Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa
File: 3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa (raw, json)
Hash identifier: XVjlhgWqQ8atwoRCWn8bZouZV6U2/nJjOmvWtG/5k4Q=
Subject key identifier: B1:89:13:21:67:2D:19:6A:46:BD:ED:56:9C:20:DF:CD:56:D4:8C:93
Certificate issuer: /CN=4235A133A2E6DD028FDB7C6008A47DA80AED066E
Certificate serial: 34020084A03A713879F3C79392FF59DC4911C372
Authority key identifier: 42:35:A1:33:A2:E6:DD:02:8F:DB:7C:60:08:A4:7D:A8:0A:ED:06:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4235A133A2E6DD028FDB7C6008A47DA80AED066E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa
Signing time: Tue 08 Jul 2025 18:35:04 +0000
ROA not before: Tue 08 Jul 2025 18:30:04 +0000
ROA not after: Tue 07 Jul 2026 18:35:04 +0000
asID: 265061
IP address blocks: 170.231.56.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:02:00:84:a0:3a:71:38:79:f3:c7:93:92:ff:59:dc:49:11:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4235A133A2E6DD028FDB7C6008A47DA80AED066E
Validity
Not Before: Jul 8 18:30:04 2025 GMT
Not After : Jul 7 18:35:04 2026 GMT
Subject: CN=B1891321672D196A46BDED569C20DFCD56D48C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:f7:46:5e:95:83:50:64:e2:5d:5e:3a:59:
9a:5e:2d:d4:8d:bb:f2:92:8e:a3:c3:6c:cf:c0:8a:
be:bf:07:df:cf:a4:a1:f1:99:51:91:63:aa:3e:47:
0b:62:23:36:f0:34:e8:53:93:5c:c5:00:e5:7c:af:
ef:11:be:0f:2e:f6:75:c3:17:e9:57:e2:f9:4e:3b:
95:4a:d2:e5:30:4b:57:e0:0a:55:04:f5:ad:b2:25:
3e:46:40:67:8d:b7:2e:f6:13:9a:1e:9a:5c:b0:43:
07:01:fd:d1:7b:2c:2e:bf:f3:6a:fa:32:f0:f0:dc:
9f:fd:5f:ae:88:1a:cc:f5:d7:f3:53:29:93:32:99:
f0:32:95:5a:69:43:37:cc:24:58:c8:aa:e6:56:e7:
8b:c6:74:c9:03:51:25:40:40:b5:7e:9f:21:25:ee:
fc:b6:69:dd:31:8c:ad:68:b4:b4:d8:63:1f:4a:d6:
63:88:2d:29:27:03:fc:a3:8f:cc:ac:f8:64:1b:d6:
09:62:bb:7c:7c:06:78:d3:8c:0b:f8:c9:9e:24:fd:
98:9e:a2:ae:54:67:d8:01:7b:67:1b:d5:4c:5d:ea:
32:4c:2c:01:cc:e9:20:c7:7d:d5:25:9a:cb:fa:ae:
ee:e3:10:b8:ee:cb:e6:79:4b:9b:49:b3:35:3c:1c:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:89:13:21:67:2D:19:6A:46:BD:ED:56:9C:20:DF:CD:56:D4:8C:93
X509v3 Authority Key Identifier:
keyid:42:35:A1:33:A2:E6:DD:02:8F:DB:7C:60:08:A4:7D:A8:0A:ED:06:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/4235A133A2E6DD028FDB7C6008A47DA80AED066E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4235A133A2E6DD028FDB7C6008A47DA80AED066E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32322d3234203d3e20323635303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:96:21:fa:ab:13:d3:57:0a:86:d1:13:e9:57:00:0f:f7:73:
03:1a:a0:ce:0c:f9:b8:82:4d:9a:f1:6e:a3:08:de:ac:61:7d:
a3:48:73:a3:c2:bf:09:99:ea:fe:36:7e:b3:05:17:51:4a:93:
05:5b:99:c2:b1:70:9c:bb:e4:3b:d4:a2:72:c8:88:9b:1d:55:
12:37:3f:c9:3b:df:14:72:c1:eb:53:73:40:7a:f7:2c:c8:7d:
cc:67:ff:d5:97:bf:0e:a1:ea:6f:4e:ff:ab:2d:be:a5:f2:29:
b5:92:73:c7:73:81:ba:fd:4f:78:40:13:e1:f4:3d:7a:19:ca:
36:ad:fe:4a:de:61:af:4b:11:96:b1:87:b5:b2:13:57:6a:2b:
a7:56:b9:b1:f0:9a:bc:a0:85:c2:35:85:d4:c3:87:9f:08:7e:
2e:28:de:64:f2:65:9f:e5:d6:15:0e:f4:4f:d9:52:4e:13:80:
de:c5:14:d7:5f:9b:bf:86:30:f3:37:15:bc:a0:db:d0:e8:26:
22:77:3c:97:89:1f:47:af:7c:c6:88:63:a7:3c:db:7b:de:bd:
8c:57:16:87:16:7f:c2:e1:0c:27:ef:0d:a6:13:10:07:0c:69:
3a:28:dd:d2:9a:f3:85:c6:fc:30:68:97:c1:a9:d1:6f:11:02:
97:02:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 08:57:13 2025 by rpki-client