Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136312e302f32342d3234203d3e20323633393735.roa
File: 3133382e3235352e3136312e302f32342d3234203d3e20323633393735.roa (raw, json)
Hash identifier: JLYG7kw3Tw2J2CQWpcqmymqxacXFEKLau6iyBpZ64b0=
Subject key identifier: 93:FB:D6:C7:CE:00:F0:AB:26:89:27:75:9A:15:68:44:04:43:23:DC
Certificate issuer: /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial: 0DF64FC710F8118DF798F05679FBE936560B56AC
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136312e302f32342d3234203d3e20323633393735.roa
Signing time: Mon 08 Sep 2025 19:47:31 +0000
ROA not before: Mon 08 Sep 2025 19:42:31 +0000
ROA not after: Mon 07 Sep 2026 19:47:31 +0000
asID: 263975
IP address blocks: 138.255.161.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f6:4f:c7:10:f8:11:8d:f7:98:f0:56:79:fb:e9:36:56:0b:56:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Validity
Not Before: Sep 8 19:42:31 2025 GMT
Not After : Sep 7 19:47:31 2026 GMT
Subject: CN=93FBD6C7CE00F0AB268927759A156844044323DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:35:60:fc:db:e3:ed:ed:83:25:71:2b:c6:
e1:67:49:45:05:72:0a:0c:9c:fb:ca:b0:7e:ce:e8:
9e:bf:72:68:f0:9b:ff:06:f5:04:8b:0d:5f:9a:31:
99:d6:a6:f9:36:cb:aa:90:29:60:be:da:c4:86:37:
18:a9:a2:6a:16:55:df:83:bb:08:33:7c:77:0a:19:
07:ba:3a:03:57:ff:5f:ea:b9:de:d9:ac:c3:0d:30:
a8:74:ac:d6:ca:2a:eb:3c:dd:78:1a:5e:63:1e:08:
78:d9:ca:2a:e0:0d:3c:32:90:e6:df:e3:36:fc:76:
5a:ea:7b:fb:e0:98:0f:53:15:2d:6b:56:d0:cd:69:
a1:8c:19:a4:0f:80:82:33:2a:c8:e8:b1:e8:65:04:
c4:80:26:23:cb:84:46:e4:ca:89:6d:86:53:49:de:
35:5c:ec:44:37:d2:b2:b4:d7:fa:5c:62:40:6c:45:
ba:1e:5c:8e:f1:16:bb:6e:a0:4e:75:a0:b6:35:7e:
1f:3c:6b:87:8e:a8:14:57:75:9f:2e:f1:83:4d:5f:
8e:25:c5:84:ae:11:21:9f:d0:66:3c:39:09:f6:9e:
ed:fb:68:1d:92:ea:bb:35:dc:5e:bd:8f:3b:3c:56:
9c:d2:e3:e9:c7:8f:a5:96:d7:f8:91:f3:2f:01:c6:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FB:D6:C7:CE:00:F0:AB:26:89:27:75:9A:15:68:44:04:43:23:DC
X509v3 Authority Key Identifier:
keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136312e302f32342d3234203d3e20323633393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.161.0/24
Signature Algorithm: sha256WithRSAEncryption
99:60:64:0e:8c:34:67:b4:5b:39:23:03:d9:ed:fe:3d:36:6d:
05:1a:30:b7:06:62:1a:30:97:4a:23:4d:79:96:bd:a6:95:04:
31:60:6a:2c:ac:67:8b:00:ee:1a:c7:92:d6:11:bc:78:2d:f4:
a4:cb:07:dc:97:70:57:7d:bd:30:16:a4:e6:94:91:af:4d:5d:
08:ec:5c:15:05:43:a1:17:7d:b6:bb:4b:18:29:3c:be:a4:99:
85:9a:5e:37:15:4d:83:12:32:f8:6f:ed:83:ff:f2:fa:b3:0b:
ab:bb:1e:60:25:0f:98:63:72:3e:75:1d:ad:e5:5c:60:f4:b1:
33:65:2c:e4:7a:c5:94:54:0e:b3:f1:ec:12:73:af:c5:93:10:
96:04:c5:a2:7e:14:09:8d:45:05:d5:aa:aa:98:8c:e8:4e:89:
25:04:63:c2:73:57:6d:7a:eb:81:18:fb:23:df:36:7a:9a:9e:
ec:ad:61:aa:aa:96:8f:e3:01:4a:e4:b9:d8:ec:92:23:83:2b:
39:84:d5:2b:1c:cc:6d:f4:ee:11:da:c7:62:3e:7e:02:3c:d9:
05:33:9d:2f:89:7d:ed:b6:e6:de:ee:ea:08:2c:2a:bb:f6:a7:
2d:c2:a0:72:6e:b2:b7:96:9d:9d:30:f2:c9:a1:6c:69:00:2f:
6d:ca:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:54:36 2025 by rpki-client