Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137372e37352e3136302e302f32302d3234203d3e203533303632.roa
File: 3137372e37352e3136302e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier: hyQPKMG1ZA+bM3I48Vun/5px1kt2epY6+uHerxS1MPg=
Subject key identifier: 8B:59:8C:5E:81:1B:25:A1:F3:30:61:F1:52:05:68:54:58:39:07:1F
Certificate issuer: /CN=F8410D54252926C3AE5A91AFD3992AC828829031
Certificate serial: 4E7CBDA19FF23F11343685CE7813721E8AF00609
Authority key identifier: F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137372e37352e3136302e302f32302d3234203d3e203533303632.roa
Signing time: Mon 07 Apr 2025 18:10:07 +0000
ROA not before: Mon 07 Apr 2025 18:05:07 +0000
ROA not after: Mon 06 Apr 2026 18:10:07 +0000
asID: 53062
IP address blocks: 177.75.160.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:7c:bd:a1:9f:f2:3f:11:34:36:85:ce:78:13:72:1e:8a:f0:06:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8410D54252926C3AE5A91AFD3992AC828829031
Validity
Not Before: Apr 7 18:05:07 2025 GMT
Not After : Apr 6 18:10:07 2026 GMT
Subject: CN=8B598C5E811B25A1F33061F1520568545839071F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:f0:52:11:ed:1b:ae:de:a2:a6:5f:1d:f3:
20:51:87:d8:ca:db:d1:83:90:c5:7e:11:1e:d1:93:
a8:1a:5c:5d:77:c0:1a:ea:29:86:44:6b:8d:d1:94:
e3:52:c1:65:b7:f8:e9:b5:fd:3d:b9:ad:40:3d:3b:
fc:c2:97:28:8a:d7:1b:80:96:aa:95:25:57:b1:32:
8b:76:a1:1d:86:07:ac:a5:39:17:08:0c:c5:2b:44:
76:cc:8c:77:82:8a:e9:5a:69:dd:cb:41:a4:a0:28:
e6:ba:90:e3:51:9e:de:f7:7d:08:a4:91:0a:19:9d:
3c:3a:04:4d:f7:8e:11:01:f0:68:fb:19:2d:f9:89:
d1:2d:2f:ba:84:4c:74:25:56:49:a2:95:b2:5e:d3:
6f:a9:0c:f5:ba:99:12:9d:28:69:ee:b7:31:f8:1d:
5f:e0:aa:34:93:8d:fd:77:1e:5e:93:98:ed:5f:d5:
99:ea:28:b7:c6:1c:b4:0c:fb:34:17:61:38:99:0e:
03:a2:0d:da:0f:cf:f1:e4:d2:11:0e:8d:69:06:0b:
47:d4:d5:cd:ab:e8:62:2c:8a:0a:a8:b7:43:3d:6a:
4d:ce:7c:21:4e:7b:bf:16:c2:10:d6:d9:86:04:6e:
f5:8e:5e:30:da:a3:ec:19:b4:8d:97:45:ee:c3:b1:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:59:8C:5E:81:1B:25:A1:F3:30:61:F1:52:05:68:54:58:39:07:1F
X509v3 Authority Key Identifier:
keyid:F8:41:0D:54:25:29:26:C3:AE:5A:91:AF:D3:99:2A:C8:28:82:90:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/F8410D54252926C3AE5A91AFD3992AC828829031.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8410D54252926C3AE5A91AFD3992AC828829031.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/2/3137372e37352e3136302e302f32302d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.75.160.0/20
Signature Algorithm: sha256WithRSAEncryption
34:ae:06:62:21:81:31:cd:83:08:a7:bf:b7:c7:7b:b2:8c:e3:
bb:52:13:ee:cf:21:ae:76:55:b3:e4:89:3d:e0:0d:47:b6:b1:
9f:29:4a:5c:e9:00:66:b1:05:58:57:06:0c:14:12:97:48:74:
d9:bd:ae:3d:30:35:9b:df:c1:fb:4b:32:46:4a:f0:58:9b:a6:
13:d7:54:a9:9e:05:42:78:d0:39:63:3d:54:54:d5:8c:68:ad:
7c:ee:9c:70:06:7d:3e:01:9e:e0:ee:70:db:d4:be:98:c2:24:
e5:ad:11:36:3f:48:01:e3:32:b5:04:81:39:24:4a:0e:15:dc:
f5:b2:9c:2d:8a:d9:17:62:47:35:28:0c:ec:f1:a5:ff:2f:83:
26:fb:d0:4a:78:06:c6:1a:66:d7:70:09:77:18:a5:9b:78:d4:
93:6d:2c:54:6a:23:23:df:d4:5a:45:5a:f0:fb:1d:e0:b3:cd:
fa:c7:12:48:93:1a:ab:2c:31:fa:b7:5b:27:4b:d2:bb:75:38:
8f:bf:da:ed:82:45:1d:5f:02:d2:ae:d3:e4:af:90:34:35:bc:
3f:8a:ed:95:b4:76:d2:e6:e5:64:b5:70:59:bb:87:10:31:c0:
57:49:9a:7f:ac:86:a4:07:5a:b6:2e:82:a4:41:6c:23:ab:0f:
fc:b1:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:07:40 2025 by rpki-client