Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32322d3234203d3e20323634303838.roa
File: 3134332e3230382e342e302f32322d3234203d3e20323634303838.roa (raw, json)
Hash identifier: rwHaD9SGmwzB/DTMwmmcTBQ47//nQ4EPOkmzteUjMek=
Subject key identifier: 62:64:90:DF:07:6A:45:03:40:9E:3D:EB:87:66:6D:E3:B3:79:47:73
Certificate issuer: /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial: 1C7E06D7D0349D57B85C44E012BAF4708A1E7260
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32322d3234203d3e20323634303838.roa
Signing time: Tue 22 Jul 2025 16:54:26 +0000
ROA not before: Tue 22 Jul 2025 16:49:26 +0000
ROA not after: Tue 21 Jul 2026 16:54:26 +0000
asID: 264088
IP address blocks: 143.208.4.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7e:06:d7:d0:34:9d:57:b8:5c:44:e0:12:ba:f4:70:8a:1e:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Validity
Not Before: Jul 22 16:49:26 2025 GMT
Not After : Jul 21 16:54:26 2026 GMT
Subject: CN=626490DF076A4503409E3DEB87666DE3B3794773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:06:c0:10:c6:b5:b0:59:22:b7:61:62:6d:
c0:20:84:c5:4e:3a:33:8f:2b:4c:28:38:5a:09:3c:
91:52:f9:27:a8:ec:83:e7:59:4b:9b:3c:cf:a3:0b:
c0:6f:56:d1:64:bb:ef:4c:1f:e0:c2:c9:cc:0d:61:
17:77:72:4f:a7:d7:e5:df:a7:75:db:19:46:d4:a2:
a7:e4:5b:a9:39:4a:24:23:87:cb:2a:48:3e:28:08:
11:8c:4b:db:5b:b0:0c:5e:f3:1f:ef:12:0b:4c:b0:
6d:f4:b8:d3:7d:2e:56:ac:95:91:ee:1a:b2:3e:a4:
24:f9:a3:24:b0:f5:48:cf:d5:8d:cb:7c:8d:14:43:
01:0c:07:91:1e:4c:25:5c:2f:c5:8a:4c:9a:e0:45:
dd:a7:7a:33:f6:70:13:bf:98:d2:88:e1:aa:d7:ee:
f0:87:98:f1:c1:48:90:d1:d0:a1:cc:5c:ca:54:59:
ef:fc:81:8d:bb:4f:44:93:f1:cd:b5:5d:85:8c:d3:
41:f7:7e:a3:6c:e3:dd:22:09:3d:a0:0b:3e:7f:b4:
98:48:dd:c4:b5:34:a7:bc:20:ff:8a:55:26:40:0e:
a6:ff:18:dd:03:03:3b:a7:8b:11:82:9d:86:63:56:
9c:23:08:51:fd:23:a8:15:a3:52:90:cd:fc:10:c2:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:90:DF:07:6A:45:03:40:9E:3D:EB:87:66:6D:E3:B3:79:47:73
X509v3 Authority Key Identifier:
keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32322d3234203d3e20323634303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.4.0/22
Signature Algorithm: sha256WithRSAEncryption
72:a1:0a:47:53:aa:fd:35:21:bd:54:48:cf:a0:7e:ec:d1:47:
e8:38:1b:e0:c4:3c:1c:85:07:69:15:ea:8d:44:66:4a:e6:c5:
55:ca:54:3f:09:b6:85:de:10:4a:ab:d6:b2:78:c0:d8:f7:59:
3f:5f:9e:3c:5a:9c:cc:89:78:d7:a0:56:cd:b7:6c:76:b4:3a:
4c:de:b3:c3:b3:fd:08:e5:25:3c:be:51:15:5c:c9:9e:47:88:
20:42:fa:68:bb:95:dc:c5:22:c4:1d:ad:7f:8b:dc:71:c4:78:
cc:a2:82:ef:ee:28:98:a4:87:d6:d6:43:de:3a:f0:4c:fb:4f:
ca:ea:74:85:c5:e0:87:3c:9c:08:0b:fe:61:d3:a8:16:cb:eb:
81:85:ba:79:b3:84:31:63:0b:ef:34:10:8a:73:c0:fa:4e:aa:
56:0a:14:f2:3e:ee:64:88:ad:84:45:2e:f4:df:2b:7e:76:62:
46:c9:35:b7:11:1c:16:16:6b:79:c8:05:32:df:de:5c:17:f5:
1f:e8:14:50:30:a5:a3:5c:a6:32:49:c0:94:53:7e:11:c6:b5:
60:93:e7:5f:26:d3:02:b7:1d:bb:d1:fa:17:26:d0:ec:c9:2b:
82:9b:86:87:c6:85:32:8f:dc:65:02:8b:c4:78:fd:3a:51:2b:
90:0e:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:12:08 2025 by rpki-client