Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa
File: 3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa (raw, json)
Hash identifier: 72DYh9uaCKORnQR2rIu5SRVQBmVHS0TVL+YLhzm9VVA=
Subject key identifier: A2:1F:E9:BD:4B:DF:8B:27:6A:B4:61:7F:AF:FF:C2:17:4D:26:16:01
Certificate issuer: /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial: 34F25D24909DB0BE0799270617DE3B338F0443B2
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa
Signing time: Mon 08 Sep 2025 19:47:31 +0000
ROA not before: Mon 08 Sep 2025 19:42:31 +0000
ROA not after: Mon 07 Sep 2026 19:47:31 +0000
asID: 263975
IP address blocks: 138.255.160.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f2:5d:24:90:9d:b0:be:07:99:27:06:17:de:3b:33:8f:04:43:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Validity
Not Before: Sep 8 19:42:31 2025 GMT
Not After : Sep 7 19:47:31 2026 GMT
Subject: CN=A21FE9BD4BDF8B276AB4617FAFFFC2174D261601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:a4:8d:ca:45:73:0e:2b:d7:1a:6a:98:b2:
b2:de:b5:ad:1d:3a:0b:ee:87:55:78:32:6f:a3:45:
25:bc:4c:3d:47:57:c7:09:86:bc:52:92:40:5b:76:
46:59:2b:68:c5:05:ac:41:e0:11:e1:4b:19:13:25:
bf:e5:ac:85:8d:a2:a0:93:89:35:b0:9c:0a:52:b5:
5a:62:97:a3:e7:db:5b:e5:19:5b:41:68:97:4d:11:
d1:04:0e:67:b4:c4:4c:58:99:c4:72:4f:6f:7a:48:
f4:e9:7d:ee:53:19:f5:68:19:f1:a2:b7:5c:2d:dc:
50:bc:40:63:30:ce:e6:f0:47:4f:72:e9:c6:e7:23:
69:17:c5:c8:55:c1:90:6b:7c:d3:a5:d6:ac:f3:4e:
75:6a:c1:db:91:0b:02:66:df:28:15:c0:b3:01:44:
cb:c6:38:eb:0e:73:05:2d:18:57:d9:f4:2a:ad:4b:
39:c5:19:78:74:8e:9e:5b:96:cb:8d:fa:84:35:e0:
49:0d:7c:14:ed:b2:1f:78:9f:4d:3d:e6:3c:88:fc:
1d:9a:8a:f9:c6:b9:6e:29:10:cd:3f:9f:08:28:3a:
fb:5b:c8:af:ad:f4:45:37:33:f7:51:15:9e:ea:64:
03:80:4d:0d:38:48:80:ce:33:32:42:b2:66:12:94:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:E9:BD:4B:DF:8B:27:6A:B4:61:7F:AF:FF:C2:17:4D:26:16:01
X509v3 Authority Key Identifier:
keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d6:fa:fb:59:a6:0a:fb:70:8e:2e:14:71:28:06:82:68:f4:
8a:fa:76:0b:02:07:69:ab:be:c1:c9:5a:b3:ea:fa:da:40:d6:
6d:ce:48:1e:c4:dd:8c:8e:8a:48:37:ee:4a:23:c1:8b:66:79:
db:8a:e9:97:04:59:03:54:53:52:5e:b7:af:56:96:70:76:9e:
e8:32:fc:bb:96:49:07:50:12:c6:d0:79:38:34:b9:c6:60:50:
32:6d:e3:a8:ee:a9:35:5e:b6:09:36:70:c2:e9:ab:74:0a:8d:
1e:af:1c:cc:b7:ca:18:42:ee:5e:5e:f6:80:a0:88:c1:91:53:
07:a4:57:af:bd:c3:49:eb:9a:57:47:cd:c5:01:55:d6:9b:b1:
86:3b:1f:6a:d7:d7:51:a4:fb:d7:c0:17:78:de:f1:e7:da:b5:
bd:4a:21:7c:43:34:89:39:cf:c6:38:32:f8:43:d1:40:55:40:
22:fe:c7:f2:2e:29:77:77:ac:82:0d:27:15:fa:06:43:32:b0:
3c:32:77:27:4e:38:e9:94:93:6d:64:2b:b3:1d:a1:2b:72:79:
4b:97:66:88:b0:c9:e9:a2:af:2f:25:52:f0:50:8d:05:fb:07:
41:e3:27:49:94:b8:bc:7c:3e:41:76:19:5d:85:00:c2:fc:f2:
0c:e4:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:34:55 2025 by rpki-client