Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
File: 3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier: qLx4wxadjiGUy2TDR5uvvpBhOcJA2uGwDjFEXNP+1rU=
Subject key identifier: 82:A8:54:4C:51:BC:39:1A:E8:E9:93:AA:56:51:A3:CA:8D:AB:3D:59
Certificate issuer: /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial: 7D84C1BCBA7848DEB9F15E4E5C7633F926B37388
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
Signing time: Sat 05 Jul 2025 20:30:21 +0000
ROA not before: Sat 05 Jul 2025 20:25:21 +0000
ROA not after: Sat 04 Jul 2026 20:30:21 +0000
asID: 22177
IP address blocks: 200.162.128.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:84:c1:bc:ba:78:48:de:b9:f1:5e:4e:5c:76:33:f9:26:b3:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Validity
Not Before: Jul 5 20:25:21 2025 GMT
Not After : Jul 4 20:30:21 2026 GMT
Subject: CN=82A8544C51BC391AE8E993AA5651A3CA8DAB3D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:7b:3c:f2:43:e7:7a:5d:46:0c:ad:df:0f:
7f:eb:53:4c:90:f2:3e:19:ed:2e:5a:2d:31:ba:fa:
cc:5d:b6:f7:dd:11:30:46:ad:44:73:41:46:b0:06:
72:f8:ef:23:30:0a:8d:ba:b3:d9:fd:c6:58:19:92:
aa:6c:b5:03:4f:af:cd:a1:8f:9e:a4:cc:64:9a:b8:
99:4a:25:da:ae:90:63:59:db:f6:cd:be:be:75:04:
7a:d7:d2:07:76:38:42:e9:fb:17:dc:f6:f5:41:04:
36:c7:9c:68:ac:f1:a7:31:62:e1:17:e1:d0:01:70:
7a:57:0f:6e:8a:9a:75:21:ad:56:c8:33:ec:c8:a1:
05:ad:de:1b:10:6c:4a:48:c7:a1:fa:71:b4:13:0e:
a2:2a:9a:1c:87:3b:19:ed:69:cc:d1:b1:e2:81:ab:
f0:92:e5:e6:e4:49:09:d6:83:98:5e:e3:d5:2c:34:
5b:8c:5c:19:d5:06:ff:4e:18:53:71:70:50:89:cb:
72:51:b5:24:df:71:b1:70:b8:41:0a:d7:71:99:c8:
9d:45:93:0e:32:9d:2d:81:b7:cf:72:c7:75:9d:dd:
09:5b:b3:45:b5:f4:7d:7b:9d:cb:95:90:2c:b4:1f:
73:b8:dc:96:68:d6:fd:1f:ab:da:bf:0d:bb:eb:2b:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A8:54:4C:51:BC:39:1A:E8:E9:93:AA:56:51:A3:CA:8D:AB:3D:59
X509v3 Authority Key Identifier:
keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.162.128.0/22
Signature Algorithm: sha256WithRSAEncryption
42:8e:56:95:72:c6:00:c8:f8:d5:ad:11:92:73:d6:69:55:6a:
6f:12:7e:e6:80:ca:ba:7a:b3:db:af:49:92:c9:bb:d5:12:4f:
33:eb:4b:00:c4:b9:ba:e8:bd:8f:6b:bc:57:19:d8:5a:49:ff:
96:c3:b1:64:4d:c4:36:cf:16:9a:b3:7b:99:9c:cd:c6:82:e9:
e5:24:ab:91:7d:a0:93:c6:b2:92:17:3f:df:33:64:53:52:af:
c8:6d:80:80:bc:ca:ee:f6:67:b8:7e:fe:79:4b:d2:8d:c6:ba:
35:c5:34:d0:e8:30:bb:af:2a:41:3b:2a:42:e6:d7:7a:ed:5c:
f4:66:15:06:5b:6c:7e:48:e7:57:d0:54:b6:84:66:70:49:cc:
f7:ab:62:ab:f7:f1:37:b2:4a:b3:a2:5b:74:b9:2f:71:ad:34:
f2:3d:45:b9:be:bd:fd:52:fb:77:51:89:b7:a2:40:76:7d:b8:
fb:2e:57:ad:77:a1:5d:cf:41:4e:cd:00:07:45:f4:d8:90:9b:
52:ca:f3:a7:76:39:2c:7d:bc:8e:3f:41:9b:60:71:e8:09:01:
dc:32:91:9a:1c:9c:c4:81:d5:07:0f:6f:14:e6:9c:b5:0d:c5:
1e:2c:c7:0e:6b:07:77:c2:8b:63:0d:41:56:e6:ed:1c:ad:15:
40:2c:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:21:31 2025 by rpki-client