Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa
File: 3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier: UxFzZ8WfxRekPlsHdoXcpFmzdBByfdNKSoJ2Ksi0fUY=
Subject key identifier: 2D:33:51:FC:AB:5F:A1:34:3A:23:DB:7B:22:4D:72:95:53:8C:10:D9
Certificate issuer: /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial: 070E210369B741B219799E6F9D318A331751A3A8
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa
Signing time: Mon 09 Jun 2025 19:15:41 +0000
ROA not before: Mon 09 Jun 2025 19:10:41 +0000
ROA not after: Mon 08 Jun 2026 19:15:41 +0000
asID: 266433
IP address blocks: 168.194.40.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0e:21:03:69:b7:41:b2:19:79:9e:6f:9d:31:8a:33:17:51:a3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Validity
Not Before: Jun 9 19:10:41 2025 GMT
Not After : Jun 8 19:15:41 2026 GMT
Subject: CN=2D3351FCAB5FA1343A23DB7B224D7295538C10D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:9b:7d:30:da:6f:e3:5b:58:18:1b:08:ac:
77:32:b5:f3:7d:7e:e5:79:fa:e7:d2:95:64:6e:5a:
fd:db:bd:f4:5d:5d:46:cf:fd:ff:39:c9:90:d1:30:
d4:6e:21:8d:1e:da:74:6c:64:30:54:37:72:16:cf:
d0:88:43:bc:92:2f:9e:59:26:d8:41:c6:32:f5:7c:
78:4f:a4:c9:9d:3e:37:a6:51:05:94:37:4d:db:0d:
16:1e:91:3c:66:77:24:a7:17:e4:1c:5a:93:f4:da:
c0:c9:fe:44:5f:b9:a6:2a:b5:90:75:9a:3a:13:ba:
3e:44:4d:96:8b:b3:e5:45:9f:84:c7:b2:51:63:46:
93:75:4d:d4:98:61:3b:ee:7e:66:48:03:88:a8:43:
29:04:76:d8:00:65:de:12:a8:6b:e9:d7:24:75:70:
c1:8f:32:d6:ca:1f:70:b4:5f:18:4a:a9:4c:0f:28:
ec:e5:dc:66:4e:8a:c7:40:73:55:1b:5e:73:54:1f:
17:bc:7c:49:b2:10:17:a0:d2:1a:e5:94:46:bb:41:
98:99:27:aa:63:d2:6e:0b:3d:a9:f9:36:a0:37:99:
52:b1:25:a7:89:8d:c8:19:ef:f9:48:42:3a:aa:f2:
a4:36:e4:e7:2d:87:76:dc:c7:ec:54:bb:69:ec:c0:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:33:51:FC:AB:5F:A1:34:3A:23:DB:7B:22:4D:72:95:53:8C:10:D9
X509v3 Authority Key Identifier:
keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.40.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ff:b4:9b:e6:86:c3:57:1b:5c:c1:4b:15:32:43:b7:8e:fe:
ec:99:51:19:83:d9:82:b6:2b:05:c6:a7:ce:e3:99:de:89:fc:
e7:b5:f0:06:a2:45:58:07:71:7d:01:ab:9e:99:0e:76:3f:33:
2e:b8:63:ee:97:e8:91:11:b7:a6:cd:9f:7f:f6:73:5a:6d:39:
b9:ae:4a:3c:a6:f6:cb:9f:63:93:a5:c2:fe:a2:50:70:79:e3:
9c:5b:d5:1c:b1:d2:9a:e5:a8:72:ec:d4:23:13:c5:af:2b:02:
5c:ee:1e:53:3a:65:df:7f:26:d3:8f:71:f9:80:10:c4:e4:05:
78:6c:50:df:59:34:5c:28:e4:ba:14:61:0b:e7:88:2c:60:a6:
8d:53:02:86:fb:c0:a9:23:31:6d:22:22:01:f3:d7:84:38:96:
a7:a1:79:69:ff:7a:2b:7a:e7:27:3a:29:16:c7:f0:99:c9:a6:
ae:34:8e:0e:39:3d:76:69:6b:30:a4:b6:eb:ce:79:83:fb:1b:
50:b2:40:38:87:78:9f:16:51:40:ce:f0:41:1f:f9:67:d2:3c:
55:2c:30:55:fc:71:8b:79:42:36:96:eb:78:7d:e8:cc:0b:1f:
ea:02:21:21:61:34:5b:15:35:43:f3:14:b4:0e:03:3a:d8:16:
e9:27:24:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBw4hA2m3QbIZeZ5vnTGKMxdRo6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRCMEZBMTI0QjNCN0QxOTlFNkEwOTlGMDU3Nzc2MzFB
OUYyQzEwMjAeFw0yNTA2MDkxOTEwNDFaFw0yNjA2MDgxOTE1NDFaMDMxMTAvBgNV
BAMTKDJEMzM1MUZDQUI1RkExMzQzQTIzREI3QjIyNEQ3Mjk1NTM4QzEwRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfnpt9MNpv41tYGBsIrHcytfN9
fuV5+ufSlWRuWv3bvfRdXUbP/f85yZDRMNRuIY0e2nRsZDBUN3IWz9CIQ7ySL55Z
JthBxjL1fHhPpMmdPjemUQWUN03bDRYekTxmdySnF+QcWpP02sDJ/kRfuaYqtZB1
mjoTuj5ETZaLs+VFn4THslFjRpN1TdSYYTvufmZIA4ioQykEdtgAZd4SqGvp1yR1
cMGPMtbKH3C0XxhKqUwPKOzl3GZOisdAc1UbXnNUHxe8fEmyEBeg0hrllEa7QZiZ
J6pj0m4LPan5NqA3mVKxJaeJjcgZ7/lIQjqq8qQ25Octh3bcx+xUu2nswJrJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULTNR/KtfoTQ6I9t7Ik1ylVOMENkwHwYDVR0j
BBgwFoAU5LD6Eks7fRmeagmfBXd2ManywQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5
VWYvMC9FNEIwRkExMjRCM0I3RDE5OUU2QTA5OUYwNTc3NzYzMUE5RjJDMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QjBGQTEyNEIzQjdEMTk5
RTZBMDk5RjA1Nzc3NjMxQTlGMkMxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M4YjF0R05vcmpMNEpkQ0czM2czR29xV0dUbkJVN2JBN3lUVEJNeGVoOVVmLzAv
MzEzNjM4MmUzMTM5MzQyZTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKowigwDQYJKoZIhvcNAQELBQADggEBAH7/tJvm
hsNXG1zBSxUyQ7eO/uyZURmD2YK2KwXGp87jmd6J/Oe18AaiRVgHcX0Bq56ZDnY/
My64Y+6X6JERt6bNn3/2c1ptObmuSjym9sufY5Olwv6iUHB545xb1Ryx0prlqHLs
1CMTxa8rAlzuHlM6Zd9/JtOPcfmAEMTkBXhsUN9ZNFwo5LoUYQvniCxgpo1TAob7
wKkjMW0iIgHz14Q4lqeheWn/eit65yc6KRbH8JnJpq40jg45PXZpazCktuvOeYP7
G1CyQDiHeJ8WUUDO8EEf+WfSPFUsMFX8cYt5QjaW63h96MwLH+oCISFhNFsVNUPz
FLQOAzrYFuknJEg=
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:00:51 2025 by rpki-client