Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa
File: 3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa (raw, json)
Hash identifier: mBU+3p7/FRtrSZYwl40UzJfLhpwNBIRp9bEtIDdx3nU=
Subject key identifier: 8F:0A:74:89:36:AD:AF:0C:1E:B1:4A:BB:E2:67:37:64:1D:B2:A3:01
Certificate issuer: /CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
Certificate serial: 1306A100D3C4DBA6A4DC6350A44FE43538130DF2
Authority key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa
Signing time: Thu 03 Apr 2025 23:11:31 +0000
ROA not before: Thu 03 Apr 2025 23:06:31 +0000
ROA not after: Thu 02 Apr 2026 23:11:31 +0000
asID: 264918
IP address blocks: 168.228.208.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:06:a1:00:d3:c4:db:a6:a4:dc:63:50:a4:4f:e4:35:38:13:0d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62
Validity
Not Before: Apr 3 23:06:31 2025 GMT
Not After : Apr 2 23:11:31 2026 GMT
Subject: CN=8F0A748936ADAF0C1EB14ABBE26737641DB2A301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:c2:bc:a6:76:0f:0b:42:1e:23:ca:1f:52:
b7:d5:01:17:17:04:40:e5:30:7f:36:a1:23:06:5e:
95:ef:78:c6:6f:36:13:c9:26:91:97:ea:23:1e:f4:
02:f5:90:b3:d4:3f:54:55:a2:85:08:c0:f3:7d:86:
c3:c6:a5:fc:18:a2:4a:3b:13:53:ec:43:e8:ed:3e:
f2:59:f8:27:43:43:99:d9:cd:ed:18:4e:c5:32:f5:
1d:d8:32:6b:02:80:f5:57:0a:26:0f:06:3d:f8:90:
2c:b1:04:a9:8d:79:12:24:7f:af:80:e4:62:bc:d7:
7a:fc:b9:1a:b0:c6:7d:47:6a:fb:2d:d0:c5:9e:1d:
92:e4:9c:57:48:58:6a:32:08:33:7e:64:b6:a0:8e:
d3:f6:ce:13:6a:59:8b:85:34:09:eb:fd:cd:45:f5:
0a:23:5e:d6:b7:dc:d4:67:18:f9:22:05:9a:4b:69:
9e:62:bf:88:6c:6b:c5:b6:60:8d:17:6a:01:19:18:
f9:95:68:9e:d4:28:b9:21:0f:52:f5:ae:be:3a:9d:
a9:62:e9:52:76:c9:5a:47:15:d7:dd:e6:cb:86:c1:
ad:26:da:65:bb:09:e3:a8:2f:46:cd:df:d1:bd:da:
78:2d:1e:72:82:62:7c:de:1d:a8:e7:0c:96:b5:23:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0A:74:89:36:AD:AF:0C:1E:B1:4A:BB:E2:67:37:64:1D:B2:A3:01
X509v3 Authority Key Identifier:
keyid:1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/3136382e3232382e3230382e302f32322d3234203d3e20323634393138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.208.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:6e:af:0c:8b:2e:12:2c:c3:8b:f5:12:5c:91:ed:f8:87:22:
ab:7b:2d:30:4d:9b:bf:6c:ff:d3:9a:76:b0:a8:55:13:cb:24:
ec:37:28:5a:5c:ba:ad:79:ef:96:78:12:5f:bc:19:ff:45:93:
a0:c8:ca:94:47:ac:07:7e:83:c7:de:54:e9:4b:a4:b6:95:60:
3a:9b:29:e0:3f:76:e0:f7:a4:7c:13:14:b3:68:60:31:bc:84:
ed:bd:ac:cd:54:0f:9c:26:0f:19:72:82:a3:a4:63:9a:76:56:
c5:e6:a8:86:76:75:58:aa:24:f5:ca:1a:74:f8:88:06:47:65:
38:a8:cf:ba:6c:d3:38:b6:b6:aa:4b:58:97:e2:45:83:1d:6a:
20:9d:ce:ca:81:bb:c5:e7:02:b2:80:be:fb:b8:97:df:df:86:
b9:f2:80:de:36:8f:cf:5b:c4:b4:4c:55:25:06:dc:4e:82:f2:
44:32:8a:d4:0e:02:72:da:0d:f9:22:49:1f:82:aa:a5:9b:18:
fa:48:87:5a:99:66:e3:9c:b3:1d:17:49:71:2f:b7:a6:6f:39:
96:38:b0:06:55:96:ca:e4:f2:e9:8f:cf:91:9f:99:66:aa:3f:
22:04:14:8d:52:e3:ef:7d:4b:ef:0e:18:f3:80:96:66:71:92:
54:82:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:45:34 2025 by rpki-client