Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38332e302f32342d3234203d3e20323731323030.roa
File: 3230302e37312e38332e302f32342d3234203d3e20323731323030.roa (raw, json)
Hash identifier: gTEP/4Qyc5fsAMJPH01o6bnqZkmaJxyVzDUl6hVuPW4=
Subject key identifier: E2:B1:03:B6:3C:FC:C2:68:D6:48:5F:EA:AB:99:DA:2A:29:38:3A:55
Certificate issuer: /CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Certificate serial: 25D374B9AF710DC56BE6561C12BD22559A578477
Authority key identifier: 05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38332e302f32342d3234203d3e20323731323030.roa
Signing time: Wed 17 Sep 2025 15:43:37 +0000
ROA not before: Wed 17 Sep 2025 15:38:37 +0000
ROA not after: Wed 16 Sep 2026 15:43:37 +0000
asID: 271200
IP address blocks: 200.71.83.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d3:74:b9:af:71:0d:c5:6b:e6:56:1c:12:bd:22:55:9a:57:84:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Validity
Not Before: Sep 17 15:38:37 2025 GMT
Not After : Sep 16 15:43:37 2026 GMT
Subject: CN=E2B103B63CFCC268D6485FEAAB99DA2A29383A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:15:33:a9:46:3c:6c:60:87:a2:65:0f:ff:
d0:fb:d4:ce:1b:75:6c:1c:28:e2:34:52:74:fe:22:
96:ee:14:24:5d:76:87:ca:37:e1:0b:d7:58:0e:11:
fc:32:f6:46:95:b3:b0:8a:8d:c8:3d:3b:8e:16:a7:
db:9b:b3:53:be:79:1f:81:54:84:c9:51:6a:8a:52:
2e:b2:8c:e2:18:76:3a:fb:da:c9:2b:4c:87:94:df:
80:cf:3e:54:7c:35:04:0f:f9:3b:5d:ae:4e:4a:64:
1e:bd:40:5a:a6:0c:88:ab:f4:ee:73:a1:59:f9:3a:
43:4e:de:68:4e:38:10:12:f0:90:3d:df:67:8a:23:
e5:86:dc:cc:37:ef:d9:b1:97:56:3c:a0:79:9b:ea:
08:e2:93:76:77:43:35:14:f0:2d:b1:60:5f:bf:c9:
38:09:5c:97:6c:13:82:f6:0b:86:e5:98:33:29:6a:
69:c0:f1:08:27:38:75:38:e9:3a:6d:c2:19:a4:84:
45:e2:65:9d:b2:f9:ea:9c:83:13:7a:83:85:07:74:
5b:0f:e1:df:69:06:55:df:4c:5c:c5:62:5d:a7:c4:
53:a6:5e:df:4e:10:07:95:f1:d7:9f:3b:7a:b9:c9:
3d:18:d6:c2:a9:be:3b:4c:ae:c3:a4:e9:42:c1:46:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B1:03:B6:3C:FC:C2:68:D6:48:5F:EA:AB:99:DA:2A:29:38:3A:55
X509v3 Authority Key Identifier:
keyid:05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38332e302f32342d3234203d3e20323731323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:73:21:b9:ed:dd:10:d6:31:79:63:51:42:88:c0:03:cc:93:
f4:40:05:ef:c6:46:47:44:24:36:cf:73:98:fd:36:23:fd:58:
71:fb:1a:f1:2c:66:76:1d:4c:ab:d2:f9:60:c8:24:48:99:78:
3a:25:96:a1:d0:00:e3:bb:4f:09:22:eb:2d:1c:f0:c3:7f:13:
0b:fb:14:46:88:04:3e:d4:c7:eb:e1:dd:3d:1d:87:97:b7:13:
33:43:e1:be:70:2c:8e:a9:b9:74:dd:9c:02:79:18:3d:56:87:
1f:c9:d5:de:f6:83:fd:e2:88:84:9c:4b:da:4e:18:9a:ad:45:
75:38:2c:f9:32:19:ba:75:13:4b:5d:ae:d4:99:2b:59:28:52:
f6:a4:00:74:28:97:4d:c0:ca:4e:b5:ff:06:8a:ae:27:04:2f:
a1:e6:20:51:37:1f:f1:da:2d:21:e2:55:ad:8a:60:8a:1b:8e:
90:48:4a:86:ef:8b:da:50:2d:df:79:b5:02:dd:8e:08:b2:47:
65:24:a8:15:d2:04:22:4c:d1:f2:b2:27:ba:27:22:64:da:71:
1f:3f:f3:d6:32:00:47:e2:de:0a:f4:88:18:ce:78:81:6c:9b:
a7:94:34:50:d1:39:b8:7b:df:61:d8:fa:eb:fa:ee:97:b1:4a:
cb:6d:7a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:59:58 2025 by rpki-client