Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa
File: 3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier: qBfXOg+r/YQnFmRCN1vXOwdzzU1lIYgU+b9DCN2rbtU=
Subject key identifier: E5:BD:C6:61:C5:E7:2D:FD:4E:01:23:22:4D:49:41:56:FD:D6:30:A5
Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial: 79FAD40E7CD9400D51D14759BB828DB2DCE982F0
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa
Signing time: Thu 27 Feb 2025 15:57:57 +0000
ROA not before: Thu 27 Feb 2025 15:52:57 +0000
ROA not after: Thu 26 Feb 2026 15:57:57 +0000
asID: 263508
IP address blocks: 191.243.161.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:fa:d4:0e:7c:d9:40:0d:51:d1:47:59:bb:82:8d:b2:dc:e9:82:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Validity
Not Before: Feb 27 15:52:57 2025 GMT
Not After : Feb 26 15:57:57 2026 GMT
Subject: CN=E5BDC661C5E72DFD4E0123224D494156FDD630A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:b4:25:98:69:6f:6f:06:d6:36:81:d9:53:
62:5f:c7:2e:83:1d:4f:6d:c1:8c:32:a0:ff:9e:27:
ed:b3:68:5e:ad:6c:73:1b:be:0a:e5:33:21:ee:03:
75:53:4d:a6:57:1d:91:7f:d3:ce:97:76:23:72:4b:
14:6f:0d:29:b1:be:04:45:c2:10:a7:55:09:dd:7f:
58:88:5f:32:64:16:82:6f:91:74:3d:e4:41:1d:a3:
ee:ac:0d:c3:ec:53:91:b7:ee:3e:af:e9:06:ab:c4:
5b:8f:0c:00:85:f6:3e:f5:05:85:4e:38:50:d0:8f:
18:42:2d:80:21:ba:fe:17:5e:d7:61:25:d3:c2:0a:
27:9d:4b:a5:06:90:77:66:de:54:f6:41:60:2f:1f:
2e:a5:7b:cc:4a:c5:4a:e8:12:ae:b2:da:3c:17:be:
01:7d:a8:ee:d5:ca:16:47:b7:15:c9:be:2b:4a:74:
3d:5d:82:74:e9:80:51:c0:ec:af:d6:f2:0d:76:e5:
d9:e7:f6:e4:e7:b9:81:6b:d9:93:21:1e:df:16:6e:
88:8f:d2:c5:00:b6:27:9a:c4:a1:0a:74:0a:20:07:
cf:30:1a:10:4a:78:4c:18:d5:79:03:38:65:10:5b:
fe:66:f9:e1:d3:6c:ba:62:84:9b:33:54:97:38:a2:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:C6:61:C5:E7:2D:FD:4E:01:23:22:4D:49:41:56:FD:D6:30:A5
X509v3 Authority Key Identifier:
keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136312e302f32342d3234203d3e20323633353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.161.0/24
Signature Algorithm: sha256WithRSAEncryption
09:28:34:57:65:93:da:f4:16:be:6b:a9:15:c8:c3:06:e7:ab:
c5:f3:e9:58:4b:e3:a0:c9:6d:c8:11:96:51:00:4c:57:c6:f5:
8f:a4:6b:5d:9a:34:0a:71:63:4d:cc:cd:19:7d:02:6b:82:8c:
33:69:33:9f:ec:b2:47:ac:e2:11:0a:a6:99:3d:cb:ce:7c:0e:
44:41:fc:f5:ad:3a:60:94:47:42:af:9c:59:c6:4e:89:31:ad:
34:90:c8:ca:ca:76:33:65:73:03:ae:8c:23:e8:a7:aa:64:98:
94:ce:15:44:da:22:f6:33:b2:0c:f8:5d:c4:a0:0a:68:7b:e8:
fa:20:b2:ad:d2:9b:03:b1:53:6f:7a:7b:8a:cc:47:4f:93:11:
d2:07:ab:0c:5e:d2:e2:49:7b:0a:fd:a0:9b:e2:51:4c:3b:46:
93:cc:52:26:af:29:be:1f:28:d5:66:36:28:78:2c:7d:af:d0:
90:6b:ed:5d:b6:98:fb:cd:d2:b7:f7:68:65:af:27:c8:cb:ec:
fd:87:a3:44:fb:e3:a9:2d:06:20:ae:a1:f3:5c:a6:34:66:74:
68:c4:2a:b2:2e:19:a3:9e:db:ff:56:1a:5a:34:34:ca:29:18:
d5:07:1c:55:9b:46:14:65:95:44:14:13:2b:d3:3f:d3:c5:e3:
f6:c8:9a:53
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUefrUDnzZQA1R0UdZu4KNstzpgvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI4Q0RFMEU3NjRBQTg3RjUxQzgzRTI2MDhCODU2MkI3
MkI0RTIwNDAeFw0yNTAyMjcxNTUyNTdaFw0yNjAyMjYxNTU3NTdaMDMxMTAvBgNV
BAMTKEU1QkRDNjYxQzVFNzJERkQ0RTAxMjMyMjRENDk0MTU2RkRENjMwQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfbQlmGlvbwbWNoHZU2Jfxy6D
HU9twYwyoP+eJ+2zaF6tbHMbvgrlMyHuA3VTTaZXHZF/086XdiNySxRvDSmxvgRF
whCnVQndf1iIXzJkFoJvkXQ95EEdo+6sDcPsU5G37j6v6QarxFuPDACF9j71BYVO
OFDQjxhCLYAhuv4XXtdhJdPCCiedS6UGkHdm3lT2QWAvHy6le8xKxUroEq6y2jwX
vgF9qO7VyhZHtxXJvitKdD1dgnTpgFHA7K/W8g125dnn9uTnuYFr2ZMhHt8WboiP
0sUAtieaxKEKdAogB88wGhBKeEwY1XkDOGUQW/5m+eHTbLpihJszVJc4onm/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5b3GYcXnLf1OASMiTUlBVv3WMKUwHwYDVR0j
BBgwFoAUAozeDnZKqH9RyD4mCLhWK3K04gQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3p0UG43emNTOURlSHlraVhQRGVSYThNNk1FWjZQM3gyNXRzWnlWRDVD
Vm4vMC8wMjhDREUwRTc2NEFBODdGNTFDODNFMjYwOEI4NTYyQjcyQjRFMjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyOENERTBFNzY0QUE4N0Y1
MUM4M0UyNjA4Qjg1NjJCNzJCNEUyMDQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd6dFBuN3pjUzlEZUh5a2lYUERlUmE4TTZNRVo2UDN4MjV0c1p5VkQ1Q1ZuLzAv
MzEzOTMxMmUzMjM0MzMyZTMxMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/zoTANBgkqhkiG9w0BAQsFAAOCAQEACSg0
V2WT2vQWvmupFcjDBuerxfPpWEvjoMltyBGWUQBMV8b1j6RrXZo0CnFjTczNGX0C
a4KMM2kzn+yyR6ziEQqmmT3LznwOREH89a06YJRHQq+cWcZOiTGtNJDIysp2M2Vz
A66MI+inqmSYlM4VRNoi9jOyDPhdxKAKaHvo+iCyrdKbA7FTb3p7isxHT5MR0ger
DF7S4kl7Cv2gm+JRTDtGk8xSJq8pvh8o1WY2KHgsfa/QkGvtXbaY+83St/doZa8n
yMvs/YejRPvjqS0GIK6h81ymNGZ0aMQqsi4Zo57b/1YaWjQ0yikY1QccVZtGFGWV
RBQTK9M/08Xj9siaUw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:04:05 2025 by rpki-client