Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/3136382e3132312e32302e302f32322d3234203d3e20323733373239.roa
File: 3136382e3132312e32302e302f32322d3234203d3e20323733373239.roa (raw, json)
Hash identifier: dPCuDTgtpXDzzEBaPdDOJCV4MleztpgaiDAXHwlCvbE=
Subject key identifier: 8B:E6:13:56:B4:12:20:DE:B1:D2:8E:43:7F:4C:B9:AA:03:9D:75:43
Certificate issuer: /CN=D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589
Certificate serial: 5DD464BAC90CEA01087591BB2D428E52CAC5534B
Authority key identifier: D2:7F:87:B2:2A:2B:05:E2:42:8B:D5:B1:D2:E1:D1:5A:D4:1E:F5:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.cer
Subject info access: rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/3136382e3132312e32302e302f32322d3234203d3e20323733373239.roa
Signing time: Wed 18 Jun 2025 13:45:26 +0000
ROA not before: Wed 18 Jun 2025 13:40:26 +0000
ROA not after: Wed 17 Jun 2026 13:45:26 +0000
asID: 273729
IP address blocks: 168.121.20.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d4:64:ba:c9:0c:ea:01:08:75:91:bb:2d:42:8e:52:ca:c5:53:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589
Validity
Not Before: Jun 18 13:40:26 2025 GMT
Not After : Jun 17 13:45:26 2026 GMT
Subject: CN=8BE61356B41220DEB1D28E437F4CB9AA039D7543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:c4:db:92:8d:61:73:f2:cd:bd:7d:d5:21:
72:f4:b9:58:e2:ab:4b:09:e4:e4:ed:b9:de:88:5d:
a8:9e:e9:47:cb:16:9a:95:89:f4:26:6e:ac:f8:8c:
46:6e:e3:44:fc:8c:81:32:4f:46:15:05:70:1f:d0:
2e:09:69:0a:ff:44:06:68:6c:db:98:75:1d:87:1f:
9e:74:94:5d:00:32:54:7f:ee:45:ea:43:70:b9:c5:
0a:7b:56:7f:70:77:38:2b:b3:0e:64:36:66:d8:aa:
62:28:3d:8b:84:db:fa:93:b9:6b:84:23:26:cf:a8:
30:34:8b:1f:6c:bb:72:ef:26:92:fb:09:02:4c:2a:
c0:cf:df:89:c0:dd:54:3e:fe:b8:2a:5b:b6:e8:e2:
52:31:3d:d7:0f:c6:db:3d:c4:dd:37:eb:09:f9:52:
f4:57:83:04:a0:8a:ff:cd:5e:ae:41:f7:75:99:41:
de:ce:6b:06:bf:6b:ac:8d:0f:47:6e:a9:09:b5:b3:
3c:97:cc:18:2e:2e:16:66:3f:58:05:d6:39:09:83:
c6:12:37:85:61:05:f9:6b:dc:c2:f2:6d:34:f6:10:
d3:5d:4a:ad:99:5d:b2:00:8d:79:31:18:71:0d:80:
42:74:89:57:a2:14:5c:ff:85:f1:76:71:e5:6f:ec:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:13:56:B4:12:20:DE:B1:D2:8E:43:7F:4C:B9:AA:03:9D:75:43
X509v3 Authority Key Identifier:
keyid:D2:7F:87:B2:2A:2B:05:E2:42:8B:D5:B1:D2:E1:D1:5A:D4:1E:F5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/3136382e3132312e32302e302f32322d3234203d3e20323733373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.20.0/22
Signature Algorithm: sha256WithRSAEncryption
27:37:ad:f4:11:20:3f:cb:b5:0b:1c:37:ce:d6:c8:35:e5:32:
7c:b8:ea:07:09:32:05:82:76:af:55:46:ed:ee:4a:fd:c0:a7:
a0:fe:95:01:36:a0:50:8c:47:d3:e6:37:7f:3b:1e:b6:ce:be:
35:c4:31:d5:37:b4:3c:3a:66:ab:44:6f:98:ab:2c:a2:98:07:
d6:ac:fd:c0:51:3e:34:b0:7e:60:7b:c3:05:fc:37:6f:cd:92:
d6:f6:a2:d8:09:92:28:bd:03:2c:cc:fb:1f:a7:95:a3:d2:a9:
1d:c5:49:73:7a:00:70:ef:23:b0:fc:d7:fd:60:55:92:29:c2:
da:65:82:34:05:3e:e8:87:5c:9b:cf:b8:ad:4a:7b:36:8a:23:
1d:d4:a7:28:9a:cb:7d:fd:d0:40:6c:ae:2b:cb:dc:f9:ab:1e:
67:b6:bf:56:4a:93:80:2d:df:66:b0:d9:0b:cd:84:43:04:8b:
66:7c:dd:a1:7a:36:12:69:fa:59:3d:1d:cd:67:7e:01:c7:5d:
3e:70:d3:4a:1e:11:a7:51:73:38:32:f9:4b:b9:74:f8:56:32:
f8:ad:87:6b:68:91:f4:64:6a:a4:03:7b:bf:83:d0:64:48:40:
f2:3f:c4:ca:fb:84:0f:fa:64:a3:9a:78:c8:97:4c:f9:d0:e0:
73:86:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:56:58 2025 by rpki-client