Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e322e302f32342d3234203d3e20323635323430.roa
File: 3136382e302e322e302f32342d3234203d3e20323635323430.roa (raw, json)
Hash identifier: +E+NC1y1e8e0K/e4so432GkxK4QlZpEFghMjbmBnu/4=
Subject key identifier: 91:81:6F:68:35:D6:BA:EE:9E:DB:86:DA:A3:45:AF:4B:E5:E5:23:2B
Certificate issuer: /CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Certificate serial: 1DAB5B09E7D5234612EE42BD5C95E9D6FBDD98F1
Authority key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e322e302f32342d3234203d3e20323635323430.roa
Signing time: Thu 03 Apr 2025 23:13:15 +0000
ROA not before: Thu 03 Apr 2025 23:08:15 +0000
ROA not after: Thu 02 Apr 2026 23:13:15 +0000
asID: 265240
IP address blocks: 168.0.2.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ab:5b:09:e7:d5:23:46:12:ee:42:bd:5c:95:e9:d6:fb:dd:98:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Validity
Not Before: Apr 3 23:08:15 2025 GMT
Not After : Apr 2 23:13:15 2026 GMT
Subject: CN=91816F6835D6BAEE9EDB86DAA345AF4BE5E5232B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:ff:6a:52:e1:89:d1:7f:ed:6e:00:9f:3a:
fc:45:e1:9f:ba:fe:c2:25:7d:c9:58:b9:81:93:40:
79:50:81:c1:3b:0b:58:ef:85:46:27:c0:64:43:2d:
c4:2a:19:dc:bc:76:de:80:91:7a:32:07:0d:0d:5e:
c0:78:dd:06:13:65:2b:d6:35:29:30:e3:03:a3:9d:
a3:9f:5f:df:3d:45:61:88:2e:99:9c:df:1d:fe:3c:
51:36:c3:2f:e7:a0:b1:28:49:b1:71:3e:be:f4:90:
57:6c:ef:11:c6:05:55:ac:59:ac:30:fe:de:c1:b7:
f3:ad:16:54:16:a5:c5:a3:89:72:48:a5:f0:70:9b:
60:62:6e:dc:08:c6:72:f1:46:a3:15:7d:07:ce:3a:
4e:59:dc:fb:d8:4c:7c:18:cd:84:b2:cd:2f:e4:30:
6c:5f:4d:aa:e2:50:8c:75:f5:e9:b1:34:38:c8:a5:
b7:d5:90:55:97:a4:82:93:43:55:f1:c3:e3:93:07:
6d:48:af:fb:02:58:58:a6:a1:68:16:d1:5f:8e:e4:
02:01:83:01:09:b9:d0:e0:b8:9f:dc:6c:09:ad:64:
31:2d:1d:19:08:cd:e0:54:66:ce:1d:51:55:0c:d4:
3f:5f:ae:02:9f:d0:4a:1a:78:91:a5:18:84:58:a6:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:81:6F:68:35:D6:BA:EE:9E:DB:86:DA:A3:45:AF:4B:E5:E5:23:2B
X509v3 Authority Key Identifier:
keyid:9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/3136382e302e322e302f32342d3234203d3e20323635323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.2.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2b:92:79:e8:71:bc:27:d7:f4:b1:9a:60:26:43:bc:4c:f5:
64:4b:85:fb:db:90:39:9f:59:e8:25:0b:cc:e9:2e:32:99:73:
82:70:76:bc:b1:69:5b:f4:d9:ed:15:c2:ba:6f:52:54:79:85:
30:04:36:79:12:76:05:a7:04:41:4f:0c:78:86:70:6c:1b:90:
85:70:5e:1b:a6:4e:50:6c:b6:63:1d:e5:f0:7e:4e:a1:61:9f:
30:b3:62:00:50:d9:a5:aa:cc:57:9d:7a:a1:25:81:90:20:52:
87:a8:60:4b:4e:70:b1:a5:66:fc:21:1b:ba:ed:d1:91:44:fa:
12:fe:20:9f:33:49:bc:75:07:75:05:7f:55:3b:fe:78:98:92:
2e:c6:a4:f3:9a:b5:9b:eb:bd:e8:cd:7a:27:c2:22:cd:fe:b0:
00:60:95:b3:d4:c1:57:12:4e:4a:a8:86:5a:ae:5b:e9:8e:75:
dc:2a:6d:81:16:ad:ee:fa:9e:72:e8:32:77:1e:ce:03:3e:66:
34:93:e9:43:bb:2e:f0:3f:86:16:f3:63:eb:34:2a:d4:eb:d1:
f8:d4:b3:1b:91:51:7a:98:30:a4:d5:01:e0:db:3b:8b:be:12:
f4:09:83:ed:3d:bb:66:0f:38:74:54:83:f6:76:fd:82:1f:cd:
94:65:82:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:55:47 2025 by rpki-client