Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32342d3332203d3e20323636313837.roa
File: 3136302e32302e38382e302f32342d3332203d3e20323636313837.roa (raw, json)
Hash identifier: 5RArIxPKWDN1UVKPx9/vJUHs4rpEPRxLK8Tj4b+bWik=
Subject key identifier: 32:EA:D3:C6:5A:A6:6E:DD:AC:41:BE:8E:D8:7F:23:0B:9F:C9:A2:95
Certificate issuer: /CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
Certificate serial: 7B66E0DEDDA30FF331FF074536FE0A315DE05591
Authority key identifier: 3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32342d3332203d3e20323636313837.roa
Signing time: Wed 08 Oct 2025 18:43:13 +0000
ROA not before: Wed 08 Oct 2025 18:38:13 +0000
ROA not after: Wed 07 Oct 2026 18:43:13 +0000
asID: 266187
IP address blocks: 160.20.88.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:66:e0:de:dd:a3:0f:f3:31:ff:07:45:36:fe:0a:31:5d:e0:55:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
Validity
Not Before: Oct 8 18:38:13 2025 GMT
Not After : Oct 7 18:43:13 2026 GMT
Subject: CN=32EAD3C65AA66EDDAC41BE8ED87F230B9FC9A295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:60:fe:4e:ea:0a:9c:38:8b:c7:85:83:1d:
c2:bf:87:92:46:e8:67:4c:68:5d:7f:51:30:e8:0c:
4b:0f:ef:78:0c:52:44:a8:26:d6:53:8e:90:7d:ab:
ed:f5:b1:b4:7d:bd:f9:af:68:68:ab:fa:06:c6:72:
58:97:9f:d7:5b:f5:c3:82:6a:57:bc:37:f1:3b:80:
77:14:0a:85:e4:97:95:76:98:ea:ce:2f:9e:1f:39:
fc:80:8b:3f:7d:64:3c:fc:60:1a:54:2b:fe:96:35:
ac:87:e2:0e:73:b0:1e:55:d2:90:ef:42:35:ac:36:
ea:6f:29:5a:99:bc:34:d8:e9:41:1b:d3:94:a0:98:
d2:45:a5:cc:cd:00:67:24:5e:cc:64:11:af:34:35:
5c:ee:1b:25:ef:ab:6e:2f:76:16:93:9a:1a:6e:a9:
e9:fc:2f:2b:ce:70:46:d0:ff:1d:7a:7e:26:8d:89:
dd:3a:fe:7d:67:2f:38:d3:2b:86:7e:f7:2b:d7:e7:
b4:89:b0:b7:c7:4d:8f:02:86:3f:85:1c:7b:0d:29:
9e:36:d5:49:f5:9e:f7:dd:29:6a:fa:a9:68:84:92:
96:b9:27:be:d0:6d:de:24:a8:c8:cf:66:f4:9e:b3:
68:18:f5:a4:11:b6:7e:d7:ee:a6:53:4e:74:ae:8f:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:D3:C6:5A:A6:6E:DD:AC:41:BE:8E:D8:7F:23:0B:9F:C9:A2:95
X509v3 Authority Key Identifier:
keyid:3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32342d3332203d3e20323636313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.88.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6d:ae:51:9e:2e:49:eb:a7:2d:03:f4:51:d6:78:4e:ef:09:
57:d2:a0:f9:b2:62:3f:fd:27:13:f4:65:6b:c0:48:8a:84:b4:
62:0d:6e:c5:6b:6a:25:41:40:5c:17:fd:f9:c0:72:ed:c1:74:
02:6b:1e:b9:1f:1d:3a:05:9a:e3:d1:96:d7:36:8b:63:92:c5:
57:8c:4e:5c:79:9c:63:0d:be:86:9c:28:08:05:f1:87:ac:eb:
ec:37:72:04:a0:96:61:76:e9:33:49:9d:8c:45:b5:65:2e:0f:
57:b0:ba:84:27:d1:a8:3c:56:4b:ca:5c:4a:ef:f5:a5:fc:4f:
92:e2:2f:60:8c:b9:4e:01:f5:33:58:33:e4:98:ba:ad:fa:b0:
65:b2:ce:b2:19:dc:61:1e:a2:9a:12:4f:4c:88:35:21:90:ec:
09:ba:01:f3:de:96:c1:69:d6:c2:9f:fc:de:5a:e8:36:67:21:
ee:27:4d:cb:04:78:c2:cb:77:4f:1f:4f:1f:d2:34:58:c6:4d:
19:17:d4:25:fe:ff:d1:63:fb:db:fd:68:34:cc:b5:7a:61:ba:
b6:15:9b:f0:6a:63:db:42:c5:87:62:b0:a6:88:88:92:36:5a:
e3:b6:4d:be:39:74:c2:4b:ea:a0:a1:2c:6c:11:de:7f:e0:f1:
27:25:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:45:07 2025 by rpki-client