Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa
File: 3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa (raw, json)
Hash identifier: qQLU+Ohj/iJiP6sxC7iSpDsIRV0d5ppxsynfxSqYVnE=
Subject key identifier: 6E:BD:94:25:45:02:30:5D:0D:4E:DF:5C:3E:22:B9:25:F8:BD:8E:27
Certificate issuer: /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial: 5E8A4B87783652FBD3B2E8784047CBC021B54D17
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa
Signing time: Fri 06 Jun 2025 15:00:59 +0000
ROA not before: Fri 06 Jun 2025 14:55:59 +0000
ROA not after: Fri 05 Jun 2026 15:00:59 +0000
asID: 264863
IP address blocks: 168.205.250.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8a:4b:87:78:36:52:fb:d3:b2:e8:78:40:47:cb:c0:21:b5:4d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Validity
Not Before: Jun 6 14:55:59 2025 GMT
Not After : Jun 5 15:00:59 2026 GMT
Subject: CN=6EBD94254502305D0D4EDF5C3E22B925F8BD8E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:d0:bb:52:ec:d6:eb:c6:2a:85:c5:93:2c:
98:3d:0c:7e:6e:d4:ed:39:b0:ad:6a:8b:e7:48:4d:
77:f5:21:7c:db:d8:a4:71:31:89:7a:85:f5:d6:82:
e1:b5:b1:94:23:a5:74:ef:bf:03:29:04:3a:74:ba:
0a:21:19:5b:03:bd:35:58:65:e1:7d:81:a6:42:ce:
a5:c0:37:6b:ae:23:f3:35:d7:40:1e:a5:52:0a:95:
32:9d:06:c1:37:cc:ac:ff:99:98:1c:79:ce:31:9c:
f7:b5:1a:91:32:1e:a9:da:9b:eb:c9:8c:96:82:d8:
29:f0:ff:bb:70:f3:b1:f6:2d:97:10:c6:be:1c:52:
11:13:9f:c4:cf:0b:74:00:1a:72:73:ad:08:20:c6:
57:01:3b:29:70:af:11:ad:c3:eb:dd:10:c5:bb:ec:
6e:f5:8b:d0:38:46:21:38:9e:cd:93:f3:6a:db:f6:
14:ca:11:f5:2e:4b:cf:19:c9:c7:2a:8a:a1:e5:56:
3d:4a:a6:e2:94:55:af:bd:f3:a0:65:2c:06:8b:38:
a2:4f:dc:3c:94:8b:53:02:62:f8:d0:d8:d3:48:af:
7e:cf:af:d9:77:93:bc:1d:cb:5b:8c:f3:03:c0:c6:
7a:c5:6a:de:4b:81:10:e4:50:2f:d2:30:dd:f1:67:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BD:94:25:45:02:30:5D:0D:4E:DF:5C:3E:22:B9:25:F8:BD:8E:27
X509v3 Authority Key Identifier:
keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8f:98:ba:4b:2c:e4:76:47:46:3a:8f:ee:50:03:e8:c1:21:
d3:b6:b9:6a:02:07:1a:85:3e:0b:08:7d:19:02:e3:35:28:cd:
35:57:a8:f5:b8:e7:54:59:ca:e2:01:56:b7:4d:7b:b0:3c:0d:
60:82:97:af:19:57:e0:6e:4c:bd:5e:b0:4b:97:b7:d1:e2:61:
8d:04:00:a7:4f:a5:49:8d:a3:2a:aa:9c:e1:ac:32:48:5e:10:
27:45:08:5a:c8:5e:1f:1b:3c:55:d6:20:1d:dd:41:0d:56:b1:
50:d8:9e:9a:ac:a2:28:35:bc:6c:10:bf:10:a7:16:f1:e1:94:
b1:0a:4d:55:1d:2b:2c:06:e6:9e:02:ac:0e:eb:f5:da:fa:3b:
b3:92:ac:91:e2:10:6f:11:fc:09:70:57:bd:5d:80:00:f8:0b:
46:a4:7f:06:d2:96:ce:9f:31:8f:8d:ca:d9:0f:2e:6c:d8:68:
0d:c0:53:60:ae:39:cd:fe:a8:a5:b9:d7:4d:91:a7:9a:25:68:
a4:3f:f5:31:81:f0:30:c4:a4:7b:a2:0f:ea:44:a7:47:55:0e:
3f:c8:0f:6f:71:41:f0:9b:63:f5:e2:92:86:99:b0:34:76:3c:
77:92:33:30:a4:35:94:51:7d:16:da:63:3e:1b:4c:4d:7a:f4:
1a:c8:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:01:32 2025 by rpki-client