Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa
File: 3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa (raw, json)
Hash identifier: 8W8CLcB8uWOuW/FUdY96EbZm3qEBajAhiSff50coxo8=
Subject key identifier: D7:8A:D5:0F:76:9D:CB:C0:BB:8E:8C:17:12:6A:C6:0C:9B:63:EE:70
Certificate issuer: /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial: 159D6EFD647068D80BFE79C2B64912CF63B8474A
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa
Signing time: Thu 29 May 2025 18:50:13 +0000
ROA not before: Thu 29 May 2025 18:45:13 +0000
ROA not after: Thu 28 May 2026 18:50:13 +0000
asID: 262503
IP address blocks: 167.249.168.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9d:6e:fd:64:70:68:d8:0b:fe:79:c2:b6:49:12:cf:63:b8:47:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Validity
Not Before: May 29 18:45:13 2025 GMT
Not After : May 28 18:50:13 2026 GMT
Subject: CN=D78AD50F769DCBC0BB8E8C17126AC60C9B63EE70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:ed:fd:aa:a1:b7:22:24:ba:e2:cf:ef:8e:
79:98:3f:08:5d:73:bb:51:0d:9a:16:7b:ca:28:d5:
9f:b9:79:eb:e9:91:f3:79:49:4e:43:af:8b:46:e3:
e0:fa:03:6c:ae:85:2c:d5:1e:68:b1:fc:3c:24:10:
5b:62:32:bd:1d:35:78:e1:58:35:78:13:20:06:98:
5a:d2:dc:68:26:09:fb:60:7a:43:51:ea:1f:34:c1:
f3:4c:c9:20:ef:32:4b:a1:d9:f1:95:3d:7c:e6:61:
03:3d:0f:1e:f5:be:8a:53:70:6c:19:28:ab:d4:0d:
50:e6:3c:85:c3:e4:18:cf:95:10:c8:b3:86:e2:10:
63:ac:ec:cf:5c:e0:3d:f2:3c:40:51:22:0c:e6:0d:
28:be:ef:98:ae:88:9b:f3:d6:1c:91:1c:74:27:99:
d8:a3:4f:1b:29:48:55:32:52:03:a5:19:31:80:a3:
74:18:bc:73:ae:f6:a3:27:ee:cc:12:83:69:0d:c4:
87:f9:1f:84:e3:bd:37:12:eb:75:b8:68:30:b4:68:
a0:05:20:04:58:be:db:46:62:b7:99:ff:62:80:6e:
56:be:69:d3:1e:02:21:5a:f5:94:56:1c:f4:dc:62:
01:93:53:cb:7c:3a:54:d4:8c:07:cb:7f:b3:46:5e:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:D5:0F:76:9D:CB:C0:BB:8E:8C:17:12:6A:C6:0C:9B:63:EE:70
X509v3 Authority Key Identifier:
keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32322d3232203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.168.0/22
Signature Algorithm: sha256WithRSAEncryption
13:c8:6c:a6:dd:41:1a:81:f8:57:81:58:f4:cf:9b:21:52:d3:
e9:d2:4e:b6:cb:37:4a:c9:2d:0c:18:61:09:65:55:47:8a:07:
17:75:2c:36:9c:91:03:05:b0:57:c7:bf:f4:11:04:5f:e7:a7:
5a:f2:c5:02:26:26:ba:59:49:e8:40:f6:1e:79:b1:1e:97:d7:
de:82:a2:d2:2b:fd:1f:a4:ad:7d:90:01:09:9e:c7:2d:ee:e5:
b7:94:8b:55:63:b7:a7:4c:b4:9e:59:b4:45:42:8b:77:38:3f:
6f:a6:f3:bd:6f:3d:45:76:af:9e:36:39:97:15:c7:6a:ce:fc:
81:d3:02:42:c3:14:18:e1:76:8a:81:61:08:5c:8e:f3:59:e1:
d6:68:d0:f1:9e:5b:a3:37:9e:da:78:d6:87:ff:60:7a:81:56:
e7:a1:16:70:94:a5:53:ac:c8:a6:4a:51:ae:66:14:b2:dd:65:
fa:c0:61:a9:e9:89:a0:61:89:73:2e:c7:a5:6e:6e:f9:e1:79:
b3:6e:ae:c2:82:b1:8f:7f:04:80:b0:41:b0:15:d5:b9:a5:c7:
83:fc:c8:df:31:12:12:60:e5:31:28:54:f4:fb:6e:1f:9f:58:
44:b0:51:f3:70:6d:85:ed:78:73:90:6f:51:6f:eb:47:38:4d:
50:a3:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:13:22 2025 by rpki-client