Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
File: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (raw, json)
Hash identifier: cNA368g1hmkEWVqySJ82Uc6Z2owwDVqdXkW5UdhsexY=
Subject key identifier: FF:07:B8:48:B5:6F:6C:3D:D5:7E:65:71:CF:DD:B2:0D:81:71:B4:9E
Certificate issuer: /CN=AB5501490ACA7067C26C7BD37A447971D139570B
Certificate serial: 4CE332BEAA856CD7D86961FAEE909CE409B40FA8
Authority key identifier: AB:55:01:49:0A:CA:70:67:C2:6C:7B:D3:7A:44:79:71:D1:39:57:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB5501490ACA7067C26C7BD37A447971D139570B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
Signing time: Tue 01 Jul 2025 13:46:04 +0000
ROA not before: Tue 01 Jul 2025 13:41:04 +0000
ROA not after: Tue 30 Jun 2026 13:46:04 +0000
asID: 262403
IP address blocks: 187.85.60.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e3:32:be:aa:85:6c:d7:d8:69:61:fa:ee:90:9c:e4:09:b4:0f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5501490ACA7067C26C7BD37A447971D139570B
Validity
Not Before: Jul 1 13:41:04 2025 GMT
Not After : Jun 30 13:46:04 2026 GMT
Subject: CN=FF07B848B56F6C3DD57E6571CFDDB20D8171B49E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:86:42:88:96:e8:ee:af:d0:b2:95:e2:36:
c3:55:f9:67:78:fa:75:24:52:a4:69:0d:e9:ed:a0:
78:0c:f8:d7:18:b8:52:31:84:2d:18:73:12:78:b2:
92:5c:e4:aa:ea:ce:13:2d:1a:62:44:e4:e8:e3:4f:
a3:8d:7f:f6:1c:df:d9:72:ec:38:50:49:42:ba:54:
03:2b:07:26:89:8c:db:58:3a:26:6e:3b:de:ba:7a:
43:ba:8b:9e:92:15:7f:05:b4:36:3e:ec:9c:f1:7c:
06:15:05:fe:76:ec:16:35:f8:d5:cd:41:af:73:bf:
47:9d:40:c4:46:7e:67:67:ee:56:d8:28:8b:db:36:
63:29:8e:9b:0c:16:c9:80:2b:6a:d8:a0:35:4e:eb:
f9:b6:89:4f:16:5a:09:3d:d9:86:a3:c0:82:62:20:
e6:12:5a:43:ae:e4:5e:a8:52:ff:7f:18:b0:52:76:
cc:61:57:51:f8:5b:4e:3f:e8:20:4b:e5:f7:d4:5b:
34:bd:d1:3a:92:d5:9a:23:cc:88:ee:f5:db:6d:51:
36:c6:20:aa:4c:f0:c7:1d:16:8b:84:4b:c3:56:01:
e5:45:1c:3e:a9:72:7b:5d:e9:20:76:d6:fa:cd:c0:
b6:d6:32:57:13:7d:6e:7a:f4:ff:b9:82:d2:07:35:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:07:B8:48:B5:6F:6C:3D:D5:7E:65:71:CF:DD:B2:0D:81:71:B4:9E
X509v3 Authority Key Identifier:
keyid:AB:55:01:49:0A:CA:70:67:C2:6C:7B:D3:7A:44:79:71:D1:39:57:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/AB5501490ACA7067C26C7BD37A447971D139570B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB5501490ACA7067C26C7BD37A447971D139570B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.85.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:52:b0:53:7d:25:c4:33:52:a2:11:3f:a1:dc:44:a1:8e:79:
d9:af:5c:8d:5a:7a:1d:2c:d4:ad:aa:70:0d:b0:01:c0:91:aa:
ca:b5:5d:a4:67:ec:33:91:81:b5:6f:9f:f5:ab:fb:b3:74:bd:
06:9d:61:3a:27:0a:d8:38:ea:f1:b0:02:65:b2:27:13:dc:8b:
9b:0e:56:41:0b:71:92:95:3f:8c:7b:7b:be:e0:42:fc:7a:5d:
6a:c9:47:35:af:79:6b:9d:5a:5d:e5:a7:b8:4e:17:2a:0e:cb:
0e:1d:e0:7a:15:f8:ce:65:7c:ab:6d:2a:b6:e7:fa:ee:74:d3:
2b:e1:a5:77:30:71:bb:d2:4f:71:33:59:5e:1b:37:0f:12:ad:
f5:75:01:2c:66:f2:ff:29:cb:02:e8:ed:41:d6:47:2f:29:74:
c8:2b:ec:59:0d:10:63:96:ec:2c:43:68:5a:96:65:02:11:a4:
db:5a:ad:80:75:fa:5e:8a:23:ef:7b:b5:f8:7b:4e:23:1d:d7:
5a:d5:5b:ec:f5:62:6f:fe:d2:36:52:b1:46:46:05:fb:ad:7c:
39:44:cb:0a:07:1e:39:9f:4f:2c:a4:3c:8f:ad:07:1a:1f:cf:
34:bd:8e:72:2c:d1:94:2b:9f:e7:2c:f8:17:11:26:18:71:8e:
4a:e8:da:45
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTOMyvqqFbNfYaWH67pCc5Am0D6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI1NTAxNDkwQUNBNzA2N0MyNkM3QkQzN0E0NDc5NzFE
MTM5NTcwQjAeFw0yNTA3MDExMzQxMDRaFw0yNjA2MzAxMzQ2MDRaMDMxMTAvBgNV
BAMTKEZGMDdCODQ4QjU2RjZDM0RENTdFNjU3MUNGRERCMjBEODE3MUI0OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxD4ZCiJbo7q/QspXiNsNV+Wd4
+nUkUqRpDentoHgM+NcYuFIxhC0YcxJ4spJc5KrqzhMtGmJE5OjjT6ONf/Yc39ly
7DhQSUK6VAMrByaJjNtYOiZuO966ekO6i56SFX8FtDY+7JzxfAYVBf527BY1+NXN
Qa9zv0edQMRGfmdn7lbYKIvbNmMpjpsMFsmAK2rYoDVO6/m2iU8WWgk92YajwIJi
IOYSWkOu5F6oUv9/GLBSdsxhV1H4W04/6CBL5ffUWzS90TqS1ZojzIju9dttUTbG
IKpM8McdFouES8NWAeVFHD6pcntd6SB21vrNwLbWMlcTfW569P+5gtIHNT6/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/we4SLVvbD3VfmVxz92yDYFxtJ4wHwYDVR0j
BBgwFoAUq1UBSQrKcGfCbHvTekR5cdE5VwswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZpa0s2S0V6UzdWbldQQUpuVXBqb0RycmJXZjRrOWdKTlI5VDFUbndu
SnkvMC9BQjU1MDE0OTBBQ0E3MDY3QzI2QzdCRDM3QTQ0Nzk3MUQxMzk1NzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCNTUwMTQ5MEFDQTcwNjdD
MjZDN0JEMzdBNDQ3OTcxRDEzOTU3MEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmaWtLNktFelM3Vm5XUEFKblVwam9EcnJiV2Y0azlnSk5SOVQxVG53bkp5LzAv
MzEzODM3MmUzODM1MmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCu1U8MA0GCSqGSIb3DQEBCwUAA4IBAQCmUrBTfSXE
M1KiET+h3EShjnnZr1yNWnodLNStqnANsAHAkarKtV2kZ+wzkYG1b5/1q/uzdL0G
nWE6JwrYOOrxsAJlsicT3IubDlZBC3GSlT+Me3u+4EL8el1qyUc1r3lrnVpd5ae4
ThcqDssOHeB6FfjOZXyrbSq25/rudNMr4aV3MHG70k9xM1leGzcPEq31dQEsZvL/
KcsC6O1B1kcvKXTIK+xZDRBjluwsQ2halmUCEaTbWq2AdfpeiiPve7X4e04jHdda
1Vvs9WJv/tI2UrFGRgX7rXw5RMsKBx45n08spDyPrQcaH880vY5yLNGUK5/nLPgX
ESYYcY5K6NpF
-----END CERTIFICATE-----
Generated at Thu Jul 3 18:47:45 2025 by rpki-client