Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32322d3232203d3e203233303734.roa
File: 3136342e38352e38302e302f32322d3232203d3e203233303734.roa (raw, json)
Hash identifier: Fgo+vW+mft7S3y2/ipzeFmj5JRgq4NTtUSBdFbk+Rcg=
Subject key identifier: E1:AA:60:79:3E:19:B3:8B:5A:46:B3:74:12:96:2F:7C:F7:A6:3C:DE
Certificate issuer: /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial: 6F45239E912CD1F75348E594BA3C1183B537E419
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32322d3232203d3e203233303734.roa
Signing time: Tue 22 Jul 2025 14:54:04 +0000
ROA not before: Tue 22 Jul 2025 14:49:04 +0000
ROA not after: Tue 21 Jul 2026 14:54:04 +0000
asID: 23074
IP address blocks: 164.85.80.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:45:23:9e:91:2c:d1:f7:53:48:e5:94:ba:3c:11:83:b5:37:e4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Validity
Not Before: Jul 22 14:49:04 2025 GMT
Not After : Jul 21 14:54:04 2026 GMT
Subject: CN=E1AA60793E19B38B5A46B37412962F7CF7A63CDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:13:fb:69:f3:05:99:dd:93:ae:fa:b8:cd:
5a:bd:37:9a:52:4b:dd:1b:ed:bb:c8:82:f5:75:0d:
31:d4:ca:50:6b:86:47:00:e3:82:53:96:f1:6a:1b:
ab:94:6d:4d:c0:59:08:7d:5c:3f:88:44:7b:07:72:
41:25:49:98:e9:cd:6a:77:1f:3d:6d:bf:cb:63:d9:
88:fe:bd:00:69:09:6f:6d:0f:e3:ad:c8:71:32:22:
1a:21:39:cd:53:2a:67:0b:ed:59:44:01:59:87:3e:
14:e8:98:9e:54:be:be:86:c8:3a:8f:dd:61:d1:c3:
22:d2:a6:4d:83:97:bd:27:c0:84:ab:e6:74:8c:fb:
b7:d8:18:34:99:96:35:d7:5b:02:54:fd:d9:0f:2a:
aa:e9:31:71:1e:2c:7c:60:e5:fc:44:01:99:7d:ec:
80:cb:f0:08:eb:d9:df:9e:85:ca:5e:00:91:5a:12:
92:f1:e6:d0:94:5f:bb:da:26:d6:a0:14:7d:0b:59:
aa:9c:23:45:40:ae:72:96:f4:02:00:c2:4a:5c:d9:
20:26:ce:e0:52:ae:e0:a6:ba:a2:2f:27:42:c1:99:
ee:c1:16:8b:6b:74:be:df:06:8f:f8:bb:1f:53:68:
df:69:51:27:fd:33:74:14:ee:04:bf:5b:08:f6:73:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:60:79:3E:19:B3:8B:5A:46:B3:74:12:96:2F:7C:F7:A6:3C:DE
X509v3 Authority Key Identifier:
keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38302e302f32322d3232203d3e203233303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.85.80.0/22
Signature Algorithm: sha256WithRSAEncryption
10:8e:33:87:b0:ee:37:95:31:98:ed:f3:48:13:6e:fd:03:46:
0c:bf:63:70:19:52:49:d0:28:65:2d:a1:9f:76:94:82:4d:07:
cc:77:53:92:8b:a9:6b:90:32:18:6b:5d:dc:a5:41:34:41:07:
e0:ce:81:02:c4:f5:15:ad:59:19:45:51:73:5c:e9:11:6e:fc:
cf:4f:66:26:a0:8f:82:2c:5e:9c:b0:18:8e:2e:45:44:ce:de:
77:4a:99:cc:e6:63:d3:15:62:9d:e5:8e:a4:dc:6f:a2:73:8a:
dc:cd:29:2a:42:51:34:e4:0b:f5:e7:f6:ec:f7:93:8c:8b:42:
1e:e3:3f:fe:d5:b6:d7:11:50:10:10:a7:5d:03:67:bd:1c:9f:
08:23:59:49:ab:0b:69:29:a0:8c:1e:ca:de:e8:07:83:e0:03:
26:28:99:ea:fb:d4:e5:ba:c8:6b:0b:ef:eb:33:78:8b:fd:b0:
74:ea:7c:4e:14:4e:4b:f3:f9:82:a6:56:28:c8:07:cd:53:3b:
ce:f4:02:d9:f8:bc:fa:43:48:79:b3:57:e7:34:ff:e9:b8:b8:
f8:4a:a6:ef:76:50:d9:8f:ca:a3:f2:33:17:dd:70:02:73:80:
71:08:a3:9b:13:dd:1e:0f:f8:10:d8:e9:71:3c:ce:d3:fa:0a:
b8:f8:71:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:51:59 2025 by rpki-client