Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/3136382e39302e3130322e302f32342d3234203d3e20323635333037.roa
File: 3136382e39302e3130322e302f32342d3234203d3e20323635333037.roa (raw, json)
Hash identifier: ksejObepEmWpjfogctCswME5aMdYuL59ynqkksXdS6s=
Subject key identifier: 03:4B:94:23:ED:74:CF:85:3E:27:A6:C5:72:D0:FD:2C:7B:DD:A9:D1
Certificate issuer: /CN=764567616A60FC68D3BC1B6D3EC8446979113187
Certificate serial: 16041A280EDE371BE8AAAB1FBC057FA62E5A440C
Authority key identifier: 76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/3136382e39302e3130322e302f32342d3234203d3e20323635333037.roa
Signing time: Thu 03 Apr 2025 18:13:53 +0000
ROA not before: Thu 03 Apr 2025 18:08:53 +0000
ROA not after: Thu 02 Apr 2026 18:13:53 +0000
asID: 265307
IP address blocks: 168.90.102.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:04:1a:28:0e:de:37:1b:e8:aa:ab:1f:bc:05:7f:a6:2e:5a:44:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764567616A60FC68D3BC1B6D3EC8446979113187
Validity
Not Before: Apr 3 18:08:53 2025 GMT
Not After : Apr 2 18:13:53 2026 GMT
Subject: CN=034B9423ED74CF853E27A6C572D0FD2C7BDDA9D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:42:c8:0a:17:1b:3e:ce:c7:80:03:e6:9b:
ae:05:56:3b:62:43:3f:9b:d6:c7:f0:35:6e:6a:7b:
05:20:ed:80:f4:0c:1c:cd:36:97:a9:d8:82:38:99:
0c:32:17:6e:86:37:8b:3b:85:df:8d:b5:2f:45:ff:
f9:3e:03:82:1b:07:cd:2b:31:34:a0:c1:13:65:57:
df:d0:cf:12:83:69:b8:83:36:c9:05:f8:fb:b1:48:
e3:6d:ea:8a:88:c4:12:17:63:d7:90:4b:61:1f:98:
a7:31:16:87:0e:bf:27:81:22:ad:82:3b:7c:e4:e9:
c6:09:84:81:99:f6:37:c3:34:e1:34:bb:8f:0c:7e:
95:55:09:73:18:6d:86:d3:60:c3:9d:75:6e:5c:89:
18:c5:8d:4d:5b:2f:1e:c3:06:18:21:1f:4d:89:67:
12:d2:c6:92:0d:77:b5:3a:0c:83:a3:b2:19:7e:70:
b1:d1:2a:40:fb:ed:dc:67:db:9f:cb:66:0e:a3:d0:
9d:e4:9b:d5:12:72:ea:ee:85:b4:0c:af:2d:4e:ef:
da:5e:4b:46:2f:07:51:13:5f:4b:fb:c0:7e:b3:50:
37:62:85:b8:67:8d:b2:51:2b:4a:f2:d3:24:a4:08:
f7:4a:77:e2:51:e1:8b:38:e0:ff:f9:7d:1e:a5:09:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:94:23:ED:74:CF:85:3E:27:A6:C5:72:D0:FD:2C:7B:DD:A9:D1
X509v3 Authority Key Identifier:
keyid:76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/3136382e39302e3130322e302f32342d3234203d3e20323635333037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.102.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d1:b7:57:fe:e8:44:17:07:d6:f5:9d:74:e7:f2:3b:a4:ad:
3f:e0:fd:2f:04:6c:b3:40:d6:a9:3a:2b:cd:de:3f:8d:e6:b3:
21:0e:dd:2c:3d:83:ff:5c:80:93:e2:9b:e4:cd:8f:2b:de:57:
58:da:d7:13:07:ff:17:b9:ad:5e:14:1e:d7:15:b1:a8:af:3d:
d7:36:8f:57:1a:fe:60:b7:e9:07:e4:55:d1:08:85:51:a0:ea:
24:cc:0d:16:d0:12:ae:32:c0:2a:9e:c1:06:9c:fe:ab:d7:fd:
5b:36:be:94:5c:3c:98:7a:d5:b7:dc:7a:25:cd:91:11:1b:37:
58:da:42:2a:b2:96:7d:b3:2c:68:0b:d9:ce:61:33:56:d2:22:
6d:68:b1:d9:89:4a:f3:a2:09:ee:d6:f5:d0:3d:ea:d1:60:ff:
40:2b:53:05:07:dc:2b:f6:28:9f:bd:f3:8f:db:81:7c:3b:3e:
eb:c3:f7:b2:2b:93:40:1d:f8:71:e2:e5:58:05:15:db:3c:0e:
49:df:4a:38:11:6b:24:3c:d6:88:6a:e0:89:96:25:4d:8c:fd:
3e:50:e2:9e:26:f0:d7:49:80:95:28:22:06:9f:6a:f5:49:0a:
c4:9b:0f:41:78:8d:48:9d:d6:c7:a1:57:92:f5:f6:21:23:95:
5f:71:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:02:08 2025 by rpki-client