Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa
File: 3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa (raw, json)
Hash identifier: hzbPMFwjiE9CZECQQr8LGdmmRPWb2T2MZU8uRpQZvDs=
Subject key identifier: CD:5A:4F:FB:04:83:BF:B8:A4:B5:33:5E:BF:B8:32:8C:91:C7:36:2E
Certificate issuer: /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial: 3BD178F03029E0575A59E9290BECDF6BE24402C0
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa
Signing time: Wed 11 Jun 2025 11:53:27 +0000
ROA not before: Wed 11 Jun 2025 11:48:27 +0000
ROA not after: Wed 10 Jun 2026 11:53:27 +0000
asID: 265465
IP address blocks: 168.196.160.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d1:78:f0:30:29:e0:57:5a:59:e9:29:0b:ec:df:6b:e2:44:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Validity
Not Before: Jun 11 11:48:27 2025 GMT
Not After : Jun 10 11:53:27 2026 GMT
Subject: CN=CD5A4FFB0483BFB8A4B5335EBFB8328C91C7362E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:88:2c:ce:cd:6b:c6:ff:71:32:c9:fb:ae:
cb:51:1b:80:5a:3e:c9:91:63:9e:33:e9:2b:9b:48:
41:88:f0:7c:3a:41:0a:97:c8:28:88:bc:48:a8:a0:
54:80:45:21:c7:54:82:3e:fd:3e:fa:5b:62:dd:7c:
cf:d1:fa:77:aa:70:b3:15:9f:c4:04:c2:80:3e:20:
f2:d2:f2:5d:16:38:a4:34:4d:a7:40:ed:e2:0e:f7:
bc:3d:4d:ed:ab:06:68:cd:a2:12:09:29:d3:8c:ad:
1d:a0:5d:b7:73:99:c4:98:f5:11:e5:cc:24:3a:22:
81:3b:4a:ed:5e:38:93:fa:aa:55:9b:ca:4c:61:a2:
06:70:e1:25:60:9c:a7:d3:6b:36:b7:c2:62:a2:ee:
2a:d8:a3:4c:af:2d:38:f2:62:11:1f:97:42:3f:8e:
be:ce:bd:5f:30:11:e9:76:41:8d:c3:3d:fc:bb:d1:
76:c3:7b:d0:12:0d:51:df:05:f1:58:4d:94:7f:f7:
66:6e:af:44:ba:54:09:fb:4d:d1:bb:cb:d0:d3:c5:
05:ff:38:b9:86:88:9e:12:17:95:05:03:c5:9d:c8:
53:41:8e:5a:94:5a:41:bf:ef:9f:30:41:c4:15:5e:
0c:ec:bb:6a:1d:d4:32:0b:7d:0e:1e:8f:2c:cb:7b:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5A:4F:FB:04:83:BF:B8:A4:B5:33:5E:BF:B8:32:8C:91:C7:36:2E
X509v3 Authority Key Identifier:
keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ef:30:c0:d0:a8:ac:94:ac:1b:2d:1e:79:67:24:b5:0b:70:
59:14:c7:71:0b:27:20:9c:d2:c0:2e:f7:79:1c:aa:ec:bb:eb:
7a:4c:29:4a:b9:d7:a8:ce:f4:9c:ab:7d:41:49:a1:ed:b1:62:
28:05:55:b3:3a:dd:bf:24:7c:04:7c:12:9a:4b:78:c0:45:b6:
bd:1b:b1:44:cf:7d:cf:19:47:e5:9b:2f:34:53:d7:eb:08:16:
be:44:a1:ca:c7:22:dd:62:72:f6:50:c9:c3:c1:a3:9c:b2:34:
b9:3d:58:1b:fa:af:1a:8e:50:cc:c1:67:4f:35:a0:ee:2e:72:
69:29:22:30:92:00:bc:46:5f:92:94:f0:6b:a2:d6:fb:79:b3:
93:cf:ad:76:5d:e2:ec:0a:de:6c:ac:d1:eb:d0:55:e1:af:0a:
c2:c4:75:62:d0:99:b4:29:d8:df:af:8e:b7:ff:47:33:8f:3c:
c2:6c:9a:87:80:2e:35:98:13:b4:b5:7f:90:3b:33:c0:8b:0f:
cb:f8:c3:be:ad:84:20:2f:98:af:71:8a:1b:89:d2:9c:59:27:
06:f2:cc:5a:c0:e6:8d:4a:27:62:3a:fb:bd:c3:e6:27:29:26:
60:e6:d3:ff:63:c4:fa:93:2d:31:19:db:43:c3:29:ef:49:73:
80:35:ad:98
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUO9F48DAp4FdaWekpC+zfa+JEAsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY0MjQ5MjY1NDlFNEU1MUM1RDYwNDA1MzJCMzRGNjMw
M0FBQzlCNjAeFw0yNTA2MTExMTQ4MjdaFw0yNjA2MTAxMTUzMjdaMDMxMTAvBgNV
BAMTKENENUE0RkZCMDQ4M0JGQjhBNEI1MzM1RUJGQjgzMjhDOTFDNzM2MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnT4gszs1rxv9xMsn7rstRG4Ba
PsmRY54z6SubSEGI8Hw6QQqXyCiIvEiooFSARSHHVII+/T76W2LdfM/R+neqcLMV
n8QEwoA+IPLS8l0WOKQ0TadA7eIO97w9Te2rBmjNohIJKdOMrR2gXbdzmcSY9RHl
zCQ6IoE7Su1eOJP6qlWbykxhogZw4SVgnKfTaza3wmKi7irYo0yvLTjyYhEfl0I/
jr7OvV8wEel2QY3DPfy70XbDe9ASDVHfBfFYTZR/92Zur0S6VAn7TdG7y9DTxQX/
OLmGiJ4SF5UFA8WdyFNBjlqUWkG/758wQcQVXgzsu2od1DILfQ4ejyzLe0s5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzVpP+wSDv7iktTNev7gyjJHHNi4wHwYDVR0j
BBgwFoAU9kJJJlSeTlHF1gQFMrNPYwOqybYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGJLdHFXVFczNXpnZkZQblA4NHl0MnZyTHhEa0oxem9WV0p2Zm9QQTdZ
ZG4vMC9GNjQyNDkyNjU0OUU0RTUxQzVENjA0MDUzMkIzNEY2MzAzQUFDOUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2NDI0OTI2NTQ5RTRFNTFD
NUQ2MDQwNTMyQjM0RjYzMDNBQUM5QjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiS3RxV1RXMzV6Z2ZGUG5QODR5dDJ2ckx4RGtKMXpvVldKdmZvUEE3WWRuLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjEoDANBgkqhkiG9w0BAQsFAAOCAQEAoO8w
wNCorJSsGy0eeWcktQtwWRTHcQsnIJzSwC73eRyq7LvrekwpSrnXqM70nKt9QUmh
7bFiKAVVszrdvyR8BHwSmkt4wEW2vRuxRM99zxlH5ZsvNFPX6wgWvkShysci3WJy
9lDJw8GjnLI0uT1YG/qvGo5QzMFnTzWg7i5yaSkiMJIAvEZfkpTwa6LW+3mzk8+t
dl3i7ArebKzR69BV4a8KwsR1YtCZtCnY36+Ot/9HM488wmyah4AuNZgTtLV/kDsz
wIsPy/jDvq2EIC+Yr3GKG4nSnFknBvLMWsDmjUonYjr7vcPmJykmYObT/2PE+pMt
MRnbQ8Mp70lzgDWtmA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:49 2025 by rpki-client