:3d:f8:71:25:69:54:6c:58:36:1d:9b:
a6:2e:b8:56:85:31:1c:1b:fb:8c:19:8d:6d:43:03:7b:2a:bd:
10:10:d2:c1:6a:6a:47:c9:f5:53:14:c7:03:3a:8b:08:91:fe:
96:4a:17:3f:22:5d:3e:17:95:88:5c:80:c2:61:48:2d:05:4c:
77:cd:a8:9f:f0:bc:9c:7d:91:01:35:47:34:a6:4d:1e:b3:ba:
37:cf:e3:bc:28:a6:ea:7a:2c:0d:91:8f:68:14:a3:24:03:e8:
f9:29:cb:8a:f5:04:9b:ab:37:07:52:e8:3e:15:95:ca:98:a4:
c5:9a:39:d1:33:66:5a:e1:9f:99:46:95:0d:c4:a8:9c:bb:82:
a7:94:d2:b5:07:0c:97:df:18:fd:6c:d2:1b:32:69:ab:08:81:
a5:92:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:42:55 2025 by rpki-client