Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa
File: 3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa (raw, json)
Hash identifier: joM+u7PORJdGnFjZhmPBlsrsIlNkPKAPY/Z0Gbc8cy0=
Subject key identifier: 7C:D2:A9:04:7D:41:D7:E6:F6:8F:BA:DE:A7:30:80:3A:68:17:8F:04
Certificate issuer: /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Certificate serial: 6255766E885131F31E2C3BAB8BEEFE44DB5EA84E
Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa
Signing time: Tue 18 Mar 2025 20:06:36 +0000
ROA not before: Tue 18 Mar 2025 20:01:36 +0000
ROA not after: Tue 17 Mar 2026 20:06:36 +0000
asID: 266546
IP address blocks: 160.238.197.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:55:76:6e:88:51:31:f3:1e:2c:3b:ab:8b:ee:fe:44:db:5e:a8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Validity
Not Before: Mar 18 20:01:36 2025 GMT
Not After : Mar 17 20:06:36 2026 GMT
Subject: CN=7CD2A9047D41D7E6F68FBADEA730803A68178F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ec:c9:7f:3e:c4:98:aa:3b:bd:fd:fb:a2:5f:
a5:a5:2f:3a:d0:ac:36:6c:5c:c2:2a:78:c5:24:0c:
06:b6:5d:44:4a:ad:46:3b:70:0e:fb:17:de:30:b0:
9d:6d:1c:52:fd:5f:4c:80:bd:5d:66:56:d2:7d:c0:
f8:15:23:e3:93:75:52:14:29:ab:cb:b3:8c:1c:22:
57:ba:8a:20:6c:a0:5b:e2:70:59:18:18:43:82:10:
aa:11:ad:cb:19:84:6b:e2:c8:5f:9e:8f:1d:33:ea:
34:3d:88:9d:70:c4:d2:5d:a0:dd:70:1e:63:c2:df:
2d:e1:14:09:5a:fb:0b:14:f7:76:8e:a7:a2:17:8f:
87:29:44:77:37:4f:f8:a7:c4:c2:07:b1:ee:ff:29:
18:c5:0c:4b:c3:df:e5:d8:45:e2:3c:bc:28:40:78:
37:1b:8c:21:70:61:dc:a0:87:34:26:bb:a8:da:47:
52:ca:db:14:bc:18:8d:a3:91:ca:80:2d:03:58:10:
94:f1:b9:43:2a:63:47:0d:60:3e:d4:28:2a:a3:1d:
d3:16:79:76:36:92:a4:6c:96:30:5e:92:52:c5:f8:
6d:fb:fd:4f:a5:72:2a:e6:2e:47:03:89:2e:ef:78:
ab:8b:4b:a4:99:08:d3:c0:11:d1:ea:c5:21:0b:d0:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D2:A9:04:7D:41:D7:E6:F6:8F:BA:DE:A7:30:80:3A:68:17:8F:04
X509v3 Authority Key Identifier:
keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139372e302f32342d3234203d3e20323636353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.197.0/24
Signature Algorithm: sha256WithRSAEncryption
21:90:44:ac:8f:d7:ec:ad:a9:34:5e:95:05:da:9b:d3:ea:b0:
da:00:0f:3e:f2:97:0b:39:2f:c2:3c:68:19:41:34:67:a9:26:
1b:f0:91:fb:ee:c2:47:0f:ec:d4:f3:9a:38:33:2f:36:7f:8e:
1b:cd:5f:9b:88:27:2c:5d:50:0d:0a:0a:fd:e1:91:56:2a:aa:
3a:90:84:83:5f:2d:f0:57:0c:97:44:83:32:ca:54:ba:9d:8c:
ea:95:5b:98:40:ea:8c:7c:3c:87:bf:26:b5:28:4e:9b:dc:b7:
de:1d:a1:7b:a4:da:1e:01:7b:d5:39:88:18:2d:1b:71:5b:a7:
94:17:dd:b2:be:bf:94:02:61:4f:fd:43:58:7f:7f:44:16:a5:
a4:0d:5d:f4:88:6a:04:ee:f0:8b:13:65:d2:39:52:51:c7:30:
4e:66:ff:e4:3d:c8:5f:27:8d:33:a8:75:53:da:15:52:dd:80:
f2:09:6c:87:5c:c4:17:b9:f9:9e:20:bd:f3:97:74:b8:f4:ea:
7a:59:a2:b5:7c:45:0d:ce:24:c7:81:78:31:df:2c:ba:c5:98:
4e:0d:79:09:78:0f:55:14:c8:f3:c9:ee:13:aa:23:aa:93:d7:
1a:87:29:38:2a:67:65:fe:5c:76:7d:03:39:6e:d3:64:a9:92:
a0:cc:31:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:52:19 2025 by rpki-client