Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132362e302f32332d3332203d3e20323730373333.roa
File: 3138392e382e3132362e302f32332d3332203d3e20323730373333.roa (raw, json)
Hash identifier: qBpMnG2rB5Qzi5c3u7a79vWe6zfTJItv1Aq3zXbdDg4=
Subject key identifier: 9D:6C:D1:84:ED:65:43:7F:F5:AF:F8:CE:9A:31:77:BF:FF:8C:16:6E
Certificate issuer: /CN=6742A563CD3A144A032A9E5F2294DE09DED571E6
Certificate serial: 18E3B6B74EE532862F9FD0E9EC0FFB31766866CA
Authority key identifier: 67:42:A5:63:CD:3A:14:4A:03:2A:9E:5F:22:94:DE:09:DE:D5:71:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6742A563CD3A144A032A9E5F2294DE09DED571E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132362e302f32332d3332203d3e20323730373333.roa
Signing time: Mon 22 Sep 2025 19:38:09 +0000
ROA not before: Mon 22 Sep 2025 19:33:09 +0000
ROA not after: Mon 21 Sep 2026 19:38:09 +0000
asID: 270733
IP address blocks: 189.8.126.0/23 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e3:b6:b7:4e:e5:32:86:2f:9f:d0:e9:ec:0f:fb:31:76:68:66:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6742A563CD3A144A032A9E5F2294DE09DED571E6
Validity
Not Before: Sep 22 19:33:09 2025 GMT
Not After : Sep 21 19:38:09 2026 GMT
Subject: CN=9D6CD184ED65437FF5AFF8CE9A3177BFFF8C166E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:3a:dc:fd:ad:dd:e8:a0:62:c2:ac:51:f0:
aa:a6:39:8a:b5:fb:ed:10:09:3e:4e:6a:a5:a4:6d:
fd:2c:5c:59:c8:ea:85:79:15:03:07:7d:d8:39:1e:
1b:fe:8a:56:5c:0c:50:7a:f0:15:fc:ed:e0:e6:df:
92:58:2c:3b:63:bd:a9:00:51:fc:48:2c:73:b1:e0:
30:ec:09:50:fa:00:1f:30:d7:03:a6:be:52:26:dc:
fd:b8:36:69:4f:3a:d7:d2:92:13:f0:94:42:d5:d9:
2e:34:e5:d5:87:7d:41:5b:07:87:f5:a9:10:2d:68:
d2:dd:02:ce:32:aa:b6:fd:c6:ce:79:fc:ba:94:79:
d1:9e:72:23:a9:f7:25:09:f4:37:23:d1:5e:e9:18:
9b:83:19:00:c3:6c:e6:a7:4f:6d:5a:51:7b:83:06:
61:6a:a9:db:42:3d:af:a7:b6:21:6a:3f:e2:4b:76:
85:5c:c9:0f:a9:03:8a:5e:28:fc:6f:1e:cd:1c:4c:
f9:3a:8c:26:89:48:c0:60:9f:8a:d5:39:46:a3:cf:
da:65:22:5b:54:d6:99:55:65:23:c8:b8:a8:98:50:
ac:7c:bf:9b:2d:a6:c1:bb:65:a0:3b:4a:94:6a:51:
d1:85:72:07:56:b3:20:b3:3f:e8:b3:01:4b:8e:01:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6C:D1:84:ED:65:43:7F:F5:AF:F8:CE:9A:31:77:BF:FF:8C:16:6E
X509v3 Authority Key Identifier:
keyid:67:42:A5:63:CD:3A:14:4A:03:2A:9E:5F:22:94:DE:09:DE:D5:71:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/6742A563CD3A144A032A9E5F2294DE09DED571E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6742A563CD3A144A032A9E5F2294DE09DED571E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/3138392e382e3132362e302f32332d3332203d3e20323730373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.8.126.0/23
Signature Algorithm: sha256WithRSAEncryption
01:a3:c2:2b:a7:99:76:0c:08:cd:73:aa:df:3c:e1:f8:5a:15:
68:5d:89:b1:0a:0f:13:67:17:c6:ea:96:2b:8b:aa:a9:4f:e7:
87:f7:9a:fd:40:b9:bb:54:3f:8a:0f:da:82:24:5c:b1:9f:e5:
10:5d:df:b2:ef:fc:af:64:e5:2b:47:c5:a8:61:57:11:d3:70:
fc:92:92:40:be:b1:c6:ca:c9:eb:1d:c8:3f:63:82:31:89:8a:
cb:de:c4:e6:2c:a1:4c:16:13:fd:75:ef:0f:de:47:30:7f:6d:
0c:98:48:64:86:fc:ab:4b:85:d9:06:7d:a2:f1:5a:e0:d6:2c:
89:70:2e:e2:4c:2c:1f:69:19:c7:5c:b4:c7:9c:08:7a:37:96:
88:2a:ef:b3:b9:f6:90:91:2b:45:99:91:43:48:3b:9e:3f:e9:
0f:3d:a1:bb:9c:bd:9b:95:19:7b:a5:54:e6:58:2a:b7:33:0e:
57:90:8f:2c:ce:5a:3f:c6:fb:8a:25:e1:a0:15:b5:9c:69:7a:
83:2e:3c:76:23:68:cd:cb:cc:68:53:8f:68:0f:ea:cd:33:53:
d6:10:c3:93:87:c0:bb:2f:d7:54:b2:e7:11:a9:b4:55:26:a8:
b9:42:9d:56:bf:b6:94:f3:78:fa:34:29:ca:7a:1a:14:a7:64:
d3:2c:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:45 2025 by rpki-client