Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3133312e302e37382e302f32332d3234203d3e203134343537.roa
File: 3133312e302e37382e302f32332d3234203d3e203134343537.roa (raw, json)
Hash identifier: B3YJT4OkSj3f3GE/IreEZUNq8elgRsldnNgOu27cKOc=
Subject key identifier: 8F:BA:27:30:1A:AB:5D:12:47:15:48:8C:DE:B1:2D:79:A1:CA:E4:23
Certificate issuer: /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial: 664C56AA86F97B7EF8045336B653E23CE9BE630E
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access: rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3133312e302e37382e302f32332d3234203d3e203134343537.roa
Signing time: Mon 26 May 2025 19:02:51 +0000
ROA not before: Mon 26 May 2025 18:57:51 +0000
ROA not after: Mon 25 May 2026 19:02:51 +0000
asID: 14457
IP address blocks: 131.0.78.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4c:56:aa:86:f9:7b:7e:f8:04:53:36:b6:53:e2:3c:e9:be:63:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Validity
Not Before: May 26 18:57:51 2025 GMT
Not After : May 25 19:02:51 2026 GMT
Subject: CN=8FBA27301AAB5D124715488CDEB12D79A1CAE423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:67:a9:13:d6:ed:d0:8b:51:98:c5:57:ad:
dc:8c:84:33:8e:21:11:4c:f3:20:f9:4f:70:be:b3:
b3:bf:65:b4:39:40:27:c7:5d:d7:17:cf:37:c4:f4:
0c:a3:b9:30:fe:a6:0f:dc:e0:5e:6d:2d:b3:5b:8b:
22:4d:40:72:a2:0c:3e:d3:bc:f8:24:98:96:90:ea:
8c:4c:b6:24:89:de:d1:e8:ed:ff:e8:6d:11:4d:03:
70:e6:01:89:17:99:dc:54:79:13:47:a6:d8:53:74:
d9:16:26:05:f1:4c:2b:20:cb:03:0d:2f:d4:a4:30:
67:7b:84:4e:c1:3a:58:b0:da:34:6e:69:a0:a1:e1:
82:a9:f7:72:55:8e:3e:35:7f:09:87:55:b1:ea:8b:
17:02:22:42:33:e5:78:c5:7e:db:d4:b6:40:2f:dc:
df:4f:75:82:18:2d:0b:a9:5a:0a:51:8c:ec:3e:21:
cd:ca:58:53:ec:dc:d2:0c:a0:bf:4b:c3:ca:3d:30:
7e:63:33:c7:0f:88:d1:49:4e:67:b8:96:87:42:60:
e5:4e:80:dd:62:7e:3c:da:82:59:3a:77:33:bc:b3:
16:46:7e:f4:ff:da:e4:2b:52:e9:51:98:6b:16:12:
5d:a2:c3:b0:bc:32:01:80:4d:e6:a7:a3:08:42:12:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BA:27:30:1A:AB:5D:12:47:15:48:8C:DE:B1:2D:79:A1:CA:E4:23
X509v3 Authority Key Identifier:
keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3133312e302e37382e302f32332d3234203d3e203134343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.78.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:af:80:99:14:3c:a7:93:48:aa:6e:d6:f7:13:89:7b:bb:1a:
9c:33:2c:c8:07:04:07:1f:73:3c:4e:2e:7c:4c:12:fc:c9:24:
c4:70:3c:1a:73:b3:65:fc:be:51:6c:23:fc:5e:ea:04:0f:0e:
8a:54:15:2c:39:61:e4:21:13:08:48:0e:67:1f:6d:bf:4e:c6:
d8:cc:82:31:90:4a:e3:2d:cb:14:bb:9c:47:4c:6b:b4:6f:2e:
a9:1d:4e:3b:3d:c8:b4:df:51:a3:c5:76:c7:32:94:ed:48:a6:
bb:c4:e4:34:84:5b:be:cb:fe:87:cb:4a:45:5b:f1:1e:cc:90:
12:e7:9e:0d:99:56:5e:a3:4e:6d:f7:a4:99:0b:bd:69:ac:99:
d2:1c:ba:fe:ac:bc:06:84:5a:9a:b7:62:92:bd:cb:9c:83:03:
df:ca:bb:61:0c:80:31:6c:75:48:db:bc:dd:8a:a9:07:68:37:
2b:52:10:f6:04:2c:b3:ae:c5:f1:9c:79:6f:89:b8:bc:64:fb:
4b:a7:21:f3:db:f8:80:53:13:d9:5e:1e:a0:b9:f1:0f:95:44:
07:17:92:fd:c0:12:d5:74:a6:46:6d:d4:bf:79:68:17:f2:61:
ef:66:ed:42:aa:95:d6:88:5e:d3:73:e9:c8:16:12:b8:2c:25:
cd:c2:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:09:51 2025 by rpki-client