Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/3139302e382e382e302f32322d3332203d3e20323731363935.roa
File: 3139302e382e382e302f32322d3332203d3e20323731363935.roa (raw, json)
Hash identifier: UOxZvvLgKesJUsb9oSpjbimPxuwtGB5gngWRX47b3fk=
Subject key identifier: 92:09:1F:FA:C1:98:86:1C:BE:14:56:A8:34:81:F9:9A:AB:8A:FF:CE
Certificate issuer: /CN=328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38
Certificate serial: 1D80F435DD0716CAAA9B75AE8DE94BAA8DE85C7F
Authority key identifier: 32:85:73:A0:E4:A7:C9:F4:46:6B:FF:0B:6C:B9:F8:1F:FF:33:EA:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/3139302e382e382e302f32322d3332203d3e20323731363935.roa
Signing time: Sat 09 Aug 2025 14:13:04 +0000
ROA not before: Sat 09 Aug 2025 14:08:04 +0000
ROA not after: Sat 08 Aug 2026 14:13:04 +0000
asID: 271695
IP address blocks: 190.8.8.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:80:f4:35:dd:07:16:ca:aa:9b:75:ae:8d:e9:4b:aa:8d:e8:5c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38
Validity
Not Before: Aug 9 14:08:04 2025 GMT
Not After : Aug 8 14:13:04 2026 GMT
Subject: CN=92091FFAC198861CBE1456A83481F99AAB8AFFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:86:96:cd:e8:73:56:32:82:ff:c7:84:b9:
05:4f:f2:b4:3c:7b:62:78:6d:17:47:db:1b:e9:28:
93:cb:27:c8:b8:72:1f:0e:33:0a:5e:f6:25:13:4f:
a6:84:d6:de:48:51:4a:8b:41:40:f6:46:e0:c2:80:
54:3b:e3:8b:70:d1:15:3d:67:76:87:83:7a:13:30:
67:0d:7f:4f:1c:c6:78:11:66:5c:bd:e0:a3:a1:76:
40:8e:ce:29:fd:ad:0d:fd:37:6e:68:d8:27:56:d0:
fd:e5:53:7f:f5:a0:4d:41:19:c4:b5:5d:ab:da:91:
dc:ad:b1:4b:76:46:c4:ee:2c:04:4c:f4:55:37:6c:
91:33:83:59:2c:5e:79:51:ed:07:52:52:ec:12:66:
3f:a2:84:6e:fb:4d:39:0e:77:57:a0:91:ec:bd:94:
ae:18:15:90:08:64:7f:e4:8a:ea:5c:e6:e9:3f:14:
d3:c2:c1:04:e4:29:43:17:ba:f4:ef:48:bf:df:b3:
88:d1:dd:7f:c4:df:be:40:3d:ed:e3:25:50:50:af:
9d:6f:a3:26:09:6e:6c:bb:0a:50:ae:03:68:a1:c2:
af:98:c7:dc:1d:b6:fd:1d:1d:f4:36:9b:4a:3a:ec:
26:71:18:f6:3f:e5:82:ac:e4:27:75:ec:78:36:d7:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:09:1F:FA:C1:98:86:1C:BE:14:56:A8:34:81:F9:9A:AB:8A:FF:CE
X509v3 Authority Key Identifier:
keyid:32:85:73:A0:E4:A7:C9:F4:46:6B:FF:0B:6C:B9:F8:1F:FF:33:EA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/3139302e382e382e302f32322d3332203d3e20323731363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.8.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:48:8d:8a:db:45:ed:4d:6c:51:ab:54:9f:ae:31:8d:94:2f:
18:d1:9d:04:3b:e9:b5:f0:ac:5f:e4:6b:52:4a:70:92:f7:8d:
42:7f:b0:5c:42:2f:ed:7f:30:07:09:df:1f:60:a2:ff:07:a7:
2c:64:44:54:e0:13:8f:2e:47:b4:47:1e:fd:76:43:ca:db:7f:
d3:f1:62:07:ae:32:93:ca:13:71:55:ce:db:8e:54:00:0e:2d:
f6:f0:63:1a:da:40:54:4a:48:6e:52:27:11:c0:66:30:7a:68:
6e:bd:f0:9b:1f:32:f9:5d:8d:e0:8d:d8:35:1e:0c:bc:a7:67:
6c:6b:4d:f9:f2:9f:39:11:7d:ee:ef:a3:9a:4c:ac:4a:87:b2:
4f:d6:0f:f1:83:12:4d:9a:5a:fb:97:40:d0:87:fd:21:34:28:
55:97:fd:cc:d2:5c:47:da:65:82:42:26:72:60:28:ec:a7:ab:
5d:64:32:5f:40:b2:4c:9c:3d:fc:3b:8e:4d:14:bb:da:cb:32:
a7:c2:cc:51:0b:6b:99:2d:43:78:70:07:80:90:c1:d4:41:08:
13:cc:95:c1:d0:8b:a9:6b:aa:78:23:bd:5c:1f:c4:75:f0:f5:
01:48:56:66:c3:d1:3c:af:6b:0e:46:39:f8:ec:d5:10:95:7f:
29:db:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:03 2025 by rpki-client