Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
File: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (raw, json)
Hash identifier: B8WzLn3XrQCgfEBXDFpoBWj3MxuCFKFqZCUDtlZzZY0=
Subject key identifier: D4:26:B8:4E:01:61:4E:D1:EE:86:21:D6:73:93:EB:D6:07:51:97:79
Certificate issuer: /CN=AB5501490ACA7067C26C7BD37A447971D139570B
Certificate serial: 4BF3BA039CA5E4F4B330B1AA5527360394CE7FD5
Authority key identifier: AB:55:01:49:0A:CA:70:67:C2:6C:7B:D3:7A:44:79:71:D1:39:57:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB5501490ACA7067C26C7BD37A447971D139570B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
Signing time: Tue 01 Jul 2025 13:46:03 +0000
ROA not before: Tue 01 Jul 2025 13:41:03 +0000
ROA not after: Tue 30 Jun 2026 13:46:03 +0000
asID: 262403
IP address blocks: 187.61.88.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f3:ba:03:9c:a5:e4:f4:b3:30:b1:aa:55:27:36:03:94:ce:7f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5501490ACA7067C26C7BD37A447971D139570B
Validity
Not Before: Jul 1 13:41:03 2025 GMT
Not After : Jun 30 13:46:03 2026 GMT
Subject: CN=D426B84E01614ED1EE8621D67393EBD607519779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:53:9c:2d:84:8b:7c:a0:1f:66:b6:11:82:
dc:d5:fa:fd:a4:c1:12:64:49:ad:18:e9:f4:43:8c:
7a:15:65:c1:17:d4:18:4f:50:34:f7:da:ff:21:50:
4f:bc:68:d9:4d:60:0e:ee:d6:6c:5d:a4:1d:51:f1:
9d:3b:da:91:74:1f:3f:91:cd:8d:6d:f3:6c:7e:db:
41:16:20:c6:13:4e:c1:5b:6c:2d:7e:21:5a:13:4a:
89:32:2b:9f:c6:73:ac:c9:11:67:d8:f4:a0:ce:a5:
b0:35:44:12:2a:97:e2:f8:36:d7:a4:89:ce:95:f6:
90:58:a5:5b:f3:3f:71:48:da:e3:a3:58:86:98:5d:
0b:8c:4c:2b:07:3d:ae:c4:c8:45:c7:18:48:bc:fe:
0e:d2:12:79:17:28:4b:71:73:5b:a4:8e:22:5c:7c:
73:0e:e7:fb:d3:47:18:53:b7:6b:35:f7:b6:6a:5d:
a2:b7:e7:f6:e5:97:32:b6:cc:f5:5e:1f:f8:d5:a8:
65:31:bc:26:38:8e:2f:41:c2:59:f9:0d:27:b6:a9:
5e:97:84:6b:dc:71:b5:06:cd:e5:d1:ec:ee:7a:fc:
ac:f4:ca:74:38:0c:70:f0:b6:dc:37:47:4e:33:f7:
6e:cd:c5:8e:4a:8e:c8:2d:5b:04:ad:34:53:ff:14:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:26:B8:4E:01:61:4E:D1:EE:86:21:D6:73:93:EB:D6:07:51:97:79
X509v3 Authority Key Identifier:
keyid:AB:55:01:49:0A:CA:70:67:C2:6C:7B:D3:7A:44:79:71:D1:39:57:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/AB5501490ACA7067C26C7BD37A447971D139570B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB5501490ACA7067C26C7BD37A447971D139570B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:71:f7:72:ff:b4:7e:56:f7:56:48:15:7b:86:f1:5e:44:8c:
6a:ac:da:1b:a0:d2:04:a2:99:24:11:27:26:c2:df:19:37:4a:
9d:bd:52:aa:77:4d:f6:09:b0:6f:54:ce:d5:ad:70:ed:32:a8:
08:a1:16:e3:d3:d9:1f:09:0a:78:82:73:92:dc:ff:d5:a2:fd:
2f:87:89:73:31:61:6f:1f:ca:bc:08:88:8f:73:1f:b9:88:f7:
05:a6:e8:b8:8d:7d:f0:e9:f4:c2:ca:4b:c1:dd:5b:c3:d7:c6:
f6:3d:57:91:1a:8f:79:da:cd:66:a6:00:d1:a9:ae:a6:1a:a1:
c8:1b:bc:87:11:11:81:f1:d8:46:2f:97:cf:fd:89:dd:ac:28:
16:bd:10:09:8e:ba:b2:b6:1b:a6:35:2b:2f:49:96:ee:46:7b:
60:4d:32:be:a6:4a:fe:46:c8:4a:97:4b:f0:d8:40:95:47:21:
19:dc:e9:67:f2:80:99:c5:f3:56:15:3c:df:c8:40:f4:e6:2c:
4b:4c:8e:9c:01:9b:c2:32:13:ea:fd:11:58:92:47:91:38:3c:
f7:03:c9:ab:c9:43:36:43:6d:eb:78:eb:13:40:9d:6b:69:30:
43:93:0b:f9:44:68:9c:82:99:87:0d:e8:a9:3a:cc:3b:6b:e6:
b5:1c:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:21:16 2025 by rpki-client