Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa
File: 3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa (raw, json)
Hash identifier: 3bmEBpuiUnKim8NmMh/PgUVQqKur+c74VzBnlVaevm0=
Subject key identifier: DF:6B:A4:28:5B:59:5D:17:B6:72:83:60:CB:CD:BC:38:10:67:54:44
Certificate issuer: /CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
Certificate serial: 2F9714AFD00594525FDC8546F4F42180CD3344FD
Authority key identifier: B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa
Signing time: Wed 05 Mar 2025 19:33:10 +0000
ROA not before: Wed 05 Mar 2025 19:28:10 +0000
ROA not after: Wed 04 Mar 2026 19:33:10 +0000
asID: 271033
IP address blocks: 187.84.127.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:97:14:af:d0:05:94:52:5f:dc:85:46:f4:f4:21:80:cd:33:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
Validity
Not Before: Mar 5 19:28:10 2025 GMT
Not After : Mar 4 19:33:10 2026 GMT
Subject: CN=DF6BA4285B595D17B6728360CBCDBC3810675444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:6c:29:fd:9e:e1:7c:5c:a8:8e:91:46:2b:
55:5e:73:7e:7f:e4:72:11:6d:9a:ab:e6:c0:a9:28:
b1:0e:3d:67:0b:b1:ff:f0:62:25:3f:05:df:0b:51:
40:d4:1b:cc:a4:96:7f:e2:02:ff:d6:76:93:71:bf:
87:57:2d:89:0c:eb:d8:90:45:b6:09:89:19:0b:a1:
25:d1:99:2b:bc:bb:16:a2:6f:93:33:10:10:3d:19:
91:c7:f7:5e:e6:b3:9a:0e:fe:04:31:55:c3:aa:9f:
66:ab:9b:4e:78:09:08:d6:98:98:ab:02:e9:72:da:
f7:e4:65:bd:09:2b:85:e5:70:6b:d9:1d:8e:f3:2c:
93:58:79:bc:4d:72:c4:f9:d4:8f:d4:63:80:79:66:
5e:bd:ea:55:86:d4:65:95:79:54:1d:73:e5:70:30:
b6:e9:99:01:52:af:8b:95:2f:0c:0b:60:83:cf:aa:
89:11:af:c0:02:ce:02:52:40:b2:ce:2c:1f:8e:41:
dc:9b:c6:db:ce:c6:50:84:59:42:93:5b:27:01:80:
ad:90:b7:e9:a6:d8:d0:fb:cc:c4:eb:c9:b1:fa:2e:
29:aa:8b:6c:eb:ca:ba:5a:fb:6f:26:fd:02:a7:a1:
f0:80:38:fe:f2:24:6f:ba:c6:e7:59:83:47:53:35:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6B:A4:28:5B:59:5D:17:B6:72:83:60:CB:CD:BC:38:10:67:54:44
X509v3 Authority Key Identifier:
keyid:B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132372e302f32342d3234203d3e20323731303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:97:f6:99:0d:8f:cf:d4:59:28:dc:b7:49:28:c8:36:9b:b7:
48:1c:9a:91:2f:2a:28:eb:c1:67:1b:04:53:65:d5:de:80:b4:
bb:5f:51:50:73:53:fb:0d:f3:c1:fe:34:69:19:c6:90:77:1f:
de:94:70:48:c1:10:b5:91:1a:7f:8a:ab:17:c4:84:b9:37:6e:
f1:b7:83:0b:34:65:77:73:53:ab:fa:35:17:6f:58:8f:3c:57:
04:2e:d9:3e:10:03:e8:1f:59:7b:5e:d1:c1:fb:8b:34:b4:d9:
9d:b1:69:bc:a0:9f:ed:7d:99:8d:54:a8:9d:1e:85:53:43:90:
64:08:b1:0a:0f:9f:54:84:a5:36:94:2a:f3:67:4d:f7:03:42:
78:eb:97:2f:2f:33:0a:21:bb:b9:cf:40:e6:ff:e6:b0:3c:b9:
2e:23:fb:17:df:f0:18:f5:57:0d:c2:5e:4a:6b:9b:86:8c:8b:
8a:84:11:0e:5a:ef:75:ca:72:ba:22:04:6b:30:bd:70:e1:1e:
94:cd:4f:bd:05:03:ea:f4:29:a6:52:e2:da:48:70:0e:37:5e:
d9:ad:a2:6b:4f:0e:4b:7a:7b:30:b5:16:04:f4:f0:bd:4c:b3:
61:81:69:71:6d:5e:b0:20:bf:9d:03:c0:1e:ad:da:1c:23:64:
7b:26:af:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:46:53 2025 by rpki-client