Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
File: 3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier: ToEWxaOwtjf3hnl3M0u6UiicCWaXV8NHu1Svm2DKTSs=
Subject key identifier: B6:FF:5B:A6:DE:00:1C:67:AD:10:3C:43:15:22:54:E6:F0:43:24:72
Certificate issuer: /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial: 513B6C036A5759E5C8B8146EB2A1E56C95847697
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
Signing time: Tue 19 Aug 2025 20:06:20 +0000
ROA not before: Tue 19 Aug 2025 20:01:20 +0000
ROA not after: Tue 18 Aug 2026 20:06:20 +0000
asID: 262503
IP address blocks: 167.249.168.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3b:6c:03:6a:57:59:e5:c8:b8:14:6e:b2:a1:e5:6c:95:84:76:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Validity
Not Before: Aug 19 20:01:20 2025 GMT
Not After : Aug 18 20:06:20 2026 GMT
Subject: CN=B6FF5BA6DE001C67AD103C43152254E6F0432472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:20:55:a5:be:b0:46:41:fd:0e:46:08:54:
8d:39:22:11:34:99:20:28:f5:31:f7:81:03:1f:d5:
dd:a7:f8:fd:4a:66:42:dd:16:db:e1:e4:a4:c6:c8:
f3:39:62:b4:39:a5:8f:ec:cb:27:ff:a1:a1:83:ed:
6a:79:13:fe:d4:7e:ec:9b:01:0b:b4:06:4f:eb:19:
7c:1c:c2:df:ba:90:16:4b:df:fd:1b:bf:4b:3a:b1:
ae:fd:b3:93:9b:68:88:8b:f8:88:05:4f:f7:3c:cd:
00:52:36:e4:0e:2b:a4:1b:97:37:64:50:91:e6:af:
f4:86:5c:14:39:1a:18:ad:3f:73:d1:1a:d6:75:0f:
a7:63:b7:bc:b6:16:fa:d6:25:13:1a:4a:a7:ca:38:
24:e4:22:ed:5e:84:3a:92:18:95:42:8e:e1:e2:8d:
ae:29:60:ac:70:d5:e7:ad:f3:62:0c:25:ff:1b:8d:
63:82:4e:40:82:ce:e4:07:4c:81:89:d5:5d:e1:f7:
3e:b0:33:e4:4a:63:e3:06:63:6b:ee:dc:9c:76:ef:
9f:ef:23:4b:ae:a9:3a:4b:20:90:5a:18:69:16:94:
5b:2e:7d:dd:77:28:24:ea:41:d7:42:83:99:2b:cc:
1b:2c:af:39:42:4a:f3:e0:c0:04:7f:a1:54:d5:e9:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:5B:A6:DE:00:1C:67:AD:10:3C:43:15:22:54:E6:F0:43:24:72
X509v3 Authority Key Identifier:
keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.168.0/24
Signature Algorithm: sha256WithRSAEncryption
18:54:ff:0e:3b:b8:27:6c:67:bc:c8:62:d8:75:08:39:2c:43:
4f:be:5f:1b:b5:04:05:60:94:e8:6a:20:b1:7e:d5:4b:bd:42:
bb:da:10:d4:90:91:d6:2a:62:b9:4e:b2:44:38:51:3d:4c:e4:
04:76:93:78:2d:29:db:41:17:90:fd:4b:ca:54:ce:e0:b1:22:
19:d6:16:a7:1b:1c:b5:1c:2b:da:87:39:24:2c:5f:77:68:88:
4f:b4:e8:1f:bb:c7:44:f4:df:a9:88:bf:0b:be:4a:b8:b3:42:
46:a4:6a:9b:d4:38:58:fc:15:14:ac:6d:32:b6:05:93:67:62:
51:f0:be:f0:8d:7f:cb:6a:7f:79:b2:cf:c0:a8:a3:b0:4a:76:
9e:e7:ec:2f:f2:75:6a:78:56:87:13:f0:97:98:62:48:d1:61:
7c:bc:ae:44:3a:bb:b2:c7:e5:78:40:f6:95:f2:47:6b:99:aa:
5a:1b:cc:ee:33:9f:2f:f5:67:9d:6a:fb:78:6d:cf:a2:65:ea:
65:9e:3f:4d:ad:a3:d0:36:af:02:27:2c:48:0d:6c:f4:00:39:
8b:c5:67:82:4e:f5:ba:fa:7d:3c:50:f7:c6:b7:44:df:2d:7d:
a2:d3:ad:28:03:f8:46:47:78:b1:8c:68:c9:33:29:a5:a3:65:
ff:5c:7a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:25:50 2025 by rpki-client