Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138362e3233372e32342e302f32322d3234203d3e20323633303437.roa
File: 3138362e3233372e32342e302f32322d3234203d3e20323633303437.roa (raw, json)
Hash identifier: fwxNGjuFd1h/w5YXs47b9c93tB+N0ptgGKj+lj20XNM=
Subject key identifier: B8:21:B6:12:88:65:9B:E4:90:6F:59:2B:D9:86:D9:A3:10:FF:E3:EB
Certificate issuer: /CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Certificate serial: 037AF61793FF43F4765F25CC4C279605A9ED8113
Authority key identifier: 99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138362e3233372e32342e302f32322d3234203d3e20323633303437.roa
Signing time: Fri 24 Oct 2025 16:24:58 +0000
ROA not before: Fri 24 Oct 2025 16:19:58 +0000
ROA not after: Fri 23 Oct 2026 16:24:58 +0000
asID: 263047
IP address blocks: 186.237.24.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7a:f6:17:93:ff:43:f4:76:5f:25:cc:4c:27:96:05:a9:ed:81:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Validity
Not Before: Oct 24 16:19:58 2025 GMT
Not After : Oct 23 16:24:58 2026 GMT
Subject: CN=B821B61288659BE4906F592BD986D9A310FFE3EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b2:c7:53:fa:de:a5:ad:2c:5f:01:fc:4b:7e:
87:a4:5b:81:6c:b0:f0:07:2b:2e:dc:79:07:4b:cb:
58:69:13:81:38:83:32:22:b2:62:65:e7:b4:e6:6f:
70:bc:d7:2c:79:61:9f:d5:ae:b6:2a:28:67:8e:a1:
ed:12:3d:08:67:f2:eb:10:e8:13:53:33:e7:da:2c:
5b:6b:05:15:4f:63:2e:8f:4e:a2:78:4c:aa:dc:bb:
35:d1:4e:d3:30:ee:1f:23:a8:be:72:23:a1:21:7d:
2b:d9:cf:38:c4:b6:5e:57:50:89:31:e6:84:0c:b0:
45:b4:77:72:79:63:1b:ff:23:c8:3c:26:b3:fd:06:
67:e4:09:7b:f1:0d:19:88:29:fe:a7:e4:ae:46:e9:
7a:90:dc:75:b7:63:77:85:38:9d:f0:f3:a3:46:7a:
e0:d5:88:6b:c7:05:05:be:cf:9c:f0:e7:c4:6e:2d:
e5:04:80:e3:cf:dc:45:5d:8e:bf:9b:56:0e:66:57:
c9:51:1c:ad:4c:9a:e7:8f:78:01:39:09:4b:83:e4:
fc:a0:2b:5e:df:e4:79:85:9c:f1:ed:75:42:c1:1d:
7a:f8:ac:9e:a3:5e:37:7d:5f:6d:c7:7d:ed:0f:d5:
81:c3:a2:1f:b7:c0:9b:5a:e7:6a:f1:d5:72:af:4e:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:21:B6:12:88:65:9B:E4:90:6F:59:2B:D9:86:D9:A3:10:FF:E3:EB
X509v3 Authority Key Identifier:
keyid:99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138362e3233372e32342e302f32322d3234203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.237.24.0/22
Signature Algorithm: sha256WithRSAEncryption
74:4f:0c:74:35:e0:31:2b:28:95:99:d1:b6:8a:59:7c:ff:dd:
70:56:9d:10:f2:e4:e8:2f:dc:45:a5:fb:54:07:95:f1:a9:44:
4e:a1:7e:ff:cd:92:93:7e:07:5f:e6:f3:cd:84:a6:38:20:a3:
c1:8e:f7:32:9c:ee:69:a0:62:6f:93:6a:cb:ec:a0:d0:e9:8c:
be:4a:19:c0:ee:33:08:0a:bc:bc:c2:89:b5:35:9f:76:dc:1a:
06:72:c2:68:de:0c:22:82:fb:4a:23:14:d7:15:4c:0e:28:39:
97:35:77:40:e6:48:80:a0:56:8b:5c:9d:5f:84:5b:2d:91:9f:
ee:ee:1c:91:6f:57:76:cc:d6:39:34:2d:78:12:dc:cd:48:cd:
38:16:97:03:fd:81:00:89:d3:78:ab:d8:0c:36:69:24:b1:52:
d2:9b:eb:78:bc:03:7a:21:40:9e:8d:a4:0c:ef:0d:ef:eb:f7:
fb:91:b3:55:41:5a:8f:65:1f:22:e2:0a:5a:96:4b:0d:83:5e:
b7:c1:f9:e8:57:07:f5:d6:18:76:6d:21:d4:a1:3b:6f:b4:ce:
d9:e6:c7:76:59:55:30:a5:2c:19:69:21:ee:bd:18:8e:02:e1:
fa:45:21:3f:f2:8b:41:88:99:14:d6:07:31:d3:0b:f2:34:dc:
1c:85:ef:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:57:54 2025 by rpki-client