Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38392e302f32342d3332203d3e20323636313837.roa
File: 3136302e32302e38392e302f32342d3332203d3e20323636313837.roa (raw, json)
Hash identifier: CWa6d891yJ27BoKLyjKWnoGFQ1zrWUZHWTU1EGO6PVo=
Subject key identifier: F7:B9:A0:17:7F:80:76:47:50:B3:52:0A:5F:C4:DD:0C:A6:BF:E8:14
Certificate issuer: /CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
Certificate serial: 64F2C818127C4F70EF5CD4314ACD1A8BE4C863A9
Authority key identifier: 3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38392e302f32342d3332203d3e20323636313837.roa
Signing time: Wed 08 Oct 2025 18:43:40 +0000
ROA not before: Wed 08 Oct 2025 18:38:40 +0000
ROA not after: Wed 07 Oct 2026 18:43:40 +0000
asID: 266187
IP address blocks: 160.20.89.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f2:c8:18:12:7c:4f:70:ef:5c:d4:31:4a:cd:1a:8b:e4:c8:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
Validity
Not Before: Oct 8 18:38:40 2025 GMT
Not After : Oct 7 18:43:40 2026 GMT
Subject: CN=F7B9A0177F80764750B3520A5FC4DD0CA6BFE814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:bd:29:cf:be:cf:2b:a2:e1:67:34:a1:3d:
b1:cd:01:17:7a:56:45:94:2c:8e:e1:ca:6e:0b:ff:
bb:c1:ee:3e:c8:fb:97:ca:5a:50:06:dd:dc:2f:1a:
bf:de:24:b6:ff:5b:38:79:ce:02:e7:fc:32:59:d5:
86:bd:38:bf:36:31:77:ec:77:90:57:db:8b:dd:16:
90:75:1e:14:c7:6e:7a:7a:18:ac:bc:25:56:c5:32:
e4:e4:28:4c:6a:cd:d8:1e:df:cf:e1:03:0b:6b:93:
7b:4c:11:04:05:50:63:e3:a3:24:25:ac:50:31:38:
c3:59:46:31:b0:a9:0a:95:1e:91:8d:6a:44:c0:05:
2c:00:4e:73:51:9d:4e:50:94:ff:8d:58:5d:96:28:
4a:3e:b2:64:65:81:28:ce:53:0e:98:a7:a6:49:78:
a4:4a:c9:a9:13:81:70:17:3b:17:2e:8f:67:e5:e8:
cc:d2:cf:35:7b:95:6e:3f:8c:2b:a1:78:fa:00:34:
ac:81:ea:6c:c2:a2:19:52:05:a7:4d:a5:8b:2f:e3:
f6:6f:01:19:1a:a9:11:cb:80:43:95:54:78:08:22:
e6:18:20:d4:80:fb:bd:34:2e:00:29:7d:c9:e8:4e:
f8:5b:e8:d3:1e:f2:80:7b:07:46:0a:85:ce:b7:3f:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B9:A0:17:7F:80:76:47:50:B3:52:0A:5F:C4:DD:0C:A6:BF:E8:14
X509v3 Authority Key Identifier:
keyid:3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38392e302f32342d3332203d3e20323636313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.89.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3b:19:89:ca:86:4e:fd:8e:aa:c2:81:ce:29:1f:e6:db:65:
49:40:30:5e:ba:00:f3:46:b4:37:77:8c:af:f0:01:00:ee:f3:
b5:f6:85:06:17:27:09:d5:24:5a:10:fa:55:d8:93:c7:7a:45:
dd:b3:f9:2b:8d:2f:8e:14:04:7a:e2:d5:c4:d3:0b:bc:d2:e3:
5e:ff:2d:94:32:44:35:74:db:74:6d:a4:77:bd:79:41:9f:be:
4e:82:2c:2b:e0:f5:de:65:bb:b9:ea:4f:c4:db:19:48:42:20:
56:07:33:16:f0:13:15:78:f7:7d:e6:e3:e3:fc:5d:f7:8a:95:
62:a7:2e:97:63:83:f1:9f:9d:46:c6:da:73:b9:1f:0c:ad:db:
d4:90:cb:3f:2d:e3:6f:bc:2c:d0:d2:b2:53:b7:28:7b:6f:07:
72:b5:17:48:ee:43:52:37:61:25:81:b5:48:81:28:fd:f9:21:
d4:8f:2f:69:1b:8e:94:b8:05:37:9d:a7:3c:cb:2b:0b:d7:f5:
67:84:e3:1c:46:ce:83:17:f6:4d:4e:95:31:95:c5:cb:b4:13:
58:98:46:8e:3b:0a:fc:e6:ff:3f:7b:c8:0e:44:84:7a:19:47:
b2:a8:26:c9:c8:a5:17:a5:60:d7:00:34:73:47:87:5b:54:42:
47:67:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:45:05 2025 by rpki-client