Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/3139322e3134312e38342e302f32322d3234203d3e20323637343632.roa
File: 3139322e3134312e38342e302f32322d3234203d3e20323637343632.roa (raw, json)
Hash identifier: r+NNydIpCtfWxH/ttZZBW28lVPRKzevHWyjcjpj7OmM=
Subject key identifier: 2C:75:05:76:38:36:8D:FB:B7:02:DA:83:EB:1A:DB:81:DE:66:6A:88
Certificate issuer: /CN=1527C597A58C3A12588A6C8A96ED78E2C0EC76D0
Certificate serial: 1187A3B28989D8E312B88C9BB30F05BA972E88D9
Authority key identifier: 15:27:C5:97:A5:8C:3A:12:58:8A:6C:8A:96:ED:78:E2:C0:EC:76:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/3139322e3134312e38342e302f32322d3234203d3e20323637343632.roa
Signing time: Fri 28 Mar 2025 16:29:25 +0000
ROA not before: Fri 28 Mar 2025 16:24:25 +0000
ROA not after: Fri 27 Mar 2026 16:29:25 +0000
asID: 267462
IP address blocks: 192.141.84.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:87:a3:b2:89:89:d8:e3:12:b8:8c:9b:b3:0f:05:ba:97:2e:88:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1527C597A58C3A12588A6C8A96ED78E2C0EC76D0
Validity
Not Before: Mar 28 16:24:25 2025 GMT
Not After : Mar 27 16:29:25 2026 GMT
Subject: CN=2C75057638368DFBB702DA83EB1ADB81DE666A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:e4:4d:6a:2f:e4:23:c2:99:29:66:66:3b:
c2:1c:f7:8d:83:2a:6a:73:37:0c:c0:b7:49:7a:6a:
a4:06:27:11:c8:82:fb:63:0d:6f:d6:6e:2a:e5:35:
8f:19:43:a5:39:94:f2:8d:1f:00:c0:32:9d:39:50:
01:fd:47:d6:62:cc:2a:13:82:00:55:ed:3b:4d:16:
9c:28:2b:41:15:9f:01:b3:9a:d6:01:92:87:30:ed:
df:05:c9:40:3d:ea:73:0c:55:65:b5:81:0d:df:7d:
79:75:86:de:ef:37:06:c4:60:f5:0d:32:4d:5e:23:
9b:4f:db:b6:84:b3:35:aa:5e:a9:af:1d:3c:e8:27:
7f:82:e1:0b:e5:da:a4:d6:cf:63:f5:06:2d:15:d6:
bf:b7:8a:e0:09:92:31:f9:9f:31:db:ec:42:c4:0c:
dc:16:3c:e2:9c:e4:7f:f8:0e:a7:e4:16:9b:7e:df:
99:a7:41:5a:9b:ea:73:a4:38:57:dd:ad:9e:f1:20:
7a:0a:7a:0e:77:0a:bc:26:07:13:e4:90:3a:1e:60:
d3:6d:8c:d9:0a:2f:a0:79:be:dc:b6:d2:bb:e9:7c:
1c:17:cc:17:21:18:d4:34:be:1d:24:33:d3:a1:81:
80:70:96:20:78:62:61:17:4a:d8:f4:e3:93:45:34:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:05:76:38:36:8D:FB:B7:02:DA:83:EB:1A:DB:81:DE:66:6A:88
X509v3 Authority Key Identifier:
keyid:15:27:C5:97:A5:8C:3A:12:58:8A:6C:8A:96:ED:78:E2:C0:EC:76:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1527C597A58C3A12588A6C8A96ED78E2C0EC76D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/SoMDMUSgU2khcoatnxEVBG3hUimpj7ouGFnRfoXXzu1/0/3139322e3134312e38342e302f32322d3234203d3e20323637343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.84.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:0b:8c:8d:d7:0f:e3:83:b0:c0:3a:40:ff:e4:13:f2:8e:ff:
9f:39:f5:3a:f7:1b:3d:e0:9a:80:7b:53:ca:2b:3b:c4:b9:51:
4b:e8:1b:22:0e:71:df:ef:c7:51:40:05:a2:b5:48:17:de:ad:
48:38:38:7c:01:79:fe:6f:64:2d:d1:c9:22:99:55:0e:b4:35:
25:2c:b0:90:62:f5:7b:03:64:db:a6:07:59:30:a3:5e:34:55:
e6:7e:78:42:dd:8d:3b:0f:68:5c:81:1d:2b:bd:6f:4b:bd:f5:
56:53:97:1e:16:c3:e4:2d:2e:cd:5f:83:5a:7c:a4:7a:33:84:
98:33:49:a4:af:f3:ab:35:7c:43:73:0b:be:6a:dd:f4:35:d8:
50:1a:d9:e1:fc:74:cb:ab:d4:cf:fe:0f:47:76:03:bf:6d:59:
ef:5e:aa:49:47:1e:21:42:72:dd:ac:5c:b0:47:60:b4:93:11:
99:06:a2:bb:db:ab:1f:33:58:51:d1:83:e3:13:88:81:4a:ed:
b1:53:c6:f4:36:27:e8:41:08:95:4e:0d:c6:bd:2c:62:62:44:
87:7e:fc:ed:8f:75:13:02:f3:7f:45:57:68:38:48:08:8f:a6:
41:1c:ba:e3:84:df:85:47:c4:cb:9e:e4:fe:8c:5b:ef:23:99:
e6:2f:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:07 2025 by rpki-client