Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e39312e302f32342d3332203d3e20323636313837.roa
File: 3136302e32302e39312e302f32342d3332203d3e20323636313837.roa (raw, json)
Hash identifier: 75dR2JEW5fKQZ657kx47wKTP2VDUR/Yi3LeDwDsUxH0=
Subject key identifier: E4:17:C8:72:1B:90:7A:8D:87:0B:7E:B1:A0:AB:BA:5A:3B:5B:52:2B
Certificate issuer: /CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
Certificate serial: 5D28A965F7D7B8B47929167BC6B452477E630352
Authority key identifier: 3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e39312e302f32342d3332203d3e20323636313837.roa
Signing time: Wed 08 Oct 2025 18:43:45 +0000
ROA not before: Wed 08 Oct 2025 18:38:45 +0000
ROA not after: Wed 07 Oct 2026 18:43:45 +0000
asID: 266187
IP address blocks: 160.20.91.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:28:a9:65:f7:d7:b8:b4:79:29:16:7b:c6:b4:52:47:7e:63:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
Validity
Not Before: Oct 8 18:38:45 2025 GMT
Not After : Oct 7 18:43:45 2026 GMT
Subject: CN=E417C8721B907A8D870B7EB1A0ABBA5A3B5B522B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:40:00:07:25:18:a1:e8:d6:0d:cf:d5:31:
94:6b:6d:24:f8:c4:14:89:21:dc:bb:de:03:be:64:
4c:85:b4:70:8c:f3:b1:5a:22:0d:e0:f0:5a:e7:3a:
f5:48:75:3c:0e:49:66:55:cb:68:4c:1d:38:ce:44:
05:5c:5f:d8:cf:29:3b:f7:46:67:40:86:7a:ec:8d:
40:42:5e:2d:0b:7a:ca:d2:b9:9c:4f:7e:6b:78:9a:
db:1b:56:59:05:2a:77:da:6c:5b:4e:f2:ca:c5:d0:
73:de:26:9d:55:d1:2f:a9:7c:fe:5a:c8:c0:8f:90:
87:15:e5:0b:37:26:db:e0:94:c0:c8:45:e1:d0:2e:
5e:ec:56:19:b1:ac:8b:7c:68:4f:75:f7:49:60:bb:
fd:90:72:51:d7:51:e1:71:97:0a:5b:5d:b8:b0:0f:
2e:d6:e6:5d:de:7f:4b:f9:34:61:82:90:7d:e6:59:
ab:66:51:c7:a8:b7:5f:5e:d4:4f:89:35:fe:82:f8:
3f:fa:3e:9c:1c:1e:1c:fe:9c:b1:e9:d1:3c:92:cb:
47:c0:69:e8:c2:6e:72:c6:4b:cb:71:d1:19:dd:89:
66:d3:3a:17:2b:3e:e2:c6:26:59:f4:3a:b4:e9:cd:
7e:ee:22:84:e2:60:03:d7:7f:f8:87:14:22:9d:54:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:17:C8:72:1B:90:7A:8D:87:0B:7E:B1:A0:AB:BA:5A:3B:5B:52:2B
X509v3 Authority Key Identifier:
keyid:3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e39312e302f32342d3332203d3e20323636313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:31:44:52:f7:cb:0b:d8:2c:73:20:db:3f:ce:e7:8b:03:a2:
c5:6b:9e:3f:06:2e:71:3d:c4:e8:c6:86:67:0c:ae:b6:71:84:
e4:e3:8f:24:38:36:cc:e9:2e:46:65:d9:30:35:96:8a:0c:b8:
15:e6:76:8a:a9:be:25:56:51:78:87:99:45:f4:ce:b9:12:85:
a5:dd:28:b8:36:50:44:c2:de:5f:c5:69:71:53:f5:10:ca:e0:
84:25:53:da:c3:7b:7a:73:71:d7:cc:c8:34:8f:d9:10:80:e2:
49:64:9b:ad:f7:32:eb:85:89:34:69:eb:d6:f1:82:46:ae:fd:
99:56:e2:49:ca:dd:d2:28:8b:f9:40:ff:be:f6:00:95:3e:1e:
33:ca:d9:3f:ff:b5:22:c4:18:94:13:98:f5:61:d3:38:b9:24:
cf:1a:6c:d9:31:78:85:3c:64:73:36:23:d7:a6:72:55:c1:50:
f9:23:3e:ec:39:1b:65:fe:82:2c:b5:d9:b5:1e:90:19:70:ad:
66:26:60:f7:85:f6:8e:3c:e3:cc:5f:2b:db:83:6c:25:0a:6c:
75:cd:1a:5c:1d:66:57:b7:56:2d:cc:54:8c:44:fa:0f:a5:a6:
1b:cc:5a:95:ae:28:9f:d3:ce:20:1a:4a:5d:ad:27:0a:31:dc:
be:0b:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:45:07 2025 by rpki-client