Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
File: 3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa (raw, json)
Hash identifier: QaEwq9CjYPQg9XB/xC9mJEcrxzexB7rgdQeR7cGgREo=
Subject key identifier: 4F:74:D5:36:09:0E:3C:6C:99:9B:5B:21:84:3A:B4:E6:F3:A2:7D:00
Certificate issuer: /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Certificate serial: 615CD5F2A1F62DF6BA3E82F9289350A21E7B65AF
Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
Signing time: Tue 04 Nov 2025 12:21:22 +0000
ROA not before: Tue 04 Nov 2025 12:16:22 +0000
ROA not after: Tue 03 Nov 2026 12:21:22 +0000
asID: 265080
IP address blocks: 170.233.123.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5c:d5:f2:a1:f6:2d:f6:ba:3e:82:f9:28:93:50:a2:1e:7b:65:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Validity
Not Before: Nov 4 12:16:22 2025 GMT
Not After : Nov 3 12:21:22 2026 GMT
Subject: CN=4F74D536090E3C6C999B5B21843AB4E6F3A27D00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:29:39:af:99:6d:87:79:1d:b4:da:51:60:
8b:8f:de:5b:ee:5a:30:ee:f2:53:3e:9b:86:e4:14:
09:5b:f0:6d:91:3e:6f:0c:8b:7b:b1:c0:da:a2:2b:
db:6e:06:ad:07:f3:d6:ce:b2:74:80:5a:f1:08:ed:
dc:c6:45:da:17:1d:c7:e5:5e:25:a5:d3:48:82:4f:
68:c5:7c:b8:29:b0:15:59:b4:0f:8a:48:46:7e:f8:
6b:2c:78:99:10:87:96:29:0d:ea:38:1b:fe:7d:7f:
67:62:84:66:03:56:4b:13:fa:24:ff:a8:e4:66:65:
c3:7b:5a:c9:82:6a:7d:2c:51:7b:89:d8:12:4f:3e:
ef:73:96:65:7c:2f:89:2a:8d:49:58:10:a9:7d:36:
6c:d7:69:22:e5:dc:91:5a:bb:8e:f3:e8:cc:6a:ef:
3b:e0:bb:59:93:9f:eb:06:32:69:95:2a:57:b0:f7:
e7:4f:ba:e7:50:39:a9:4d:0c:53:7c:d8:76:67:0a:
31:39:fb:b4:94:11:f8:4d:cd:c1:9f:65:7e:1d:67:
0e:5f:51:5e:49:5b:b0:d2:10:90:b7:c7:3b:7c:3f:
23:44:5c:46:24:73:d3:fb:0d:6b:cb:12:71:48:5c:
35:47:8c:c0:eb:3e:b3:25:7a:e6:a5:01:b8:5e:cb:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:74:D5:36:09:0E:3C:6C:99:9B:5B:21:84:3A:B4:E6:F3:A2:7D:00
X509v3 Authority Key Identifier:
keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/3137302e3233332e3132332e302f32342d3234203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.123.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f6:03:c3:1c:8c:b9:71:07:f1:72:e2:6b:5d:87:0b:51:e6:
f7:24:4c:b7:93:f7:92:c2:ec:64:d9:02:30:0c:dd:70:97:d1:
96:d5:c7:70:8d:22:4e:b2:f5:92:a8:5a:ae:88:c7:44:76:a2:
5f:49:db:29:7c:20:3b:c0:d6:ed:e6:6d:b0:82:0b:19:f4:58:
b3:ff:3f:31:3c:6e:16:9c:db:b1:a0:ed:36:90:c5:90:3c:94:
1e:72:73:10:77:e0:47:67:59:60:12:38:7e:5e:3d:ba:0d:10:
ec:01:4c:fb:0f:b9:45:df:73:db:e6:6f:53:fd:91:62:9c:ed:
33:e5:e5:df:19:f0:e7:dc:88:47:1a:98:3b:f8:a1:05:ff:c6:
41:a6:90:99:68:6a:78:4c:c8:db:ca:ba:7b:1c:92:d9:89:1d:
42:33:af:da:ce:05:38:54:6c:02:2c:02:28:5a:aa:db:f6:5a:
9d:be:20:f2:88:ce:0f:18:15:fd:3d:37:da:7d:45:b0:a4:c1:
07:89:07:98:05:d5:c0:d8:07:4b:43:42:ed:20:1c:de:48:7f:
72:ae:3b:0e:a4:19:7d:8c:8b:1c:28:09:5c:48:05:58:b1:41:
de:dc:29:4d:d2:ed:2b:7a:5b:38:33:84:bc:e0:a1:56:b9:0b:
75:db:d6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:32:03 2025 by rpki-client