Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa
File: 3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa (raw, json)
Hash identifier: SdErdevQAXDKfzBYELnkHRFcfZ+uu8UbrNRUay6BhCQ=
Subject key identifier: 97:6C:1D:49:18:8A:0C:38:05:8D:A5:EC:3A:01:36:3E:A8:59:B9:DC
Certificate issuer: /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial: 1D7036E273AF88FE41E14E91BB5E7717F539CB1E
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa
Signing time: Mon 08 Sep 2025 19:47:31 +0000
ROA not before: Mon 08 Sep 2025 19:42:31 +0000
ROA not after: Mon 07 Sep 2026 19:47:31 +0000
asID: 263975
IP address blocks: 138.255.162.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:70:36:e2:73:af:88:fe:41:e1:4e:91:bb:5e:77:17:f5:39:cb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Validity
Not Before: Sep 8 19:42:31 2025 GMT
Not After : Sep 7 19:47:31 2026 GMT
Subject: CN=976C1D49188A0C38058DA5EC3A01363EA859B9DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:2e:d0:63:37:86:d5:3f:5c:bc:4a:67:39:
0b:39:55:b3:79:93:16:60:2d:3e:5d:48:4a:72:dc:
30:ae:71:a6:b1:4f:c7:be:7d:72:96:68:25:55:38:
31:dd:07:9d:3f:c6:ff:38:41:d4:21:61:62:3d:4a:
2d:83:cc:07:4e:33:ef:a9:46:d5:8c:a2:88:77:7a:
5f:97:8d:bb:e5:13:5b:8e:61:e1:5a:ff:68:ae:2f:
fc:ad:e0:bf:95:e8:01:e1:dd:96:76:c7:0c:1e:41:
19:99:4c:ef:eb:bb:df:40:98:0c:c3:d8:8c:ee:43:
52:3f:78:7c:2c:20:4c:11:81:37:63:26:f8:c7:ee:
3b:db:ea:1a:ba:44:db:ac:b8:f8:84:ef:ae:79:8e:
26:f4:8c:1a:91:1d:cc:9e:37:23:86:55:77:5a:6b:
b9:f3:88:b8:bb:50:3d:37:02:76:0c:ff:e2:f2:d0:
cb:b2:16:85:72:83:c6:5b:6b:e0:cc:75:7c:7a:2f:
b8:75:1d:fe:30:b0:27:ff:1d:96:0e:ab:3c:3e:7f:
8b:2f:4c:14:d2:e5:42:88:96:a4:92:bd:4b:cb:10:
ec:38:0a:1c:24:dc:f2:ab:2d:a9:d2:de:b6:f2:03:
1d:97:81:45:f9:9c:ee:07:cf:93:58:e7:bc:6b:43:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:1D:49:18:8A:0C:38:05:8D:A5:EC:3A:01:36:3E:A8:59:B9:DC
X509v3 Authority Key Identifier:
keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136322e302f32342d3234203d3e20323633393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.162.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:31:8e:13:cc:2a:b9:cd:fb:16:0b:db:69:42:27:6c:18:e5:
73:6f:65:2f:bf:62:de:d2:95:71:13:58:78:c0:2d:e8:3b:71:
6f:3b:22:f5:fc:fb:53:5a:51:28:e0:71:85:ce:ff:6f:3e:29:
2e:db:6b:c8:b9:f6:d7:fe:11:7c:61:a5:f7:93:d7:d8:77:38:
0f:d6:08:3a:bf:27:d6:f5:d0:48:cb:0f:7d:70:75:f9:a6:19:
2e:ea:46:19:36:27:3b:ba:9f:3b:56:d6:c2:a9:90:53:49:20:
53:b9:07:a4:5a:2c:92:70:34:1f:2d:89:fa:da:fb:1c:82:f5:
21:24:f1:d7:8c:51:e9:59:4e:88:64:65:88:08:b4:9d:fc:3a:
8c:75:a8:4c:66:f3:12:51:24:bb:14:fd:26:09:b0:90:0d:24:
ea:16:e6:94:8e:db:fe:be:5d:30:0f:f3:85:d7:e2:56:22:37:
cc:41:b2:79:d3:67:37:85:c1:1a:40:5f:55:2f:c8:1c:f7:48:
85:b2:01:9e:9a:fa:51:51:3f:2f:17:5a:1e:55:99:dd:b9:f4:
82:52:90:ca:e6:b9:77:cf:b8:65:63:31:06:44:b2:98:3f:19:
ca:7b:8e:ec:f6:57:46:14:b5:95:3b:0a:17:23:5c:b7:18:42:
e1:80:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:39:07 2025 by rpki-client