Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/88yzmdnCACc2qYPnCfYUCwmgRW3eMFtWQY7aqWc1SZPW/0/3137302e38312e36342e302f32322d3332203d3e20323636343139.roa
File: 3137302e38312e36342e302f32322d3332203d3e20323636343139.roa (raw, json)
Hash identifier: fyW8fJz/7gn8JpyFDxxxlvFsCP85f/EitGmsBNBCkzw=
Subject key identifier: 14:FA:FC:18:90:36:F7:8F:5A:0B:BA:C4:28:E2:AF:22:B8:28:4B:45
Certificate issuer: /CN=4D0CD93B18B5D138D85795CC62510B357A7ECBFB
Certificate serial: 545A63F31A6A094DAD12BD3A0EAEFB1F3E35F8D0
Authority key identifier: 4D:0C:D9:3B:18:B5:D1:38:D8:57:95:CC:62:51:0B:35:7A:7E:CB:FB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D0CD93B18B5D138D85795CC62510B357A7ECBFB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/88yzmdnCACc2qYPnCfYUCwmgRW3eMFtWQY7aqWc1SZPW/0/3137302e38312e36342e302f32322d3332203d3e20323636343139.roa
Signing time: Thu 31 Jul 2025 19:15:21 +0000
ROA not before: Thu 31 Jul 2025 19:10:21 +0000
ROA not after: Thu 30 Jul 2026 19:15:21 +0000
asID: 266419
IP address blocks: 170.81.64.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5a:63:f3:1a:6a:09:4d:ad:12:bd:3a:0e:ae:fb:1f:3e:35:f8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D0CD93B18B5D138D85795CC62510B357A7ECBFB
Validity
Not Before: Jul 31 19:10:21 2025 GMT
Not After : Jul 30 19:15:21 2026 GMT
Subject: CN=14FAFC189036F78F5A0BBAC428E2AF22B8284B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:bf:a3:9a:d4:29:0b:66:05:bc:12:6b:fb:
77:56:57:9c:3e:42:00:a9:a7:4d:20:3a:d8:3c:06:
5c:ef:65:95:71:f8:43:df:7c:63:fb:ba:71:47:ce:
df:f9:9d:ca:54:1a:9d:ae:9e:e1:36:53:29:a6:b4:
b0:7d:64:c3:b9:aa:e7:af:70:bf:e6:77:1f:a0:3f:
88:0e:f6:d7:e8:80:99:ab:fd:b9:07:68:18:02:21:
bf:df:d2:7b:ac:55:6f:6d:1d:3b:fd:7d:59:b0:36:
fe:43:8c:9f:34:04:b4:21:57:0a:11:1e:ac:17:53:
cc:a3:23:31:4c:32:f8:50:06:c1:86:10:89:07:b3:
05:5b:3e:25:df:0b:e8:87:87:39:0a:5c:1b:67:69:
c3:63:f3:91:a3:0e:ca:76:14:7d:48:b2:cd:e2:3d:
60:51:ac:f1:8a:9f:19:24:61:15:67:f3:bc:39:df:
bc:c1:cd:7f:45:da:e1:7a:b2:82:6a:fd:5b:ca:d1:
ab:1a:8c:f0:fe:96:ea:32:b6:d9:61:6d:9f:83:dc:
66:9e:3b:a1:8a:8f:f1:05:8f:0a:fd:8d:62:9e:97:
a2:32:b2:39:eb:08:e1:46:a2:4a:4d:e1:75:19:e1:
2a:25:67:44:67:49:a9:11:6c:9b:a7:46:9e:59:9f:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:FC:18:90:36:F7:8F:5A:0B:BA:C4:28:E2:AF:22:B8:28:4B:45
X509v3 Authority Key Identifier:
keyid:4D:0C:D9:3B:18:B5:D1:38:D8:57:95:CC:62:51:0B:35:7A:7E:CB:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/88yzmdnCACc2qYPnCfYUCwmgRW3eMFtWQY7aqWc1SZPW/0/4D0CD93B18B5D138D85795CC62510B357A7ECBFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D0CD93B18B5D138D85795CC62510B357A7ECBFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/88yzmdnCACc2qYPnCfYUCwmgRW3eMFtWQY7aqWc1SZPW/0/3137302e38312e36342e302f32322d3332203d3e20323636343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.64.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:44:15:c3:58:7e:1a:8e:17:48:a5:95:ac:ae:fd:56:49:2d:
44:f9:c3:7d:4b:08:48:49:50:9b:ae:b5:09:46:56:33:47:56:
7e:7a:43:ad:5d:da:a8:a3:97:fc:3b:fe:cb:3f:18:4a:41:df:
03:36:bc:e2:e9:b9:72:9c:7e:81:8a:df:33:ed:47:8c:ef:af:
e3:3d:b7:ec:4e:cf:30:66:43:19:9b:70:75:25:1e:e1:e5:9d:
65:b3:f9:35:26:32:4c:56:df:d3:08:b4:bf:d3:2f:59:de:33:
7e:74:d0:ca:2e:e5:94:b7:db:d0:d3:7e:3a:6d:0b:67:be:28:
ea:75:39:51:de:66:c0:d4:1a:44:47:d7:1d:ad:9a:4c:96:fa:
a4:3a:27:4f:f8:5f:c2:7a:59:49:b8:a5:e2:db:2e:5f:78:c3:
8b:0b:3b:9a:b0:10:dd:4e:2d:e6:76:91:ed:5e:bd:0f:c9:13:
33:bf:c5:84:a9:f0:1b:27:2f:9e:77:9d:e3:4d:da:ac:45:13:
79:51:89:1f:a5:e8:6c:a4:3c:85:a2:b8:13:e2:10:4c:9f:13:
44:25:14:d9:be:90:d5:ff:97:9b:31:62:40:d5:1b:39:96:50:
53:94:dd:b1:b5:00:90:3b:36:5f:65:b5:89:06:5f:0e:a0:bf:
36:39:ff:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 17:27:28 2025 by rpki-client