Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138352e302f32342d3234203d3e20323635313138.roa
File: 3134332e3230382e3138352e302f32342d3234203d3e20323635313138.roa (raw, json)
Hash identifier: rnciTOer/HPqTKcMBzi1Cu5R38dbip0IKERduCFA0Xg=
Subject key identifier: 8A:6C:FE:2E:C9:21:48:B4:B5:77:43:1A:22:9D:71:93:2E:70:A1:66
Certificate issuer: /CN=165675A1928929FF394AAD05FDC9293D274BED5D
Certificate serial: 276AC34BD2FA2B5EBDD862FA6F385622ACF08A52
Authority key identifier: 16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138352e302f32342d3234203d3e20323635313138.roa
Signing time: Wed 09 Apr 2025 14:10:25 +0000
ROA not before: Wed 09 Apr 2025 14:05:25 +0000
ROA not after: Wed 08 Apr 2026 14:10:25 +0000
asID: 265118
IP address blocks: 143.208.185.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6a:c3:4b:d2:fa:2b:5e:bd:d8:62:fa:6f:38:56:22:ac:f0:8a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165675A1928929FF394AAD05FDC9293D274BED5D
Validity
Not Before: Apr 9 14:05:25 2025 GMT
Not After : Apr 8 14:10:25 2026 GMT
Subject: CN=8A6CFE2EC92148B4B577431A229D71932E70A166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b8:9b:8d:17:10:aa:0e:f6:89:f7:37:7c:2a:
a4:66:06:f5:75:55:bf:37:b6:de:c8:0c:00:ff:e2:
38:4b:3e:9f:bf:94:83:04:51:86:4a:f2:ba:3b:56:
58:1f:78:1a:c3:83:39:92:5e:69:9e:88:7c:3f:c5:
7f:1d:de:1e:3b:93:f8:80:24:fa:04:c7:dc:66:1a:
d9:a6:ea:27:73:21:09:76:81:5a:1c:df:f2:02:72:
5a:2d:cb:2d:f3:f1:9f:eb:ee:ec:1f:3c:18:01:d8:
e3:be:0e:6d:ce:11:0c:aa:0c:13:3b:3a:0e:f3:46:
9b:21:d2:90:26:fb:31:f6:ac:43:5c:71:eb:4b:9a:
7d:08:ff:af:bd:43:45:f5:3c:f9:ec:84:1f:b7:a1:
ff:0f:c5:fd:25:44:78:c5:dd:d6:2d:1a:32:dd:31:
40:3a:75:ee:55:06:46:4f:cf:24:bb:dd:f8:26:b2:
87:8f:68:12:42:20:12:d0:e8:de:43:9a:af:b8:27:
72:32:27:4b:45:24:f4:95:7e:5a:f1:d5:a0:9a:8c:
ea:1f:43:ac:86:21:10:25:12:39:3e:1c:14:89:06:
74:a9:c3:72:bd:3b:6c:cd:65:49:4b:ac:a1:7e:0b:
1c:30:93:18:62:de:e4:dd:39:8a:23:22:51:f8:ec:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6C:FE:2E:C9:21:48:B4:B5:77:43:1A:22:9D:71:93:2E:70:A1:66
X509v3 Authority Key Identifier:
keyid:16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/165675A1928929FF394AAD05FDC9293D274BED5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138352e302f32342d3234203d3e20323635313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.185.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e6:92:99:59:f1:72:c0:0f:d4:2e:c9:a7:1f:f3:ed:09:27:
66:37:17:26:91:62:a0:4f:12:43:65:67:f6:5a:b5:22:16:a6:
a7:b8:52:14:53:0a:49:63:f5:ad:1f:c2:62:0f:86:67:38:e8:
6d:3d:8c:37:ca:df:ce:72:60:f5:54:7a:1c:1f:89:ed:e8:06:
5d:3a:72:39:4c:bb:10:16:72:25:54:99:23:a5:8f:04:88:12:
a0:06:fd:3a:05:c3:fe:d3:55:e4:cd:53:cb:f5:ff:ec:ca:40:
75:d2:7b:ef:50:7c:b5:fa:c1:6c:1e:2d:9c:4c:ed:d9:1d:0f:
d6:75:24:aa:c1:ed:ec:e2:1c:f1:9d:4f:2c:ac:4a:e2:0b:7f:
22:ac:12:ee:7d:c5:85:93:dd:f1:28:29:c3:78:c7:ab:2c:7d:
94:c2:58:3e:b5:af:f3:eb:69:36:8e:26:04:dd:2c:7b:81:03:
b8:e6:1d:3d:5e:e5:4a:17:96:5e:9e:8c:39:7a:e0:93:93:dd:
f7:2e:8c:6f:a0:c8:e1:59:6d:f2:dd:f1:1a:92:3e:54:eb:b3:
2a:b5:e3:e9:fb:0f:3d:e8:66:3d:4c:86:4c:96:ba:9a:af:41:
98:7b:ca:78:bc:a7:75:0e:75:77:ad:f8:71:11:57:1c:ca:bf:
d7:a6:3d:92
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ2rDS9L6K1692GL6bzhWIqzwilIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1Njc1QTE5Mjg5MjlGRjM5NEFBRDA1RkRDOTI5M0Qy
NzRCRUQ1RDAeFw0yNTA0MDkxNDA1MjVaFw0yNjA0MDgxNDEwMjVaMDMxMTAvBgNV
BAMTKDhBNkNGRTJFQzkyMTQ4QjRCNTc3NDMxQTIyOUQ3MTkzMkU3MEExNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVuJuNFxCqDvaJ9zd8KqRmBvV1
Vb83tt7IDAD/4jhLPp+/lIMEUYZK8ro7VlgfeBrDgzmSXmmeiHw/xX8d3h47k/iA
JPoEx9xmGtmm6idzIQl2gVoc3/ICclotyy3z8Z/r7uwfPBgB2OO+Dm3OEQyqDBM7
Og7zRpsh0pAm+zH2rENccetLmn0I/6+9Q0X1PPnshB+3of8Pxf0lRHjF3dYtGjLd
MUA6de5VBkZPzyS73fgmsoePaBJCIBLQ6N5Dmq+4J3IyJ0tFJPSVflrx1aCajOof
Q6yGIRAlEjk+HBSJBnSpw3K9O2zNZUlLrKF+Cxwwkxhi3uTdOYojIlH47BlhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUimz+LskhSLS1d0MaIp1xky5woWYwHwYDVR0j
BBgwFoAUFlZ1oZKJKf85Sq0F/ckpPSdL7V0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZqdXphb0xFb284aG1vY3o1dEozSkN3dFQ2Qmc5MnIzZ2FoRWFxbjg5
SmMvMC8xNjU2NzVBMTkyODkyOUZGMzk0QUFEMDVGREM5MjkzRDI3NEJFRDVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NTY3NUExOTI4OTI5RkYz
OTRBQUQwNUZEQzkyOTNEMjc0QkVENUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I2anV6YW9MRW9vOGhtb2N6NXRKM0pDd3RUNkJnOTJyM2dhaEVhcW44OUpjLzAv
MzEzNDMzMmUzMjMwMzgyZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/QuTANBgkqhkiG9w0BAQsFAAOCAQEAc+aS
mVnxcsAP1C7Jpx/z7QknZjcXJpFioE8SQ2Vn9lq1Ihamp7hSFFMKSWP1rR/CYg+G
ZzjobT2MN8rfznJg9VR6HB+J7egGXTpyOUy7EBZyJVSZI6WPBIgSoAb9OgXD/tNV
5M1Ty/X/7MpAddJ771B8tfrBbB4tnEzt2R0P1nUkqsHt7OIc8Z1PLKxK4gt/IqwS
7n3FhZPd8Sgpw3jHqyx9lMJYPrWv8+tpNo4mBN0se4EDuOYdPV7lSheWXp6MOXrg
k5Pd9y6Mb6DI4Vlt8t3xGpI+VOuzKrXj6fsPPehmPUyGTJa6mq9BmHvKeLyndQ51
d634cRFXHMq/16Y9kg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:56:25 2025 by rpki-client