Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32322d3232203d3e203233303734.roa
File: 3136342e38352e38342e302f32322d3232203d3e203233303734.roa (raw, json)
Hash identifier: F2x0XYkkOgCml17jIjeKsV7dxxJbDTmlp2/mJjyTLJE=
Subject key identifier: EB:9A:93:D8:C2:DC:D2:B4:DD:ED:F0:B1:44:9C:1C:7A:F0:76:F3:65
Certificate issuer: /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial: 62D721EA2B0460F3B65ADA0ACE85AD8012138C43
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32322d3232203d3e203233303734.roa
Signing time: Tue 22 Jul 2025 14:54:15 +0000
ROA not before: Tue 22 Jul 2025 14:49:15 +0000
ROA not after: Tue 21 Jul 2026 14:54:15 +0000
asID: 23074
IP address blocks: 164.85.84.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d7:21:ea:2b:04:60:f3:b6:5a:da:0a:ce:85:ad:80:12:13:8c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Validity
Not Before: Jul 22 14:49:15 2025 GMT
Not After : Jul 21 14:54:15 2026 GMT
Subject: CN=EB9A93D8C2DCD2B4DDEDF0B1449C1C7AF076F365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:77:d1:a2:4e:5b:31:0b:79:39:16:97:50:
d7:00:7f:bb:07:b5:6e:38:ae:c3:4d:fc:8e:1d:12:
e8:b0:bf:64:35:e9:40:ee:e9:99:61:d9:37:77:89:
a3:b4:a3:df:c6:56:ba:0b:68:24:37:6c:1b:0d:0c:
01:a8:2d:4c:6a:1b:1b:a1:27:d1:02:9d:44:1e:70:
6b:7c:44:da:39:d9:31:21:b7:8c:f9:a6:2e:f0:7f:
f1:d0:b5:d8:e3:0a:95:29:cc:2a:22:e7:c5:7a:d2:
53:16:3c:00:a3:93:09:e3:3f:0e:1e:ca:6b:a7:92:
6d:65:38:54:4d:9c:b0:d6:3d:c0:0c:7b:f3:9c:87:
bc:f8:f8:c6:d2:30:7e:af:7f:be:26:62:4a:67:d7:
b1:14:a8:ca:f0:d8:20:c5:1f:41:09:68:e0:6a:4d:
c3:13:03:1f:3d:73:43:61:db:94:38:cd:ac:8d:fa:
e6:42:fe:c8:b6:3c:84:14:dd:da:66:27:1d:a6:a3:
32:7e:00:3a:4a:47:bd:03:e3:57:22:a4:22:f9:f3:
8d:c0:67:bd:22:91:3d:32:7d:a8:1e:82:39:58:c2:
e2:73:fe:d8:9c:a4:c4:16:f5:70:b1:4c:16:30:6e:
af:11:06:8b:78:30:de:8a:51:ca:6f:bb:d9:1a:94:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9A:93:D8:C2:DC:D2:B4:DD:ED:F0:B1:44:9C:1C:7A:F0:76:F3:65
X509v3 Authority Key Identifier:
keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3136342e38352e38342e302f32322d3232203d3e203233303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.85.84.0/22
Signature Algorithm: sha256WithRSAEncryption
86:7e:09:c0:0b:f9:1f:9f:cd:5b:51:00:b2:99:55:90:2f:53:
3f:d4:20:88:f1:d0:e9:b6:33:02:89:6e:a7:c4:7d:72:91:8d:
8c:45:76:e9:fc:aa:e3:e5:e2:3c:84:28:1d:b2:e2:1d:c3:df:
58:d1:64:8a:e0:b5:5f:55:c5:79:11:1f:79:83:28:e7:eb:e0:
8e:da:af:32:c1:be:21:d9:f8:b1:1a:d3:76:db:70:3f:e0:2a:
39:ee:c4:e6:e9:b1:b8:45:4a:a3:13:e7:78:54:71:eb:36:f0:
9c:89:02:fa:a6:c5:f9:21:fc:8c:31:54:b7:70:16:b8:12:1a:
b9:a0:bf:b4:49:17:6f:ac:bb:4a:3a:a2:34:3a:96:da:c5:30:
d2:1f:87:d7:2d:27:f8:5b:dc:90:d5:e6:b3:37:bf:ac:65:0c:
7a:51:be:6a:80:c9:03:6c:ea:a7:37:c9:25:49:9f:9d:54:3f:
6f:50:0f:e1:95:a2:7a:33:da:7c:39:28:b2:05:9b:ed:e7:ef:
64:65:fb:22:67:1d:22:db:98:ab:fc:e3:dd:cb:56:10:d2:5d:
b4:37:d1:cb:e6:47:f2:7c:7f:0e:91:08:9f:43:ef:a0:1c:42:
a6:45:69:d3:ae:52:4f:39:90:bf:fe:36:a1:5c:3f:e2:60:f9:
3b:76:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:51:58 2025 by rpki-client