Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132362e302f32332d3233203d3e20323730373333.roa
File: 3138392e382e3132362e302f32332d3233203d3e20323730373333.roa (raw, json)
Hash identifier: 3sbpdY1h1W2P9uvYuM8OSx0GDLH9KDJkpNPxyBjxQQc=
Subject key identifier: 72:3D:79:25:C9:09:E2:F4:14:69:05:D3:AA:78:D8:42:23:6C:1A:61
Certificate issuer: /CN=6742A563CD3A144A032A9E5F2294DE09DED571E6
Certificate serial: 291F9F0556281D406D0E4B9749209C28E959802D
Authority key identifier: 67:42:A5:63:CD:3A:14:4A:03:2A:9E:5F:22:94:DE:09:DE:D5:71:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6742A563CD3A144A032A9E5F2294DE09DED571E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132362e302f32332d3233203d3e20323730373333.roa
Signing time: Mon 22 Sep 2025 19:37:01 +0000
ROA not before: Mon 22 Sep 2025 19:32:01 +0000
ROA not after: Mon 21 Sep 2026 19:37:01 +0000
asID: 270733
IP address blocks: 189.8.126.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1f:9f:05:56:28:1d:40:6d:0e:4b:97:49:20:9c:28:e9:59:80:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6742A563CD3A144A032A9E5F2294DE09DED571E6
Validity
Not Before: Sep 22 19:32:01 2025 GMT
Not After : Sep 21 19:37:01 2026 GMT
Subject: CN=723D7925C909E2F4146905D3AA78D842236C1A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:36:1d:42:62:98:7d:0a:0d:55:41:88:14:
50:76:11:0e:8c:14:02:f5:3f:9b:e1:63:db:3d:e0:
09:58:fb:bf:d9:0e:50:dd:55:21:a1:34:be:38:c7:
b5:92:a6:1f:f1:49:53:2c:78:0d:d0:55:ce:66:1c:
80:a3:43:82:ac:de:3a:3b:e7:47:fb:cc:62:42:6e:
d9:da:23:b7:f6:58:6b:5c:b4:f8:75:90:9c:2f:8a:
5c:67:9d:67:8d:ff:f1:32:2c:f8:ce:6a:f1:7d:fd:
08:aa:83:96:db:df:99:1d:e9:30:ca:7d:04:cb:71:
e6:e2:fb:cd:ca:f9:57:19:a4:05:a4:99:9b:ac:e3:
a1:98:9f:98:d1:bd:32:57:f1:80:08:97:b5:66:3f:
21:a3:fe:b7:09:cf:02:11:fc:53:bb:36:68:f7:68:
48:5b:50:30:47:cb:7d:dd:81:c6:73:b8:fa:17:a6:
d0:6d:87:0f:09:72:40:b3:d4:56:b5:85:15:d9:75:
1c:6c:32:fc:07:21:0b:aa:39:39:4b:07:c6:39:4c:
a9:d1:6f:e3:cd:52:b8:93:a8:b0:c7:d8:02:87:2c:
1e:de:3a:73:06:b4:dd:79:97:e5:10:46:65:03:dd:
05:d9:dd:5b:50:ca:41:a8:ae:9d:da:1d:a8:df:94:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:79:25:C9:09:E2:F4:14:69:05:D3:AA:78:D8:42:23:6C:1A:61
X509v3 Authority Key Identifier:
keyid:67:42:A5:63:CD:3A:14:4A:03:2A:9E:5F:22:94:DE:09:DE:D5:71:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/6742A563CD3A144A032A9E5F2294DE09DED571E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6742A563CD3A144A032A9E5F2294DE09DED571E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132362e302f32332d3233203d3e20323730373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.8.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:64:dd:c1:1f:69:50:f3:b7:2d:3c:ef:dc:ce:91:e4:1c:f0:
fa:5a:1a:05:b3:37:c8:a1:2f:2e:72:c5:ab:c8:8b:7d:bf:81:
02:18:5a:57:75:88:2c:53:19:96:ca:67:01:6b:7c:44:92:a7:
37:a6:bc:53:a3:25:c8:53:70:3a:d5:6e:5e:ba:5f:36:db:9a:
72:ec:90:a6:cb:05:fa:45:bc:ab:6f:76:d3:69:10:b3:39:8c:
f0:aa:02:b0:fe:02:36:8e:85:f6:a9:0a:bb:12:b0:49:36:17:
86:c5:65:78:c3:5f:b1:90:fb:88:e5:44:b1:78:2f:25:f8:00:
b2:9f:eb:05:2e:75:ce:2a:f5:0c:6d:8b:8d:25:5f:14:f7:88:
d1:c7:16:9c:9d:7c:9f:44:ee:20:23:99:fc:8d:ec:d1:41:0e:
80:f9:de:94:f6:6a:d1:1c:d7:18:fd:dc:00:bf:02:c2:9c:2d:
de:93:0b:e3:be:57:0a:4d:e1:ed:eb:02:33:47:21:9f:c3:58:
86:9d:71:6b:07:bf:db:15:48:b9:47:90:09:4f:58:1d:18:a0:
10:f5:81:69:4a:93:9d:08:19:1f:e0:87:67:32:f3:c6:d9:55:
e1:18:e4:c7:c0:96:04:e3:f9:28:33:56:76:d5:0b:ab:1d:3e:
9b:4f:df:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:45 2025 by rpki-client