Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136362e302f32342d3234203d3e20323633353431.roa
File: 3139312e352e3136362e302f32342d3234203d3e20323633353431.roa (raw, json)
Hash identifier: C3UC8vFLPVhgWYbY+Qs4JpI6tqJ1IXp2KxGTBJbOOtQ=
Subject key identifier: F7:DC:8D:DF:56:25:B9:93:1D:D7:27:21:1D:BA:C8:8C:07:D9:4A:92
Certificate issuer: /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial: 082E2D203244005E4688104AEC481AA64D9D4F
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136362e302f32342d3234203d3e20323633353431.roa
Signing time: Mon 04 Aug 2025 15:26:28 +0000
ROA not before: Mon 04 Aug 2025 15:21:28 +0000
ROA not after: Mon 03 Aug 2026 15:26:28 +0000
asID: 263541
IP address blocks: 191.5.166.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:2e:2d:20:32:44:00:5e:46:88:10:4a:ec:48:1a:a6:4d:9d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
Validity
Not Before: Aug 4 15:21:28 2025 GMT
Not After : Aug 3 15:26:28 2026 GMT
Subject: CN=F7DC8DDF5625B9931DD727211DBAC88C07D94A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:87:c5:5f:0b:7f:0f:7c:34:a4:70:67:4e:
78:8f:75:0c:5b:c5:40:f1:a5:a9:19:8f:94:af:d4:
ca:ea:ed:f9:96:8c:42:5a:69:4a:6f:02:13:c3:3d:
21:d7:42:31:3c:28:9c:5b:fe:11:a3:91:29:5a:d8:
b0:e3:ae:fa:d9:b6:3e:6c:88:f6:88:6a:1e:1e:42:
b2:2d:73:c2:50:22:0f:a1:a9:2f:e3:23:87:8d:2b:
48:31:ae:20:ab:48:3a:80:83:45:22:81:cc:f2:c2:
bc:fc:e2:96:c1:41:d6:fb:4b:3f:bb:b9:c6:61:ec:
80:c3:d6:0f:82:05:4c:25:af:c3:11:09:e0:fb:0d:
19:f6:bf:81:6c:f4:5b:d4:de:64:89:2d:9a:84:c0:
cd:90:2d:b3:34:b5:25:26:8d:47:af:df:bf:ed:f7:
f6:53:24:1f:c9:ce:b0:36:d5:9c:b8:e6:47:e2:1f:
83:e5:6d:21:59:a0:2f:14:f3:fd:25:2a:2e:1e:c1:
b2:2c:92:fe:d4:27:d2:25:69:e3:9f:33:95:0c:e7:
0e:d7:30:27:d7:06:00:27:69:d5:fb:a7:f3:21:22:
d8:70:90:bd:47:28:0a:ce:b5:3c:25:92:3b:ab:1d:
e1:5f:00:55:d4:57:03:a1:bd:53:36:86:4b:d5:68:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DC:8D:DF:56:25:B9:93:1D:D7:27:21:1D:BA:C8:8C:07:D9:4A:92
X509v3 Authority Key Identifier:
keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136362e302f32342d3234203d3e20323633353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.5.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a9:57:79:2c:69:94:1e:d4:9d:98:32:b1:1f:c4:fc:e9:f9:
15:34:3a:cf:de:c7:5a:b4:ee:64:29:90:7a:af:fd:64:01:09:
5d:51:d5:d2:c4:d1:07:2e:c3:04:3d:86:c4:bd:97:82:80:9f:
9a:f8:0d:27:65:a6:2f:f5:10:ab:f9:e8:84:0d:ed:15:c6:34:
de:79:91:89:97:7d:04:8a:af:8a:92:c0:d8:29:b3:44:dc:61:
8c:3f:b4:6b:14:6f:31:f3:1b:b3:cc:c7:6c:8f:d4:75:7b:4b:
80:71:0b:c8:30:2a:c5:a0:c8:64:0c:9d:9d:ff:77:18:87:a6:
71:3b:c8:8a:45:96:bb:b7:be:42:f0:3c:67:aa:b7:64:8f:ed:
e7:fd:1b:5b:e9:29:26:fb:6d:86:84:18:5f:71:f4:6f:a6:2f:
f1:ac:8d:6c:be:42:f6:eb:ad:44:26:2b:96:c8:a0:b5:47:e0:
30:b2:69:c0:11:6c:ba:70:7b:e5:6c:b3:e2:08:60:46:a7:5a:
50:97:26:be:56:13:2f:93:cd:7e:5f:7d:b4:e8:48:d2:24:ae:
f0:b8:06:0a:db:40:2d:81:1a:83:b4:43:23:32:ac:1d:74:21:
e4:a0:c2:6a:7b:01:e9:b8:4d:b1:e2:d1:a8:f8:52:78:be:bf:
7c:59:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:46:15 2025 by rpki-client