Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138372e36312e3131322e302f32312d3234203d3e20323633303437.roa
File: 3138372e36312e3131322e302f32312d3234203d3e20323633303437.roa (raw, json)
Hash identifier: O4+zS8lCOaMsvsjoWDL4FLCCR37InThXhpMau/B/VWE=
Subject key identifier: 95:4A:89:77:22:39:AB:05:CC:2D:CC:3C:6D:1F:23:3D:B9:75:C2:EB
Certificate issuer: /CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Certificate serial: 5BC097E363194B682B78AF9991424E5729BEC9F9
Authority key identifier: 99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138372e36312e3131322e302f32312d3234203d3e20323633303437.roa
Signing time: Fri 24 Oct 2025 16:25:14 +0000
ROA not before: Fri 24 Oct 2025 16:20:14 +0000
ROA not after: Fri 23 Oct 2026 16:25:14 +0000
asID: 263047
IP address blocks: 187.61.112.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c0:97:e3:63:19:4b:68:2b:78:af:99:91:42:4e:57:29:be:c9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Validity
Not Before: Oct 24 16:20:14 2025 GMT
Not After : Oct 23 16:25:14 2026 GMT
Subject: CN=954A89772239AB05CC2DCC3C6D1F233DB975C2EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:29:df:99:99:b7:ac:44:4c:1f:90:44:f5:
de:1c:89:40:af:7a:eb:62:b2:b1:cc:19:7f:8a:7c:
55:0e:5b:6b:4b:90:b4:dd:d3:b3:9c:6a:f1:3d:db:
ec:9f:ee:67:19:59:b5:ed:2c:5f:72:9f:49:14:45:
fa:0c:31:5d:73:52:b6:5d:49:96:04:3a:e5:d7:37:
73:4b:7e:d1:e4:58:31:da:01:04:11:0e:08:8d:72:
4b:bd:e9:44:39:fb:a2:a2:21:23:33:b3:62:58:ed:
10:71:53:bc:22:1b:91:37:40:cc:c9:60:e2:fb:b5:
bd:e4:90:a5:33:33:6b:e3:d5:d1:09:71:df:d4:72:
6a:40:66:ab:b4:70:c5:3d:a8:13:30:f2:01:94:77:
85:33:35:45:fc:d8:f9:80:27:3a:74:00:0e:ab:e7:
a5:72:86:97:43:e2:f9:b9:4b:ce:d0:7a:08:f4:09:
bf:d4:6c:6a:15:92:03:3c:2a:b9:b9:d4:2b:9c:63:
7d:50:d5:8b:f6:ef:e4:68:74:ff:a9:15:33:5b:0c:
b1:89:13:92:8c:bf:78:61:c3:c2:97:98:f3:48:74:
0b:4d:92:2c:37:18:e8:25:23:4d:30:ae:5a:fa:bc:
61:b6:ec:78:f5:f7:a1:c0:c6:10:90:a4:63:86:c0:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:89:77:22:39:AB:05:CC:2D:CC:3C:6D:1F:23:3D:B9:75:C2:EB
X509v3 Authority Key Identifier:
keyid:99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3138372e36312e3131322e302f32312d3234203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.112.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:23:77:57:33:87:40:53:e6:7d:4f:a6:45:5a:de:4a:78:6a:
52:7a:9c:d4:e2:17:e7:f1:d5:64:9e:83:7d:8e:e6:63:55:24:
ee:f4:0e:75:bf:46:58:2a:5c:2a:35:af:1d:41:37:98:6f:5a:
14:94:1c:7a:a8:f1:ee:04:27:7b:8a:da:5f:46:42:40:4d:57:
9d:2a:78:23:2b:50:ea:42:68:bb:75:be:00:c4:d4:be:5f:b3:
d8:7a:30:40:03:85:e0:56:50:b2:40:c9:dc:c7:00:43:bb:90:
3c:9f:69:53:7b:f4:ea:61:de:07:1d:73:71:0e:56:10:f2:2a:
31:e5:eb:1e:54:df:c7:04:41:46:a4:d8:df:c8:5d:d0:9e:d3:
d6:a3:78:64:65:e7:d8:97:2e:26:a4:cb:30:9a:a0:9f:59:17:
c7:06:5d:0c:d4:04:52:ac:cb:5b:a8:85:ec:4b:b1:89:b9:fd:
e1:6c:f3:5d:5b:20:80:4c:87:9b:04:76:77:f9:da:f1:42:ab:
80:9a:c9:30:73:64:f7:85:4e:2b:3a:c0:e2:11:a6:53:dc:62:
ba:7c:74:f9:97:17:8d:be:99:0e:bc:a1:93:c4:35:76:64:c2:
4c:5e:23:1e:68:16:54:34:c1:fe:a6:87:94:87:1a:1c:01:61:
8c:40:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:56:29 2025 by rpki-client