Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa
File: 3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa (raw, json)
Hash identifier: 5pvfWBzN2ChCEaHMyEP6wKg93FsVgWUXZdBfuF0of0Q=
Subject key identifier: 99:72:56:D4:55:07:54:96:4F:37:EB:2E:0F:A3:78:C9:DE:83:EF:55
Certificate issuer: /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Certificate serial: 6F93A658E3CACB1B89A5530B8D32CC2A36C8B24E
Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa
Signing time: Tue 18 Mar 2025 20:06:36 +0000
ROA not before: Tue 18 Mar 2025 20:01:36 +0000
ROA not after: Tue 17 Mar 2026 20:06:36 +0000
asID: 266546
IP address blocks: 160.238.196.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:93:a6:58:e3:ca:cb:1b:89:a5:53:0b:8d:32:cc:2a:36:c8:b2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Validity
Not Before: Mar 18 20:01:36 2025 GMT
Not After : Mar 17 20:06:36 2026 GMT
Subject: CN=997256D4550754964F37EB2E0FA378C9DE83EF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:a5:72:26:9c:d5:c3:59:1a:b3:09:4b:29:
9e:f5:3c:20:76:a2:17:c7:3f:4e:59:be:ee:e1:16:
53:50:bf:a4:f5:b4:59:fb:e1:a4:c1:0e:2e:81:82:
52:3b:f2:09:2d:74:f4:35:8f:6f:78:7c:11:a3:1c:
6e:97:24:24:cc:be:15:e9:71:3d:14:8e:a9:ba:ba:
29:d2:f7:f1:c8:d0:f3:34:38:49:9e:04:95:b9:2a:
e2:db:67:85:1c:5d:8b:78:df:53:8e:86:e6:3f:66:
7b:59:5b:97:23:17:be:ba:50:db:d6:cf:1b:3f:63:
77:75:aa:b5:d1:ef:4a:4b:b6:c9:a0:0b:c3:87:9b:
dc:5e:bb:8b:91:5f:f3:0c:0a:4b:33:11:45:74:23:
38:6a:c0:e1:e9:3f:d1:9c:7e:d8:69:d6:d2:d7:2b:
45:2b:8b:ff:f1:de:66:ae:b6:a1:76:1a:5b:f1:d8:
41:d3:ce:fc:37:34:8d:9f:a3:d1:88:52:eb:f7:da:
bf:d5:65:44:7c:a1:ad:b2:49:d9:69:48:74:13:3d:
01:11:d9:94:44:be:e7:08:69:71:2d:5a:7f:c4:e2:
bf:ce:cb:8a:f0:54:16:5e:be:76:5d:40:1c:37:af:
a7:2e:4c:e8:8d:3b:cb:c3:99:4d:d2:20:75:6c:45:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:72:56:D4:55:07:54:96:4F:37:EB:2E:0F:A3:78:C9:DE:83:EF:55
X509v3 Authority Key Identifier:
keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139362e302f32322d3232203d3e20323636353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.196.0/22
Signature Algorithm: sha256WithRSAEncryption
67:4a:76:75:fe:9b:43:2f:98:f6:1e:6f:31:f7:2e:d3:5a:69:
8e:e8:9d:d4:5a:8f:3f:64:eb:b2:01:49:21:9e:27:7e:24:98:
77:54:82:fe:70:a2:65:b4:f9:e0:18:e2:6e:cc:a7:3e:5d:b3:
f2:dd:0c:dc:66:e0:fd:65:7b:9e:d0:e3:2e:40:48:b4:8c:4f:
25:7c:5c:29:82:4b:e8:fc:b2:a2:c9:47:fd:be:d3:52:a6:cc:
82:f7:8f:92:ed:b7:09:fd:fe:59:d9:d4:f0:26:57:bd:f3:31:
04:fb:8f:40:99:99:e7:1d:10:de:ac:62:45:81:f7:2d:59:42:
f5:99:02:02:d7:33:ac:9e:f7:11:eb:4e:85:20:36:54:05:96:
ff:b8:f6:9e:e0:58:a3:ad:e9:64:d3:b7:16:b0:c8:87:8b:cf:
ad:ff:65:9e:38:5f:b2:02:e4:09:9b:5d:ad:82:37:3e:a2:0b:
0f:0e:05:22:a8:e8:9f:c4:19:69:e2:7d:e3:e0:4d:5c:76:18:
49:c4:6e:d7:be:e4:cf:d9:be:93:47:59:a4:de:3e:a0:91:8b:
ae:88:cc:84:06:9e:4f:8b:89:69:39:1b:23:77:03:4a:93:eb:
b9:50:d9:18:cd:2d:93:78:f2:70:27:a3:c7:3c:6a:91:0b:69:
9f:22:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:41:39 2025 by rpki-client