Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa
File: 3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier: 6o4QeBHd4KiKg3t/s9TNh6IUkgDmIFQuAlz1dadmaaM=
Subject key identifier: FF:98:FB:45:32:F1:FE:BD:92:2A:83:1F:BD:13:04:70:A6:1F:D5:F0
Certificate issuer: /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial: 23DA7ED8AD3C7494B9B961AFD41871A23BB7856C
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa
Signing time: Thu 17 Jul 2025 18:36:59 +0000
ROA not before: Thu 17 Jul 2025 18:31:59 +0000
ROA not after: Thu 16 Jul 2026 18:36:59 +0000
asID: 263059
IP address blocks: 186.232.155.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:da:7e:d8:ad:3c:74:94:b9:b9:61:af:d4:18:71:a2:3b:b7:85:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Validity
Not Before: Jul 17 18:31:59 2025 GMT
Not After : Jul 16 18:36:59 2026 GMT
Subject: CN=FF98FB4532F1FEBD922A831FBD130470A61FD5F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:0f:b0:cd:a1:63:ee:f1:f1:45:8a:e3:98:
d9:02:dc:e6:ad:00:62:3c:c1:3b:57:e9:71:5c:a4:
0d:1c:5e:3a:40:d5:e5:05:b7:db:38:83:8b:1d:da:
1f:f5:44:e0:c5:2b:cb:4b:ae:8e:37:14:d0:18:d2:
6e:8f:03:56:13:3e:aa:2e:e6:02:18:6a:81:0c:ba:
87:76:ae:e8:86:f0:82:c4:b3:e5:0a:75:f5:d9:ad:
36:77:71:bd:a7:46:a8:a8:86:a1:7a:9e:f9:62:97:
f4:97:65:38:b5:6b:f6:e4:5d:bd:eb:87:9a:14:55:
4e:9e:7c:fb:97:61:46:86:33:a4:71:3f:63:89:6c:
ed:b6:c8:04:fa:63:a0:58:1f:4d:76:7a:26:9c:33:
99:f3:b3:32:0b:69:94:ba:94:b4:24:77:47:a8:f9:
7f:22:68:da:e9:e6:da:92:39:c4:f4:79:50:79:bf:
75:5c:60:47:5f:0c:2b:75:45:85:92:d8:f3:3b:ce:
ce:a4:79:ac:ad:8d:bf:7d:e2:c5:f5:20:b1:69:8e:
fe:76:83:d7:4e:a9:a1:23:aa:44:24:c1:e7:e9:1f:
b1:4d:20:19:75:16:4b:82:a6:66:65:14:eb:5b:8e:
ad:40:ec:dd:86:a1:59:d9:a3:19:88:04:d3:07:95:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:FB:45:32:F1:FE:BD:92:2A:83:1F:BD:13:04:70:A6:1F:D5:F0
X509v3 Authority Key Identifier:
keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135352e302f32342d3234203d3e20323633303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.232.155.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:98:9e:a1:1d:94:e8:b7:b5:85:18:c5:a3:fe:2c:13:2f:f7:
1b:5c:4b:2b:57:3f:bc:bc:b0:be:4a:96:9a:b7:29:8f:d2:1c:
55:64:1a:82:18:0f:cf:e5:34:25:d7:29:2d:b5:6b:63:f0:b9:
1d:94:2c:ab:d4:38:23:7f:20:59:75:42:c4:9d:b6:bb:87:2e:
7a:ca:8e:fd:3d:6e:1b:19:6c:41:72:04:63:1b:ea:11:f3:0d:
8e:77:94:8e:5d:53:6c:7b:04:f3:c5:1a:64:2b:a1:ea:48:0a:
54:15:09:33:15:24:ad:dd:89:6c:27:dc:19:96:54:cd:de:45:
d8:30:d8:b8:c7:ba:7a:3b:b9:4d:34:b8:4e:7a:c8:8c:de:45:
ec:73:79:f2:fb:05:a6:5b:0b:44:23:c1:24:81:1b:da:4e:6e:
73:62:f4:0b:3c:50:d6:38:71:b5:e9:d9:4a:ab:7b:54:ee:ab:
83:2c:38:47:aa:80:d2:ca:73:8e:d4:86:fd:3c:26:44:0f:39:
74:95:8b:94:30:92:b5:02:cf:fe:ae:c8:9e:13:82:87:0b:cb:
1f:1e:6c:3d:71:68:e2:a0:ad:8d:39:3f:06:1c:47:59:a8:0d:
9d:ba:a9:26:8f:3d:46:b7:7a:04:0d:2d:bd:33:ec:da:21:18:
30:ab:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:10:44 2025 by rpki-client