Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3235302e302f32342d3332203d3e203631363638.roa
File: 3133312e3130302e3235302e302f32342d3332203d3e203631363638.roa (raw, json)
Hash identifier: v0yB/D1xCYUVa+Yexj2EtBteIaVLFpISrJgkGOdulXg=
Subject key identifier: 8F:0C:6C:4C:DA:D3:7B:45:77:DB:0E:6D:E9:46:F3:50:F3:16:42:60
Certificate issuer: /CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
Certificate serial: 493389B4EDF5650C557FBB3649B9EA4A8A22CE28
Authority key identifier: B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3235302e302f32342d3332203d3e203631363638.roa
Signing time: Wed 30 Apr 2025 20:05:24 +0000
ROA not before: Wed 30 Apr 2025 20:00:24 +0000
ROA not after: Wed 29 Apr 2026 20:05:24 +0000
asID: 61668
IP address blocks: 131.100.250.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:33:89:b4:ed:f5:65:0c:55:7f:bb:36:49:b9:ea:4a:8a:22:ce:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6C41D78566AAF766941ABA2BC65FD3978BA945F
Validity
Not Before: Apr 30 20:00:24 2025 GMT
Not After : Apr 29 20:05:24 2026 GMT
Subject: CN=8F0C6C4CDAD37B4577DB0E6DE946F350F3164260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:89:f8:58:1b:83:c3:95:ef:b8:3f:17:30:
43:d1:8c:00:ec:a6:ed:06:a0:e5:91:cd:7d:40:da:
8f:5d:b3:fd:27:14:2b:06:40:c6:73:38:38:1c:3a:
ab:eb:e8:18:f1:4a:55:ae:cc:bc:26:7d:fd:44:8e:
9d:41:10:b0:6d:89:0a:5c:7c:4f:6d:b4:b8:ad:ae:
b4:3e:d4:2b:14:91:17:f9:43:65:7e:22:94:0f:c6:
9c:57:b6:75:e0:9e:b3:c1:c2:46:6f:db:29:7c:5a:
b1:cf:9e:b2:e2:c9:f0:50:1b:76:e8:96:8b:b6:aa:
31:3b:d4:90:ef:47:bf:c1:ff:3a:d5:12:fd:91:cb:
5d:5a:b3:c2:e6:3b:ea:3f:a2:66:df:65:62:20:e5:
57:04:c5:93:a2:a4:43:b7:6e:47:c2:82:8a:1d:bf:
dc:bc:94:f0:b6:81:1c:19:e4:da:74:83:4a:04:1a:
d8:74:d3:40:3a:69:41:f2:aa:01:ac:8c:89:54:61:
fb:b6:73:49:5a:22:8f:71:83:e7:ac:30:86:52:b4:
ad:19:62:53:ab:c7:d0:3c:dc:12:84:45:99:ea:93:
dc:a3:b8:39:c0:a1:c3:4d:02:54:dc:da:5d:c1:4b:
3b:b6:7e:c9:77:6f:07:67:54:e4:09:c6:d2:1f:1c:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0C:6C:4C:DA:D3:7B:45:77:DB:0E:6D:E9:46:F3:50:F3:16:42:60
X509v3 Authority Key Identifier:
keyid:B6:C4:1D:78:56:6A:AF:76:69:41:AB:A2:BC:65:FD:39:78:BA:94:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/B6C41D78566AAF766941ABA2BC65FD3978BA945F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C41D78566AAF766941ABA2BC65FD3978BA945F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JmK7i6eZ8B9H8zjDJrAczyQBTTCkhnaeXJS5sY2TA8K/0/3133312e3130302e3235302e302f32342d3332203d3e203631363638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.250.0/24
Signature Algorithm: sha256WithRSAEncryption
db:0e:60:fb:9c:5d:df:ae:24:b0:83:cd:3d:d4:b2:b5:71:67:
63:d4:45:53:43:f0:f3:68:78:63:4a:2c:8a:c5:40:d8:4d:5e:
ff:77:83:9d:90:f7:9e:cb:3f:70:96:6e:d3:9f:18:a4:aa:87:
18:bc:62:11:45:ef:ca:e1:58:a4:ee:51:e4:1d:90:61:a6:85:
20:79:2d:c5:c8:0f:8c:39:0c:0c:9d:84:1e:ed:33:4a:69:21:
d8:31:7a:b5:7b:61:97:3c:21:17:e6:9c:4d:33:ed:4d:43:1f:
88:e4:50:a4:67:9c:42:5d:40:21:a7:eb:73:f9:c1:e9:ce:1b:
a7:d6:db:e9:cb:1e:ed:95:2a:a2:7c:db:44:f5:49:82:db:b5:
6a:36:7c:48:b8:65:4f:ed:78:99:9f:50:49:fa:c5:68:c6:90:
1f:b5:65:ae:6c:23:10:15:c9:62:58:9d:89:19:74:6c:6a:10:
81:0d:f1:1b:d1:48:fb:2d:69:9a:a5:44:ca:86:57:8e:2e:1b:
20:8b:3c:bd:bf:a3:f8:97:41:b6:c2:c6:a2:44:75:ca:a3:92:
0c:5f:5f:90:e4:0a:22:ba:00:1a:ed:bf:ee:cc:69:1e:08:95:
67:f9:3d:1c:8e:d9:93:88:61:79:5c:a2:1e:1a:08:7b:0d:4f:
3f:26:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:54:10 2025 by rpki-client