Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/3137372e35352e39322e302f32332d3234203d3e20323732373234.roa
File: 3137372e35352e39322e302f32332d3234203d3e20323732373234.roa (raw, json)
Hash identifier: +wdeYWyxN+grDI1xZgY4y10lvXzJwCBdYS7CDHjVyPg=
Subject key identifier: 08:69:91:DA:C0:08:DE:D4:1E:B6:82:EC:34:3A:78:DE:64:05:51:F0
Certificate issuer: /CN=DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5
Certificate serial: 2666BEA0180164D2F56141B5BD887212E76F97AE
Authority key identifier: DB:1D:0A:6C:41:C0:67:48:85:89:E1:C9:7B:C4:0C:F6:F7:F7:C4:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/3137372e35352e39322e302f32332d3234203d3e20323732373234.roa
Signing time: Mon 20 Oct 2025 17:47:43 +0000
ROA not before: Mon 20 Oct 2025 17:42:43 +0000
ROA not after: Mon 19 Oct 2026 17:47:43 +0000
asID: 272724
IP address blocks: 177.55.92.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:66:be:a0:18:01:64:d2:f5:61:41:b5:bd:88:72:12:e7:6f:97:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5
Validity
Not Before: Oct 20 17:42:43 2025 GMT
Not After : Oct 19 17:47:43 2026 GMT
Subject: CN=086991DAC008DED41EB682EC343A78DE640551F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:7c:ec:a7:29:cd:90:1f:05:01:66:7e:fe:
93:61:7a:e0:57:13:b5:0c:17:12:22:e3:b5:58:d3:
6e:99:11:6a:dc:46:53:76:35:f3:4c:0d:6f:9e:8c:
31:70:db:df:eb:ee:94:6b:8d:a1:67:af:0e:a6:bb:
a3:64:b2:aa:5f:f5:19:59:89:5c:2f:53:f9:d4:36:
75:71:92:6d:11:7c:8b:f5:e2:38:5f:98:a3:08:2e:
17:0c:a3:92:ee:6c:4d:e2:67:28:e7:f6:f5:e5:f8:
2f:27:1f:06:26:03:16:4e:79:8d:1c:cf:91:10:ad:
90:05:3d:54:ef:88:ec:22:c0:4d:ca:f6:df:42:77:
61:73:43:aa:6c:51:26:f2:18:d8:21:d2:a1:ea:4c:
68:d5:02:1c:da:c8:0a:a9:db:fa:89:2e:74:42:52:
e5:17:1e:31:d8:32:9e:61:b4:e3:3a:8a:31:e3:e2:
c6:9f:6f:d3:db:31:86:7c:84:0d:7f:4b:e2:b7:46:
a4:92:d7:e8:39:d6:e8:4b:bf:98:67:ff:8c:ad:e0:
ec:dd:f9:be:8d:b9:40:9c:a1:82:13:da:58:c2:8e:
a2:5f:8f:69:02:86:4a:6e:38:e3:ae:ca:33:b8:ca:
68:47:e3:f9:df:27:3e:d4:a0:40:59:dd:68:e3:c2:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:69:91:DA:C0:08:DE:D4:1E:B6:82:EC:34:3A:78:DE:64:05:51:F0
X509v3 Authority Key Identifier:
keyid:DB:1D:0A:6C:41:C0:67:48:85:89:E1:C9:7B:C4:0C:F6:F7:F7:C4:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/3137372e35352e39322e302f32332d3234203d3e20323732373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.55.92.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:3c:8e:23:c0:b7:59:a6:26:67:b1:01:41:52:77:93:0b:69:
56:4a:f4:c1:41:16:19:1d:b5:9c:36:e2:ad:77:b5:fd:29:6c:
32:8c:ae:9c:a7:d9:31:be:a0:a4:fa:e8:6e:6f:ed:44:34:03:
29:98:c8:55:9a:79:64:6f:11:a2:31:dd:a1:65:1a:a5:99:f9:
76:de:3e:6c:82:84:36:d8:65:7e:3e:fd:f5:2b:ae:3f:e8:a9:
3c:03:67:1e:9b:85:e9:43:be:e0:66:15:aa:71:29:31:8f:09:
17:de:6d:95:87:ab:3f:8e:f2:5d:b5:7b:74:51:31:e1:8b:05:
c2:ce:05:d4:7f:79:e2:08:f8:f8:c1:ed:92:3b:bb:38:68:5c:
4e:a2:bb:b1:7f:5d:42:99:0b:e0:79:b5:ef:8a:d0:50:eb:cf:
0c:72:48:b3:1f:83:88:da:c1:1a:12:e8:f4:3f:f0:7f:03:f4:
3b:5b:92:24:0b:09:63:c0:92:46:56:09:5d:a3:55:4a:fe:b0:
3d:b1:9d:f5:ff:a1:6e:51:a8:32:d0:00:45:55:21:35:3a:53:
42:41:24:98:d2:07:4f:00:69:39:3e:89:f6:c3:fe:05:09:08:
14:e1:5f:77:72:31:f6:17:88:bf:96:4f:77:8b:b0:70:d7:5a:
dd:67:3d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:14:20 2025 by rpki-client