Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e302e302f32332d3234203d3e20323635323430.roa
File: 3136382e302e302e302f32332d3234203d3e20323635323430.roa (raw, json)
Hash identifier: 69tvAOIBRYG/qmeVeOdm+rksHEzE4WwRIBKrBYXkBSc=
Subject key identifier: AC:0C:3A:B9:53:48:72:D4:44:50:16:3B:4A:87:56:26:E9:28:8A:0F
Certificate issuer: /CN=F18830EE57CFAF9A0DC6E60307843318EFBE007E
Certificate serial: 428718B530C414DF46AACABAA3B07832BEC42329
Authority key identifier: F1:88:30:EE:57:CF:AF:9A:0D:C6:E6:03:07:84:33:18:EF:BE:00:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F18830EE57CFAF9A0DC6E60307843318EFBE007E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e302e302f32332d3234203d3e20323635323430.roa
Signing time: Thu 23 Oct 2025 17:49:12 +0000
ROA not before: Thu 23 Oct 2025 17:44:12 +0000
ROA not after: Thu 22 Oct 2026 17:49:12 +0000
asID: 265240
IP address blocks: 168.0.0.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:87:18:b5:30:c4:14:df:46:aa:ca:ba:a3:b0:78:32:be:c4:23:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F18830EE57CFAF9A0DC6E60307843318EFBE007E
Validity
Not Before: Oct 23 17:44:12 2025 GMT
Not After : Oct 22 17:49:12 2026 GMT
Subject: CN=AC0C3AB9534872D44450163B4A875626E9288A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:7f:05:f3:b1:64:78:04:2b:f8:77:ec:dd:
4f:46:18:5b:5f:12:38:12:9f:ec:0e:7f:fb:69:c9:
8a:34:3f:64:d7:7a:cb:57:68:d3:65:7b:02:7e:4a:
1e:ac:ec:6b:e5:e2:20:7e:0e:b1:0a:09:f2:0d:29:
e7:6c:db:88:69:52:98:e5:eb:5f:37:4c:fd:70:19:
08:9d:50:dc:a7:9e:38:e8:c3:d4:8f:d8:0c:89:5d:
a1:28:0e:e6:64:2f:94:21:3c:6a:d9:42:4b:c6:32:
3d:f1:c6:f8:a1:e9:7d:cd:e4:2a:60:37:c4:7f:54:
7d:89:5f:8d:14:f0:df:66:8d:26:5e:5b:ba:61:1f:
d0:7c:97:ae:24:a2:e4:81:5e:87:1f:35:f4:06:c8:
f7:1c:ee:0b:0d:a9:2d:67:2c:78:44:d2:26:ed:2a:
f3:4b:f8:01:55:81:61:e8:30:69:34:3f:65:97:83:
27:16:4b:b3:e0:8e:07:dd:96:6e:f0:9e:bf:59:ed:
f7:7c:49:73:08:b5:f0:7d:cc:ff:0f:63:fe:2f:a7:
b1:e6:aa:0f:1a:a8:8a:d1:dd:b1:8e:0c:3a:e0:bd:
00:3a:9e:33:71:ac:88:82:0a:31:09:12:a7:a1:12:
72:25:b7:9f:60:76:fc:7a:f3:16:e5:73:ca:71:24:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:3A:B9:53:48:72:D4:44:50:16:3B:4A:87:56:26:E9:28:8A:0F
X509v3 Authority Key Identifier:
keyid:F1:88:30:EE:57:CF:AF:9A:0D:C6:E6:03:07:84:33:18:EF:BE:00:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/F18830EE57CFAF9A0DC6E60307843318EFBE007E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F18830EE57CFAF9A0DC6E60307843318EFBE007E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e302e302f32332d3234203d3e20323635323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.0.0/23
Signature Algorithm: sha256WithRSAEncryption
19:fa:3f:e4:d2:df:c4:98:70:ee:dd:e5:b0:c4:73:17:34:67:
af:ba:ec:c0:5b:e1:60:e2:6c:c6:00:e8:b4:52:4f:4d:9d:2f:
98:94:af:c5:93:12:c5:ea:10:36:4a:7d:15:51:01:33:74:f6:
1d:ad:23:e2:7b:b7:30:56:58:31:77:a7:e7:01:b5:36:f0:01:
c1:18:03:47:84:2d:a6:4e:5d:ec:2c:12:47:7f:4d:8c:a9:d3:
93:da:a6:1b:9d:b2:c0:07:11:b5:98:9f:40:a9:93:e8:b9:be:
0c:dd:7b:64:d6:4d:20:96:9b:7d:fa:1f:9e:76:7b:83:1e:d6:
24:d8:d4:ec:78:9c:09:2e:2b:ca:2a:d5:8d:61:83:89:09:dd:
81:e6:86:18:8c:62:69:52:b8:49:94:cb:93:5d:bb:92:7e:e3:
20:e6:92:80:43:0d:72:f9:23:dd:ba:10:73:f8:a2:14:73:31:
4c:fa:2e:5d:66:b2:3f:31:eb:24:8d:13:d4:52:26:92:5b:20:
2c:a4:99:75:42:c9:c8:52:cb:13:ba:66:83:bd:9d:d5:26:5e:
49:d1:06:e4:0d:ee:07:96:ec:b8:10:20:06:ba:87:5e:70:75:
dd:72:a9:19:c1:a3:7a:d4:2e:16:8e:0b:80:82:0b:0d:e9:50:
9d:de:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:39:59 2025 by rpki-client