Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa
File: 3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa (raw, json)
Hash identifier: gdg4CkiWZlxLCSS9uiJZl16iA1AfnTQyxIxntLHmqDo=
Subject key identifier: 83:EE:FC:0D:6D:0E:9B:81:FD:5A:5F:21:87:78:69:2B:F7:4F:72:EF
Certificate issuer: /CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
Certificate serial: 347AB12F1759FAA96B5AF21AEF1CACD5ABD70F9A
Authority key identifier: B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa
Signing time: Thu 06 Mar 2025 02:16:35 +0000
ROA not before: Thu 06 Mar 2025 02:11:35 +0000
ROA not after: Thu 05 Mar 2026 02:16:35 +0000
asID: 263972
IP address blocks: 138.255.128.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7a:b1:2f:17:59:fa:a9:6b:5a:f2:1a:ef:1c:ac:d5:ab:d7:0f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B20E3C8281FB009A48EDFE56131C930D739F11C4
Validity
Not Before: Mar 6 02:11:35 2025 GMT
Not After : Mar 5 02:16:35 2026 GMT
Subject: CN=83EEFC0D6D0E9B81FD5A5F218778692BF74F72EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:e9:98:d1:38:3f:ca:e9:e4:bb:8a:24:0a:
07:82:19:f5:a0:39:59:ec:07:10:a0:d5:7c:3c:f5:
19:59:a1:10:6f:f4:30:52:0a:0c:a8:84:13:a3:0f:
60:15:c4:d8:27:7d:b4:5b:75:8c:78:1c:be:b9:c9:
6d:b0:cf:c6:48:35:e1:43:60:df:26:bd:51:de:b0:
9d:3f:3c:35:c8:74:f9:26:e6:33:e7:65:92:58:54:
ad:19:36:a3:08:66:e0:bb:02:54:d6:a0:87:fc:d3:
e0:eb:18:87:ea:88:06:d5:56:61:b8:5c:23:bd:70:
fe:e2:1f:26:c7:25:d2:c8:98:22:55:59:62:fc:89:
b6:dd:ec:b7:72:0c:20:3f:e0:1e:09:c7:fd:30:9a:
ab:4c:d5:31:ab:88:ba:c3:8d:8c:ab:4e:a9:29:b7:
9c:7c:d2:e1:86:07:46:e7:bd:73:4f:49:35:af:42:
d8:9b:38:7d:1d:e4:a0:b1:dc:b7:b8:77:41:57:61:
f8:11:5a:13:b4:9e:c7:89:87:f5:ac:bd:29:75:65:
0f:0e:3d:b8:7e:43:53:85:de:cf:6f:1d:c0:33:32:
c7:04:7b:6c:77:66:bc:de:c1:81:e5:07:68:a5:27:
a5:51:2f:98:d8:fb:d0:f3:94:24:7c:6f:58:9c:fc:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EE:FC:0D:6D:0E:9B:81:FD:5A:5F:21:87:78:69:2B:F7:4F:72:EF
X509v3 Authority Key Identifier:
keyid:B2:0E:3C:82:81:FB:00:9A:48:ED:FE:56:13:1C:93:0D:73:9F:11:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B20E3C8281FB009A48EDFE56131C930D739F11C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/1/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.128.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ec:38:25:f3:bb:67:9a:bb:09:5a:a8:bd:d2:c6:68:d2:5e:
7b:e6:24:24:18:6a:51:da:1f:98:3e:f2:e7:19:a6:d2:4c:f3:
c3:51:ce:53:dc:fd:4f:0c:07:f4:ec:ef:ad:f5:c1:01:09:0b:
83:64:62:40:2b:1e:c5:36:70:77:73:91:3f:bc:c1:2e:7d:dc:
f0:2b:6f:72:be:d1:f5:40:90:e7:27:57:0e:9d:60:28:38:b0:
8b:cf:2b:7a:e7:84:1b:b1:d5:76:00:52:3a:f9:b6:ff:ad:ab:
54:b8:52:b4:c2:dc:a2:09:f4:eb:3d:ca:ff:f8:79:90:13:05:
30:e2:1b:cd:8c:25:26:2c:ac:aa:d0:e2:b0:5f:78:22:b9:84:
d3:c5:e2:f1:f1:0c:04:3d:a3:91:ad:c0:89:bb:8c:05:0b:4e:
0d:ee:46:97:9e:6f:b7:05:6b:91:df:1a:48:66:30:f6:38:ff:
54:73:5c:93:5c:46:4c:81:82:6e:67:19:d9:9f:c3:d1:9b:ed:
3d:2c:0c:1e:ef:aa:7e:a6:fb:a1:87:22:8f:95:f8:5d:85:4c:
47:87:20:95:39:e4:a9:3e:c6:83:6a:b8:e3:d0:3c:05:a3:cd:
c3:1d:36:ba:50:ac:ef:56:4a:b8:ec:03:98:66:d7:58:8b:e9:
12:b3:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:58 2025 by rpki-client