Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32342d3234203d3e20323635323430.roa
File: 3136382e302e322e302f32342d3234203d3e20323635323430.roa (raw, json)
Hash identifier: TzpkI7nDpZD5hwC7x7BoWM54mBL/Dx91z9AT9Np6+28=
Subject key identifier: FC:01:AF:EB:EC:C1:83:9A:E1:88:B5:1A:9A:C2:50:BE:85:AF:50:5B
Certificate issuer: /CN=F18830EE57CFAF9A0DC6E60307843318EFBE007E
Certificate serial: 22836D089A4FB06B6F33AD4B9572438242C3AB9A
Authority key identifier: F1:88:30:EE:57:CF:AF:9A:0D:C6:E6:03:07:84:33:18:EF:BE:00:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F18830EE57CFAF9A0DC6E60307843318EFBE007E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32342d3234203d3e20323635323430.roa
Signing time: Thu 23 Oct 2025 17:49:24 +0000
ROA not before: Thu 23 Oct 2025 17:44:24 +0000
ROA not after: Thu 22 Oct 2026 17:49:24 +0000
asID: 265240
IP address blocks: 168.0.2.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:83:6d:08:9a:4f:b0:6b:6f:33:ad:4b:95:72:43:82:42:c3:ab:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F18830EE57CFAF9A0DC6E60307843318EFBE007E
Validity
Not Before: Oct 23 17:44:24 2025 GMT
Not After : Oct 22 17:49:24 2026 GMT
Subject: CN=FC01AFEBECC1839AE188B51A9AC250BE85AF505B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:5d:81:83:f0:bb:bb:88:bf:b6:1d:25:80:
c9:17:e5:16:03:51:71:52:8a:11:75:4e:9f:85:b0:
ef:eb:16:20:9c:52:22:f4:a5:e5:12:b8:1d:5d:2f:
38:ae:a8:d3:a5:fd:47:e0:f3:fe:66:17:63:a6:93:
86:da:ad:78:9c:64:b8:d6:8d:bb:e2:a5:fd:ca:9d:
41:6c:d3:05:11:4b:77:0a:98:32:c5:79:94:98:86:
9c:fb:7c:a8:2f:ce:48:b7:ab:ca:dd:79:c8:e8:ee:
1e:6f:bc:8c:7c:8d:87:23:e4:e6:75:85:9c:c7:ad:
1d:a1:e3:ac:8d:67:45:6c:f2:f4:60:10:f3:42:18:
17:f8:c4:e1:99:f3:3b:10:ef:0c:3d:6c:65:c2:56:
a7:30:06:cb:90:d8:c6:e8:26:44:8d:b4:69:b4:76:
3d:e0:43:09:06:b3:36:b4:f1:02:66:9a:d6:ab:2a:
30:36:3c:f2:14:6d:ed:52:bc:c8:a0:c3:b9:87:bf:
18:a7:7f:28:fb:35:9d:1b:3d:e6:3d:83:39:71:42:
3e:33:a8:a0:4a:a2:20:2f:09:0b:f7:93:8d:85:24:
38:3f:e6:c0:ae:5b:85:cf:a5:cd:80:f2:40:3d:a1:
5c:b8:59:e8:fd:c8:4f:85:ac:8e:1c:ce:61:1f:4a:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:01:AF:EB:EC:C1:83:9A:E1:88:B5:1A:9A:C2:50:BE:85:AF:50:5B
X509v3 Authority Key Identifier:
keyid:F1:88:30:EE:57:CF:AF:9A:0D:C6:E6:03:07:84:33:18:EF:BE:00:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/F18830EE57CFAF9A0DC6E60307843318EFBE007E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F18830EE57CFAF9A0DC6E60307843318EFBE007E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/3136382e302e322e302f32342d3234203d3e20323635323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.2.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c1:d7:ce:09:f2:a7:20:f6:ae:1d:3a:84:c0:dd:50:7a:96:
5b:2d:01:fa:db:66:9d:2a:32:3a:90:b4:f9:74:5b:a2:5a:ee:
9d:a7:83:71:94:30:cd:69:b8:27:a9:b6:d9:39:6a:7c:36:e7:
8c:89:d9:ad:4f:11:69:18:23:2e:30:80:13:54:11:f5:8a:0e:
6b:fa:da:e7:71:55:78:0e:d6:72:0a:4f:02:02:bc:04:a5:dc:
0e:66:32:87:ea:bd:f6:78:64:89:45:35:5f:04:ea:dc:21:d3:
28:e4:de:05:8e:51:9b:a8:05:43:fc:c5:4f:b4:56:4c:71:e4:
c2:b7:67:f5:b4:3c:f2:84:6a:9a:bb:90:11:bf:1e:de:f3:d2:
c4:3c:7f:d6:f8:b5:3a:ed:56:f6:87:fc:e7:35:de:be:a3:45:
59:3b:82:b8:34:1f:ac:c0:93:15:7b:4f:96:87:5f:9b:55:ab:
92:6b:04:a3:60:57:64:9c:58:7b:cc:2b:d5:c8:ac:be:90:ef:
5a:b9:a4:68:c7:ea:69:78:f8:58:ac:20:3e:c0:0e:3d:80:4c:
2b:77:c5:99:c6:1d:fd:cd:54:4b:5a:c2:ea:e3:44:0a:3a:c1:
67:c7:7c:9b:68:e4:0d:56:e3:0d:b5:08:15:49:0d:eb:fd:8c:
f6:0e:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:09:59 2025 by rpki-client