Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa
File: 3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa (raw, json)
Hash identifier: kODHeoFn/xnrE/33Kfx7sYV6wtwXz0ElamDkvxtDFBc=
Subject key identifier: 55:BD:8D:51:C4:9E:58:24:23:1E:D9:2D:C9:27:C6:E5:93:AC:E8:59
Certificate issuer: /CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Certificate serial: 541C5ADE4D5A0D91AC3A4A91D0BF5C84D228D14B
Authority key identifier: 99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa
Signing time: Fri 24 Oct 2025 16:25:30 +0000
ROA not before: Fri 24 Oct 2025 16:20:30 +0000
ROA not after: Fri 23 Oct 2026 16:25:30 +0000
asID: 263047
IP address blocks: 191.243.144.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1c:5a:de:4d:5a:0d:91:ac:3a:4a:91:d0:bf:5c:84:d2:28:d1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Validity
Not Before: Oct 24 16:20:30 2025 GMT
Not After : Oct 23 16:25:30 2026 GMT
Subject: CN=55BD8D51C49E5824231ED92DC927C6E593ACE859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f3:97:c6:0a:d0:59:00:38:39:36:ec:9d:2e:
6b:01:b8:f8:5e:6a:f9:3c:74:62:56:c4:8b:e2:05:
88:82:82:8a:29:67:0c:cc:84:e8:41:49:30:57:38:
d7:8b:e3:ee:4d:5e:68:4e:7a:63:91:79:02:6d:c2:
6f:42:63:d2:b0:c7:39:ac:ec:13:b7:dd:5b:f6:5e:
e8:f3:38:e4:67:f2:0b:52:8b:53:80:42:02:66:2c:
42:8c:f9:ea:2c:87:44:d7:60:16:2c:58:e1:97:6f:
ef:63:49:90:14:87:db:b0:a4:d6:57:33:de:31:e5:
52:05:01:bf:97:53:ae:3b:c5:46:d5:8f:c6:51:1c:
e7:31:cd:37:7e:7d:bd:b5:5d:70:3e:ac:b1:a6:5d:
48:2e:8e:39:b0:bf:ab:ac:e0:49:cb:35:08:57:b4:
d8:46:82:f1:0d:e4:10:94:b2:de:da:64:f4:4c:23:
bb:50:02:75:28:ab:d4:c2:91:ec:85:6f:45:ad:3e:
a7:3d:3f:3c:14:55:54:2f:58:c0:bd:88:f3:1f:c5:
fa:af:66:56:dd:51:6a:56:a2:c4:d1:37:06:f6:53:
8c:cd:ca:cd:ea:db:1a:e7:84:5a:b6:88:29:aa:25:
9e:7c:6f:7e:dd:d9:be:e2:1e:80:a9:8e:a2:0f:3c:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BD:8D:51:C4:9E:58:24:23:1E:D9:2D:C9:27:C6:E5:93:AC:E8:59
X509v3 Authority Key Identifier:
keyid:99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.144.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:91:ad:a8:a5:d6:52:ca:df:ed:3c:06:1a:b5:79:7e:cf:c2:
23:cf:ff:44:75:cd:8a:b5:4b:3e:7f:7a:f1:7f:e3:62:b5:6d:
63:38:8b:94:bc:34:a7:a5:2c:1f:ad:dc:09:44:83:f0:62:85:
98:56:f1:12:55:22:14:7e:c2:9d:e3:8a:b7:31:1b:e5:67:f6:
d5:ed:83:cf:ed:89:3d:a1:63:a8:22:fa:78:1f:17:21:15:bf:
22:7e:f7:d9:fa:73:47:4e:c3:01:38:8b:95:dd:7a:e0:bf:66:
38:a9:ae:f1:fb:9a:0d:ec:00:f0:22:b1:68:75:6f:b1:ed:9a:
cc:e6:cd:30:cb:c0:74:68:d2:1f:b1:4b:c6:38:49:db:1c:b5:
b7:ab:3a:7c:7a:53:70:9a:6f:0b:a9:76:78:9c:46:f6:31:ad:
75:91:f7:f0:3c:39:3a:fc:10:68:2d:c6:28:89:2e:76:6f:c5:
c3:48:b5:7a:d7:5e:04:7d:79:a5:77:96:ab:b9:50:02:bb:e7:
77:0f:b8:01:df:13:c2:d6:81:1e:5c:9e:46:07:72:be:ba:93:
93:24:71:d4:fa:79:35:8e:f8:c9:27:ea:cb:ff:f9:70:cc:85:
05:fc:db:b1:81:81:ea:64:85:74:0f:14:bb:a2:b7:37:1e:58:
51:ff:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:57:53 2025 by rpki-client