Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa
File: 3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier: BksfCh97P3skr/KAnxWeqB1LtsBmdcir2+ii7/6vkbQ=
Subject key identifier: 6D:5E:60:FE:23:B2:1B:79:A0:7A:84:99:E6:D9:CA:37:04:E8:D2:B4
Certificate issuer: /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial: 1695EC0B861F56FB9E22F92C32BF44D0EAD2DDF6
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access: rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa
Signing time: Mon 07 Apr 2025 18:12:36 +0000
ROA not before: Mon 07 Apr 2025 18:07:36 +0000
ROA not after: Mon 06 Apr 2026 18:12:36 +0000
asID: 53062
IP address blocks: 170.254.126.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:95:ec:0b:86:1f:56:fb:9e:22:f9:2c:32:bf:44:d0:ea:d2:dd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Validity
Not Before: Apr 7 18:07:36 2025 GMT
Not After : Apr 6 18:12:36 2026 GMT
Subject: CN=6D5E60FE23B21B79A07A8499E6D9CA3704E8D2B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:03:75:a7:50:e3:a0:85:61:c1:99:6c:96:
83:7f:16:2e:ea:48:5c:53:a5:44:f0:3a:00:cc:9c:
15:4f:dc:ea:cd:34:d3:f0:88:1a:73:69:c2:57:d6:
80:43:dd:ea:71:d4:48:8d:65:19:54:dc:4c:23:3d:
ec:c8:e2:5a:c2:1b:07:e1:6b:df:18:32:9a:53:1c:
c4:18:ac:40:cb:47:7a:8d:18:78:58:7f:60:a8:0f:
9f:45:e2:f0:51:33:c1:2e:cf:bb:07:90:ae:59:68:
1a:81:5c:d9:bd:67:d6:e2:1e:a8:97:96:39:c1:d9:
a2:9f:23:84:af:62:26:96:bb:ec:48:e1:05:be:55:
eb:86:ec:5b:73:01:60:6e:b4:5b:35:28:a6:8c:05:
a3:bd:42:46:60:3f:c1:c1:b8:f3:34:3d:f7:28:7a:
9e:37:0d:da:e1:21:49:27:47:83:d4:2a:58:11:6e:
36:ec:98:92:4d:6d:46:01:1e:40:20:fd:3b:c8:cb:
ee:46:df:dd:a5:fa:a1:f1:45:df:ee:ac:ff:06:69:
f8:df:c5:ee:d8:5f:c6:0b:a2:05:1b:48:37:20:dc:
0b:56:9b:b4:f1:c1:2c:f4:4f:e3:7d:ec:9a:50:5e:
d9:fb:fd:48:e0:cc:53:90:6e:d4:27:89:01:fb:cf:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5E:60:FE:23:B2:1B:79:A0:7A:84:99:E6:D9:CA:37:04:E8:D2:B4
X509v3 Authority Key Identifier:
keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137302e3235342e3132362e302f32342d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d3:a0:5e:67:94:22:f7:9d:fe:50:0c:48:99:23:d3:ec:89:
f7:7f:d5:a1:8b:4a:14:09:74:8f:fd:c8:d3:a8:e9:b6:5b:7f:
d0:99:2e:ff:ee:f7:4f:9d:a1:db:69:c9:55:22:a1:80:ae:f8:
b7:a3:c4:2f:fe:f8:0c:3e:16:a0:70:6c:fe:53:e2:4d:56:dc:
8a:47:bc:d2:98:38:2d:14:42:a9:33:ce:76:5f:aa:7c:1d:78:
3a:be:96:24:4d:b5:73:60:ad:e2:e4:0d:9c:9a:c6:70:c3:57:
95:6d:26:ad:94:65:63:77:5a:ee:7c:a8:6a:60:fb:b8:76:e3:
03:5d:3f:e7:60:b6:53:50:4a:d6:41:d5:6a:18:29:df:59:21:
7d:c1:26:15:bd:04:61:3c:cc:27:24:14:2f:75:b4:03:15:3c:
93:b0:a3:e3:45:b1:ff:54:61:26:63:db:78:f4:7f:e5:9d:96:
84:be:1a:2c:33:f2:1d:9b:d0:d1:e5:1b:9d:cc:0f:58:76:3a:
a6:6f:15:56:e2:4d:08:72:79:55:68:80:f2:58:51:84:b1:b6:
cc:46:ab:91:ed:17:26:48:fd:3f:f3:f7:81:c6:9e:90:88:cb:
f5:57:e7:bb:89:81:7d:77:92:42:7b:5a:13:a7:42:41:96:e3:
03:e2:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:05:55 2025 by rpki-client