Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
File: 3230302e37312e38322e302f32342d3234203d3e20323731323030.roa (raw, json)
Hash identifier: uBxaJxTpZQd+LeYqhN2xeCkCR4o/C6lEwl2gxNe7B2c=
Subject key identifier: 12:9E:00:38:09:39:F8:DB:99:46:8C:FF:3E:15:FF:9B:9C:1E:B3:80
Certificate issuer: /CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Certificate serial: 26DAB70F42BDB7DA6D1010C2A51A494871EFD4B9
Authority key identifier: 05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
Signing time: Wed 17 Sep 2025 15:43:34 +0000
ROA not before: Wed 17 Sep 2025 15:38:34 +0000
ROA not after: Wed 16 Sep 2026 15:43:34 +0000
asID: 271200
IP address blocks: 200.71.82.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:da:b7:0f:42:bd:b7:da:6d:10:10:c2:a5:1a:49:48:71:ef:d4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Validity
Not Before: Sep 17 15:38:34 2025 GMT
Not After : Sep 16 15:43:34 2026 GMT
Subject: CN=129E00380939F8DB99468CFF3E15FF9B9C1EB380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:a6:84:14:39:5b:7d:d4:6a:aa:1c:6c:5c:
5f:3c:6a:44:19:f1:24:f8:a9:64:77:f9:b1:01:1a:
54:9d:ae:fd:c1:e5:90:e5:c8:7a:ac:91:f8:79:6b:
21:8b:1a:72:da:ce:fc:cc:4a:07:4d:62:35:43:a6:
b1:3f:b1:49:16:1d:49:30:42:0d:01:4e:c4:3d:ae:
53:bc:16:15:48:fb:b7:04:3d:ef:90:de:97:87:95:
bb:6c:a2:5a:78:6f:35:f4:a0:0a:2f:02:72:3d:09:
1d:f5:30:10:bf:72:7b:8d:be:7c:b5:2a:c1:0b:db:
1a:a6:69:e3:5c:96:a0:d1:6d:80:c7:4e:f5:55:ea:
8e:69:ed:18:f4:92:68:e8:28:b1:85:0b:75:9d:fa:
f1:2a:a2:f6:7a:b1:e0:2e:96:95:0d:cb:b0:9d:03:
1f:93:ba:7c:5b:24:6a:b6:32:2e:94:58:f3:8c:11:
c6:83:96:94:7e:81:a5:c4:5c:1b:45:a8:e3:45:12:
b8:1d:e1:fc:51:85:7e:e6:a0:e1:d3:a0:56:22:99:
55:76:ee:52:66:9d:11:36:c4:9b:df:74:06:ec:a4:
22:59:b6:a3:80:a7:b1:f8:ee:f4:be:1f:4b:58:a7:
c4:44:e7:7b:b3:0d:ea:55:0b:c3:dd:7c:03:37:f2:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:00:38:09:39:F8:DB:99:46:8C:FF:3E:15:FF:9B:9C:1E:B3:80
X509v3 Authority Key Identifier:
keyid:05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.82.0/24
Signature Algorithm: sha256WithRSAEncryption
75:bf:f0:a7:4e:d9:b5:68:14:97:2c:f1:93:22:55:79:1c:c1:
07:8c:71:67:40:17:ec:7a:f8:9d:f5:3e:e1:d4:de:b0:08:33:
18:36:19:df:75:cc:ec:34:34:fa:dc:88:2e:d8:8b:b7:6e:a5:
e7:d4:b6:3f:d6:31:2a:64:99:5e:1e:18:f8:c1:28:31:05:0a:
fd:59:07:26:17:8e:03:1a:e2:46:c2:1b:cb:a5:02:46:80:de:
6f:c0:ef:8c:56:34:8e:ed:80:62:a9:e1:83:c8:a8:22:d7:14:
b4:02:9e:ad:6c:a5:07:50:04:c7:66:e5:74:ad:6a:87:62:70:
ca:92:80:59:ba:83:e4:3a:31:55:09:1d:7b:4e:00:94:d6:71:
38:85:99:67:67:4c:01:97:e6:8f:f3:24:45:93:0c:88:0e:f6:
86:3a:88:0d:9b:da:a8:b8:c8:51:5d:f5:69:0f:0a:c5:6d:2a:
80:e1:7d:04:7e:e7:3e:d9:6b:d5:0a:c7:3c:dd:a4:18:a5:91:
7a:5d:8c:ef:1e:be:35:c9:79:f5:6d:63:13:97:ef:2f:10:2e:
c7:b6:91:88:bc:9d:92:63:7e:a3:ab:b1:07:84:5a:8e:a7:29:
71:f7:ef:91:6c:11:40:e7:7b:5b:02:af:b6:b2:7f:f0:b4:ec:
f9:be:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:59:52 2025 by rpki-client