Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
File: 3136382e39302e3136382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier: Btgiy5gOGkWdI5D5m6+ZVefNcDQt9xKbbtKY3hKJyEQ=
Subject key identifier: DA:F9:73:7F:6E:F9:4B:CB:30:81:91:EC:78:E7:46:F7:11:6B:C3:F6
Certificate issuer: /CN=F8410D54252926C3AE5A91AFD3992AC828829031
Certificate serial: 590413E3311FA4EE85684D36A96400A4F31E7ECC
Authority key identifier: F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
Signing time: Mon 07 Apr 2025 18:10:07 +0000
ROA not before: Mon 07 Apr 2025 18:05:07 +0000
ROA not after: Mon 06 Apr 2026 18:10:07 +0000
asID: 53062
IP address blocks: 168.90.168.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:04:13:e3:31:1f:a4:ee:85:68:4d:36:a9:64:00:a4:f3:1e:7e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8410D54252926C3AE5A91AFD3992AC828829031
Validity
Not Before: Apr 7 18:05:07 2025 GMT
Not After : Apr 6 18:10:07 2026 GMT
Subject: CN=DAF9737F6EF94BCB308191EC78E746F7116BC3F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:18:32:91:95:b8:54:b0:88:c2:a7:87:1d:
af:bd:c0:40:0e:e4:6a:ec:08:42:c4:71:bc:21:53:
65:bd:c0:87:0c:40:70:45:5a:0b:d9:64:50:e3:b1:
d4:94:36:0c:ff:9b:93:77:8c:95:36:00:ef:f1:03:
69:01:f2:73:ab:8a:83:da:78:ab:fc:c3:c2:7e:97:
70:96:47:38:a1:35:64:2a:e2:ed:54:88:01:e1:c8:
7f:f4:6c:62:4e:b5:01:fe:43:bb:5e:83:99:a6:45:
57:93:0e:cf:1f:af:8a:49:5a:af:e0:73:34:9e:26:
31:f7:cb:c3:48:56:55:ee:8d:24:70:d4:3e:9f:9f:
92:ee:9f:28:6c:ef:89:f5:65:d4:19:b3:8e:3f:b7:
b2:68:55:5b:f2:b4:13:04:e4:ee:7c:01:c1:ff:c5:
5f:20:75:72:35:86:20:c4:4c:c0:78:63:b2:d3:99:
e8:b4:d0:07:d6:90:0b:0e:ba:b3:6b:14:b7:68:10:
4b:d5:59:d8:10:ae:96:2e:a4:c3:23:3a:b3:49:2e:
19:88:e7:b8:2c:26:50:e8:5d:26:d5:cd:a9:98:6a:
7f:90:dd:df:39:4c:5b:0e:8b:15:94:2d:1c:ee:24:
9f:3b:57:8c:b6:0a:53:6a:fa:12:f5:ec:82:e2:a4:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:73:7F:6E:F9:4B:CB:30:81:91:EC:78:E7:46:F7:11:6B:C3:F6
X509v3 Authority Key Identifier:
keyid:F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:99:61:66:b4:73:51:74:9c:6f:c5:6b:5f:8f:ac:29:5b:71:
c5:5a:56:ec:46:a8:bd:97:a3:54:a9:09:84:51:52:b6:7f:39:
c6:33:03:95:93:19:b0:06:77:d6:5a:f3:b6:3e:9a:df:b8:ca:
dd:63:43:42:3c:11:36:3d:a6:72:31:d3:30:c3:a8:23:d2:fe:
55:0f:01:89:28:36:ef:77:ed:b9:7b:b3:7c:ad:ac:1c:b7:f4:
4e:87:da:b8:5f:dc:2b:fa:d0:9c:09:b2:e2:b1:5c:a3:03:6b:
3e:c2:92:ad:e6:79:6b:f8:97:55:1f:1a:f4:74:85:0f:73:8c:
02:f2:19:13:b3:f3:48:1b:25:e4:bb:ad:21:c7:bc:3c:1e:71:
30:9a:59:87:21:f5:87:2a:f2:59:19:44:2a:ea:7b:0b:d5:3f:
cb:94:c2:e8:b4:26:2c:b5:39:b2:09:89:d7:69:86:b2:03:99:
81:9f:51:50:02:d3:aa:df:f3:2f:e0:c9:4e:86:40:0c:45:e1:
b2:e5:1c:93:f4:84:d2:3e:a4:6a:d4:75:41:a2:3b:f5:83:e4:
36:56:84:b9:e9:a7:78:51:1f:50:53:18:34:1a:b0:f5:cb:bc:
13:77:4c:c7:73:cc:50:af:8a:14:51:10:2c:69:bb:83:ac:52:
3e:27:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:09:24 2025 by rpki-client