Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132342e302f32342d3234203d3e20323731303333.roa
File: 3138372e38342e3132342e302f32342d3234203d3e20323731303333.roa (raw, json)
Hash identifier: s9mjxvAHEFRx4whqI63z3tZbT38ZZmApAt9oOrnPBsQ=
Subject key identifier: D4:0E:FE:28:F1:8D:6F:C6:34:92:70:07:F7:1D:79:94:68:7C:82:04
Certificate issuer: /CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
Certificate serial: 52ADF8AA6C4E9908E88D469F637739EFBD77CCB9
Authority key identifier: B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132342e302f32342d3234203d3e20323731303333.roa
Signing time: Thu 25 Sep 2025 14:55:17 +0000
ROA not before: Thu 25 Sep 2025 14:50:17 +0000
ROA not after: Thu 24 Sep 2026 14:55:17 +0000
asID: 271033
IP address blocks: 187.84.124.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ad:f8:aa:6c:4e:99:08:e8:8d:46:9f:63:77:39:ef:bd:77:cc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
Validity
Not Before: Sep 25 14:50:17 2025 GMT
Not After : Sep 24 14:55:17 2026 GMT
Subject: CN=D40EFE28F18D6FC634927007F71D7994687C8204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:db:b3:1b:81:a3:82:18:3d:86:fa:3d:33:
9f:d3:a7:cf:1d:c4:22:64:1b:e9:59:ea:24:2f:5a:
05:17:a4:63:fc:81:d9:32:1e:48:65:86:51:3b:7a:
9b:59:1f:91:22:eb:d6:9c:fb:f1:e6:c0:e1:9a:cf:
70:fe:47:29:1d:2f:29:6f:11:fb:db:33:60:4c:3b:
a6:f4:cd:eb:51:e9:49:27:58:34:6a:ae:af:75:b3:
23:ac:6a:e2:d7:ea:ff:6c:0f:66:cc:4f:bb:1e:94:
9d:3a:75:70:ce:34:a4:da:71:ed:0f:95:46:78:9b:
41:f4:1e:25:12:85:a8:d7:ff:7a:19:de:bb:89:9f:
70:a4:92:46:e0:11:9b:65:4c:d7:77:fc:dc:ec:29:
bf:02:c3:b4:43:8d:bc:ad:c8:4d:55:ea:54:b2:cd:
4f:9f:5f:dc:7c:bf:50:b4:64:2b:37:e6:b8:e8:cb:
20:3a:2f:b4:cf:9f:be:8c:97:fd:95:47:61:b2:73:
b6:bd:aa:2e:32:7d:21:e3:37:aa:8d:56:cf:d8:0e:
2e:5c:2f:87:ce:c5:c2:c0:11:4d:15:f7:e1:cf:6d:
df:21:da:6c:f5:0d:32:27:ab:68:d9:3d:c5:66:4f:
f0:b7:6d:99:5d:1b:ba:2d:7d:99:ba:41:95:0e:43:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0E:FE:28:F1:8D:6F:C6:34:92:70:07:F7:1D:79:94:68:7C:82:04
X509v3 Authority Key Identifier:
keyid:B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132342e302f32342d3234203d3e20323731303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.124.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ce:4b:a6:bf:cf:3e:38:87:81:cd:a0:da:e3:51:9d:1d:0e:
b0:6a:4c:21:b9:12:7c:b7:12:69:ac:3b:35:37:8f:84:42:26:
f4:5d:87:bd:b4:8c:57:31:49:9d:cc:30:3f:b5:46:d0:9f:62:
f9:d5:7d:88:6a:95:3b:6c:c9:5e:68:07:d3:ff:13:ef:27:9c:
3d:45:ad:cf:76:34:ce:9b:6d:8a:5d:b8:f9:3d:76:9b:69:a6:
cf:f4:2f:76:23:10:28:be:f1:5d:31:d4:2e:57:c5:db:e0:ad:
ab:f9:ea:64:65:cf:1e:0b:2f:ed:c8:2a:16:fc:31:8e:fc:3d:
ef:8c:26:27:f7:16:76:73:b2:fc:ba:07:a5:f8:12:2a:88:e7:
83:13:01:c0:23:7c:c5:60:12:41:49:ca:df:3c:a6:7c:97:32:
5f:f3:e8:0c:f5:f9:82:94:a2:12:7b:e2:a7:9c:86:e6:e4:80:
23:69:28:65:06:fa:3d:f9:4e:0e:9b:a5:d3:4d:5c:c1:74:39:
ce:62:10:d7:b2:cb:46:31:44:aa:af:b2:31:3f:7c:9b:5b:e9:
ac:ab:f9:c6:4b:e4:f5:d6:55:6e:67:3f:32:23:7b:c5:94:a7:
70:73:ef:81:35:3e:61:cf:5c:da:97:0c:35:ad:71:fd:58:93:
01:ad:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:40:19 2025 by rpki-client