Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa
File: 3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa (raw, json)
Hash identifier: Nrf5l/PdfDi8L6GAsvFOX9x3sDRl321kJeZ8/nQ7NTU=
Subject key identifier: 86:1C:BB:6D:64:2F:E9:8B:A7:23:97:56:FB:BB:4F:A0:22:9B:F9:17
Certificate issuer: /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial: 6D5530F010F361C8A52792720BFA3027E9E71716
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa
Signing time: Mon 08 Sep 2025 19:47:31 +0000
ROA not before: Mon 08 Sep 2025 19:42:31 +0000
ROA not after: Mon 07 Sep 2026 19:47:31 +0000
asID: 263975
IP address blocks: 138.255.163.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:55:30:f0:10:f3:61:c8:a5:27:92:72:0b:fa:30:27:e9:e7:17:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Validity
Not Before: Sep 8 19:42:31 2025 GMT
Not After : Sep 7 19:47:31 2026 GMT
Subject: CN=861CBB6D642FE98BA7239756FBBB4FA0229BF917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:bb:74:e9:ad:39:3b:72:19:24:ff:3d:72:
85:52:28:60:61:8e:04:8b:0d:e5:a0:22:4a:9e:e9:
48:43:e5:c6:4d:5d:fa:ea:9e:f5:f0:35:a0:89:8c:
70:f4:54:28:e0:6d:3a:8d:23:84:fb:37:3d:6d:a9:
ca:ae:03:87:a8:37:8c:0b:73:1f:b7:6f:a2:89:46:
af:ae:0c:47:d6:31:c5:5d:8e:59:a0:71:b7:50:93:
ec:83:76:69:dd:45:d6:9b:c5:22:65:5a:03:af:8e:
63:04:58:b1:8b:65:40:a0:20:17:59:8f:e0:20:7b:
ac:a9:a2:1a:e9:ff:92:df:4f:c6:08:a0:56:46:a4:
14:d8:d2:db:23:0b:c7:b4:fc:97:cf:55:6f:db:74:
42:bd:01:da:71:83:d6:29:5d:2c:9a:35:99:b5:32:
68:dc:7e:be:9e:ce:59:ba:bd:85:e0:bb:c6:89:07:
62:03:91:0e:c7:48:59:94:03:8d:db:c7:c9:2c:7a:
8d:c4:83:df:b7:d7:e8:b4:f1:35:6a:92:f5:0f:9d:
d7:81:2a:a4:15:bf:b1:a4:c4:9b:2b:f4:3f:7f:ea:
a4:58:e1:4c:24:ba:07:4f:43:ce:91:bd:af:aa:94:
6e:e9:d1:6c:ec:e9:5e:42:cc:d0:c6:7e:16:f4:ed:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:BB:6D:64:2F:E9:8B:A7:23:97:56:FB:BB:4F:A0:22:9B:F9:17
X509v3 Authority Key Identifier:
keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136332e302f32342d3234203d3e20323633393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.163.0/24
Signature Algorithm: sha256WithRSAEncryption
68:05:b9:8a:aa:99:55:93:4e:15:16:63:2c:50:e6:e5:c6:d5:
b3:a7:04:c2:cd:a5:9b:eb:b0:4e:f2:a7:f5:c3:22:7a:93:a4:
80:dd:aa:51:dd:07:81:20:3b:18:a9:04:7a:83:7e:1b:d9:3e:
c4:17:66:8e:ed:ef:db:ba:76:a2:1c:f4:08:ba:48:7e:9a:aa:
37:02:58:43:65:94:e7:85:75:18:69:be:1f:75:20:82:ce:ba:
be:ce:73:5e:e1:3c:de:eb:4d:89:28:43:32:69:c6:7a:42:8b:
47:b3:a9:b2:93:dc:f1:37:3b:66:b6:57:1f:20:33:3f:c4:37:
c8:77:93:8a:0c:94:d6:d2:5d:ac:1b:b0:d7:ef:a5:e0:5b:76:
57:e5:c2:f5:e0:9f:65:b9:7d:7e:3e:2f:e4:5b:6c:af:26:1a:
36:53:ed:4f:b8:bc:d8:f9:be:36:09:8f:0b:62:2e:f1:53:97:
dc:08:7f:70:8f:6a:ef:38:c5:0b:84:33:b4:67:bd:3c:3c:cd:
d5:06:24:52:18:2d:1e:ab:7e:7b:c1:f1:1d:fc:24:9b:d1:7a:
94:f2:16:9a:a3:30:87:af:29:a7:e9:e0:54:a2:6d:be:4d:29:
22:9d:2a:f5:cf:fd:68:b5:65:84:65:48:a8:b9:57:da:13:14:
87:69:e0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:34:57 2025 by rpki-client