Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa
File: 3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa (raw, json)
Hash identifier: Wy4Ry1ZA9FPvRYH89gfnwxpCe6RaloAIsmjVnStQvQs=
Subject key identifier: A2:18:16:DE:D7:AF:88:30:E3:6F:35:C2:44:C4:62:1E:8B:18:01:A0
Certificate issuer: /CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5
Certificate serial: 54D204D36438DA9E66FB46A2EA1F563EC2F1F773
Authority key identifier: F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa
Signing time: Fri 22 Aug 2025 18:39:11 +0000
ROA not before: Fri 22 Aug 2025 18:34:11 +0000
ROA not after: Fri 21 Aug 2026 18:39:11 +0000
asID: 264403
IP address blocks: 131.161.250.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d2:04:d3:64:38:da:9e:66:fb:46:a2:ea:1f:56:3e:c2:f1:f7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5
Validity
Not Before: Aug 22 18:34:11 2025 GMT
Not After : Aug 21 18:39:11 2026 GMT
Subject: CN=A21816DED7AF8830E36F35C244C4621E8B1801A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:22:4f:0d:ad:4e:eb:72:33:c8:b4:04:68:
df:26:c5:9f:04:9f:d2:12:1a:75:49:9a:f0:ab:00:
f3:f2:e4:f9:30:f9:d5:ed:5a:4d:df:b5:6a:6b:8b:
33:21:0d:14:ba:bb:20:93:5b:bd:78:22:a1:4c:b2:
dd:7b:58:c9:ec:3c:da:cd:a9:70:2a:b7:93:7b:ad:
f6:26:a5:e1:d5:83:e5:43:63:3d:55:3f:55:a0:a2:
5f:90:41:f7:de:49:5f:2a:10:13:c8:11:75:a9:32:
17:b1:33:49:e3:06:e5:d9:bc:47:93:ee:fd:64:0b:
c6:fd:5f:e1:ff:66:5d:69:1b:0a:d8:86:71:42:ed:
68:1b:d7:7b:a3:60:f2:e1:03:ab:99:75:01:da:07:
53:c5:75:7c:a1:df:a1:a5:cb:c7:e7:fb:1f:f6:20:
15:12:22:7c:7c:30:07:90:61:39:d9:e2:98:ab:95:
fc:61:21:af:0a:0b:10:8e:67:12:53:be:f7:83:9d:
e5:1b:86:b1:a5:6d:4a:4d:ab:fc:50:39:17:04:16:
33:70:75:9e:c0:a8:bc:32:1d:6a:70:cb:6c:95:28:
48:9e:0d:66:c5:78:3d:9e:24:54:1e:bd:29:3d:aa:
bb:4b:e3:17:5d:6c:84:15:4d:95:7e:34:ac:d9:87:
a7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:16:DE:D7:AF:88:30:E3:6F:35:C2:44:C4:62:1E:8B:18:01:A0
X509v3 Authority Key Identifier:
keyid:F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7c:5e:4f:04:de:6e:9b:45:9b:2f:b6:cc:a7:d3:2b:91:df:
b4:81:6f:f3:ca:6e:ba:3f:08:2d:c4:bb:fc:00:6b:fb:61:8a:
74:65:a3:72:5c:10:06:c7:86:fd:c3:9f:0a:59:4b:b1:13:28:
63:75:b9:88:f2:ba:1d:83:bd:71:5e:b2:b7:3e:34:89:3b:29:
4a:c9:e8:2d:13:10:93:f9:57:40:97:11:20:d3:86:4b:3f:43:
34:d7:11:09:ba:43:a8:a9:f4:4e:9c:f1:6c:1c:e5:d9:e1:d5:
ea:73:0e:e3:f5:5a:ad:e0:0c:dc:6d:44:14:f5:bf:93:d6:c7:
e8:3f:c0:a8:15:46:39:9d:29:1e:49:35:ff:43:0e:87:32:98:
11:68:07:c8:22:6f:47:e4:89:2e:81:6d:02:3f:dc:26:59:24:
bc:e2:b0:46:4c:dc:33:6f:74:3a:9a:78:50:18:ad:e3:74:be:
a0:d1:61:66:33:56:5d:5c:81:c2:16:22:9a:b7:86:d0:9c:15:
74:e7:11:61:2e:48:27:74:cf:34:f9:33:43:94:f8:e9:85:15:
93:23:29:9f:2c:53:80:77:19:03:8f:11:69:00:ab:36:c2:03:
26:56:16:5a:ea:05:4c:8d:8d:45:7d:fc:9b:db:61:36:6b:7e:
e1:ab:52:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:11 2025 by rpki-client