Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS52903.roa
File: AS52903.roa (raw, json)
Hash identifier: 2nRB7xi6yeF3mRfymksPgEJASQSIzik/W+atAs0M+ws=
Subject key identifier: 02:AA:56:86:13:51:06:BF:30:28:DA:38:99:66:BC:36:17:10:B7:F9
Certificate issuer: /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial: 4A0F6D48F0BC5F9A87A70C59AEC2AAE6454C3863
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS52903.roa
Signing time: Wed 17 Sep 2025 14:48:12 +0000
ROA not before: Wed 17 Sep 2025 14:43:12 +0000
ROA not after: Wed 16 Sep 2026 14:48:12 +0000
asID: 52903
IP address blocks: 187.62.253.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0f:6d:48:f0:bc:5f:9a:87:a7:0c:59:ae:c2:aa:e6:45:4c:38:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Validity
Not Before: Sep 17 14:43:12 2025 GMT
Not After : Sep 16 14:48:12 2026 GMT
Subject: CN=02AA5686135106BF3028DA389966BC361710B7F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:77:37:55:4a:04:4e:d1:06:d9:ae:fb:41:
9f:3e:1e:3b:49:39:bb:66:4c:82:2a:15:cb:3c:ed:
e4:fb:aa:8f:9d:e0:44:9f:ed:c8:84:c1:00:44:30:
7d:60:b7:07:58:4c:fa:72:ac:c6:18:20:a3:a3:d5:
50:9f:fc:5a:b1:58:f1:a2:19:d0:ab:9e:35:74:76:
71:b6:0c:5a:55:d6:f8:88:94:dc:69:93:bf:b0:b2:
5d:af:16:9f:d7:2e:7b:69:57:62:0f:46:c1:18:b6:
49:76:13:9e:0f:47:c8:cb:11:21:cb:c2:8d:a6:a4:
62:bc:79:11:c3:b7:38:c9:46:76:a4:70:96:83:d9:
ef:95:a6:4c:f5:0e:24:42:d3:37:22:37:63:0b:9d:
0b:0b:27:19:26:6d:71:f0:a6:8e:1e:b0:94:35:39:
1d:c3:1e:37:6c:43:ea:1b:14:0e:c5:61:d9:11:f4:
6c:0d:ff:d4:7d:1b:4c:60:83:da:54:66:b5:ca:71:
a6:d7:e8:55:72:9e:b9:2f:f9:a4:0a:88:16:6c:a8:
e4:ef:2d:2d:46:28:ed:d5:1a:9c:67:e3:01:32:c5:
93:f6:b8:5b:71:b7:75:9c:54:de:9d:89:96:11:1c:
68:5f:d4:6b:3f:70:69:0a:47:38:db:a2:92:3a:24:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:56:86:13:51:06:BF:30:28:DA:38:99:66:BC:36:17:10:B7:F9
X509v3 Authority Key Identifier:
keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS52903.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.62.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:bf:a6:47:30:94:5f:3f:9d:1a:77:f8:43:24:6f:69:0b:ee:
cb:14:46:fd:cd:5c:c4:d5:8e:96:ca:67:eb:96:85:a8:f2:66:
fd:d4:52:c5:2f:5d:0f:3b:e3:e9:3e:e9:5e:ac:86:7e:ce:da:
15:15:66:9d:2e:1b:e9:9f:15:9a:46:5b:f1:18:50:fe:34:f3:
ea:a9:03:b4:6e:f2:d1:48:83:18:57:56:2d:7c:b6:7a:c9:46:
61:ae:9c:26:33:f6:73:4b:49:cb:35:49:ce:33:d9:f0:0f:41:
0d:de:63:14:86:a8:ef:14:4b:c4:b3:92:33:91:75:a1:54:cd:
dc:7d:5d:f0:55:71:15:7f:4b:51:0b:ee:8e:13:fb:b7:d1:a1:
b9:b6:3f:ca:ed:2c:c2:e0:fc:9b:13:df:44:d3:1c:d0:58:29:
84:d0:9b:f8:19:09:b4:79:0c:73:aa:62:0f:fc:7b:74:c2:f5:
5e:4c:86:05:bd:1d:67:ea:4d:f0:c4:f0:95:69:22:48:32:25:
a8:7d:97:3a:0d:e4:88:97:44:44:29:0e:cf:2e:82:4c:42:0b:
dc:bb:ff:5a:8c:fa:eb:ce:4f:5f:c1:eb:f1:df:74:a1:1d:bf:
4c:15:05:12:44:07:e3:60:b0:f2:c3:c2:36:78:bf:27:d7:83:
b2:ec:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:31:39 2025 by rpki-client