Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa
File: 3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier: XCAkYOJ8mCO8rAcNOs9kne64qsoHpJBd5hRd92N0SvQ=
Subject key identifier: BD:2F:17:B4:80:69:4B:E6:0C:AE:54:0B:8D:40:6F:6C:CF:3F:0E:7B
Certificate issuer: /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial: 51BA3A8C8F4866F6EBE4CF022B59AA6715CE36AD
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa
Signing time: Thu 27 Feb 2025 15:58:45 +0000
ROA not before: Thu 27 Feb 2025 15:53:45 +0000
ROA not after: Thu 26 Feb 2026 15:58:45 +0000
asID: 263508
IP address blocks: 191.243.173.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ba:3a:8c:8f:48:66:f6:eb:e4:cf:02:2b:59:aa:67:15:ce:36:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Validity
Not Before: Feb 27 15:53:45 2025 GMT
Not After : Feb 26 15:58:45 2026 GMT
Subject: CN=BD2F17B480694BE60CAE540B8D406F6CCF3F0E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:1e:09:52:58:bd:2a:49:c0:14:48:5a:d2:
50:6e:f8:90:b5:f1:84:00:c6:48:0e:59:17:90:73:
9b:98:ca:07:b4:f5:8a:4a:9a:43:8c:18:8b:6e:fe:
71:21:1e:92:78:f2:ca:bf:5e:03:4d:12:b7:65:0e:
e2:38:27:2e:20:11:10:7a:74:8e:fd:37:fb:84:41:
c3:13:2c:be:1a:c1:c0:b8:6c:01:a5:eb:d8:22:f3:
f1:d4:ee:b8:87:38:29:e1:12:19:f6:58:3e:51:c0:
c1:46:29:47:c5:e8:02:4b:b3:47:81:e7:d5:77:fc:
af:e8:cb:f2:dd:20:e7:ee:e1:96:b0:8b:b9:d6:ee:
c4:57:5c:a5:f5:f8:45:27:4f:1c:82:e7:53:da:ed:
86:73:3c:eb:4f:41:35:43:96:24:d8:fa:b7:65:db:
88:b3:59:eb:19:b5:16:4e:85:71:ee:e9:37:f6:39:
0e:60:6a:93:a8:e6:c5:ac:b6:da:3c:ae:37:fd:0a:
9d:7a:f7:40:dd:33:c4:76:b0:a6:eb:90:47:1a:d7:
6a:19:10:f2:55:1e:5b:a3:cc:24:39:0d:f8:84:f2:
98:8e:90:00:b3:eb:fe:f9:e0:2e:1b:aa:6e:b5:c6:
aa:52:15:d2:e5:0c:29:87:dd:48:f5:1b:94:0c:71:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2F:17:B4:80:69:4B:E6:0C:AE:54:0B:8D:40:6F:6C:CF:3F:0E:7B
X509v3 Authority Key Identifier:
keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137332e302f32342d3234203d3e20323633353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.173.0/24
Signature Algorithm: sha256WithRSAEncryption
13:31:f8:bc:f2:2b:a2:ad:d4:c3:65:0d:a1:13:64:8f:7f:21:
ca:a5:bf:5c:03:48:81:b8:38:12:5c:45:77:01:e9:62:39:1e:
4f:09:31:c6:ff:ad:99:15:ae:40:52:a7:fd:4f:8e:b0:5a:3b:
30:2a:a4:41:fa:89:a5:55:bf:9b:5e:dd:9b:f1:d2:4b:7a:8d:
9e:56:e6:ac:cb:91:b6:28:b4:4c:13:5e:f5:dc:a4:25:1d:ab:
2b:60:4f:28:d7:63:9c:d2:d5:aa:46:39:ff:85:1b:a2:bc:c0:
26:c3:1a:6a:86:94:34:65:17:b6:c9:00:d9:8d:df:a9:99:93:
68:b9:eb:cc:23:b5:7a:a3:08:b0:e5:b0:da:c1:17:f8:4e:2c:
a8:da:2a:ad:a0:90:b7:13:f5:6c:e0:e3:4e:ee:9f:9f:8d:37:
c4:4e:50:3e:11:2f:c7:7d:99:30:04:71:b5:75:7b:71:ae:80:
e1:81:61:98:9e:ca:00:13:92:d6:61:4b:d9:05:97:6e:82:b8:
3b:33:6b:25:d4:ee:eb:5a:f1:be:36:83:2f:b3:fe:62:13:a5:
75:be:f0:7b:03:39:a2:38:3c:23:ee:a4:bd:15:c1:5f:54:53:
58:19:f2:7b:93:d0:d3:bc:24:80:3f:68:51:1e:23:10:43:b3:
ee:e4:53:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:53 2025 by rpki-client