Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135362e302f32322d3232203d3e203238313630.roa
File: 3138372e36322e3135362e302f32322d3232203d3e203238313630.roa (raw, json)
Hash identifier: YhBNkzsZzvX70U2xZfGMPyhkxrZogez74z6scGtP75o=
Subject key identifier: 3D:1A:AD:B9:D5:89:58:21:0B:59:2D:CE:05:37:47:A5:F8:91:E1:8D
Certificate issuer: /CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
Certificate serial: 5B77AF577E4442141EADA5F30623A84719B1EAA3
Authority key identifier: 07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135362e302f32322d3232203d3e203238313630.roa
Signing time: Wed 02 Jul 2025 18:55:08 +0000
ROA not before: Wed 02 Jul 2025 18:50:08 +0000
ROA not after: Wed 01 Jul 2026 18:55:08 +0000
asID: 28160
IP address blocks: 187.62.156.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:77:af:57:7e:44:42:14:1e:ad:a5:f3:06:23:a8:47:19:b1:ea:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56
Validity
Not Before: Jul 2 18:50:08 2025 GMT
Not After : Jul 1 18:55:08 2026 GMT
Subject: CN=3D1AADB9D58958210B592DCE053747A5F891E18D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:a2:a0:7f:3b:7a:a4:d0:c7:86:e0:a0:9c:
84:c0:1c:8f:4d:f3:36:b5:4c:f5:c7:a8:a9:f4:91:
ba:0f:8e:e9:a9:66:5f:e1:83:70:f0:de:c6:18:49:
45:ed:a3:8d:37:7d:44:f0:30:33:40:e4:d5:de:0f:
52:f9:f0:a1:e6:20:a0:3f:63:fb:ec:76:26:3a:6c:
ec:57:63:0c:c3:8b:1e:fa:5a:b1:50:20:89:aa:9f:
1d:7b:a3:2b:7e:d1:da:2f:25:82:50:cc:99:fa:c0:
8d:53:8b:89:ce:31:e4:0a:35:8c:1b:65:0b:18:ad:
fe:d8:fa:8f:fb:36:4a:9e:d2:29:bd:83:b8:ee:2f:
73:9e:25:59:76:66:0e:48:51:eb:28:94:8c:31:a5:
55:f5:c8:f8:bc:f8:cd:05:01:94:ec:0a:05:99:e3:
12:61:d7:25:84:4a:a4:26:33:c6:3b:f3:df:85:6e:
65:66:66:1f:62:09:4e:69:ca:d3:5e:43:3e:d3:fe:
cd:3f:9f:a6:e4:5b:77:07:5d:3b:a8:e2:52:26:fa:
83:dd:29:30:2e:a7:5a:81:58:a6:a8:85:d3:35:76:
b9:08:e1:75:fc:a6:14:d6:84:09:7a:46:68:96:9e:
da:53:0a:4a:5d:5e:5f:df:e2:67:36:ad:32:17:25:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:AD:B9:D5:89:58:21:0B:59:2D:CE:05:37:47:A5:F8:91:E1:8D
X509v3 Authority Key Identifier:
keyid:07:BA:B4:0D:FE:C0:A8:3E:0B:A6:12:10:DF:BE:C3:E0:BC:49:DD:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07BAB40DFEC0A83E0BA61210DFBEC3E0BC49DD56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135362e302f32322d3232203d3e203238313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.62.156.0/22
Signature Algorithm: sha256WithRSAEncryption
86:f5:94:47:b9:0d:9b:c6:f5:45:e1:38:94:95:86:8b:b5:ec:
ed:dc:f2:04:6b:21:e3:20:ed:bb:4c:ff:fa:8d:c3:f7:1e:56:
26:c7:b5:b8:88:1a:3b:cc:38:8e:51:c3:14:c0:3d:e2:26:7f:
b3:8c:d2:0b:bf:ea:df:17:cb:6a:8e:67:af:fa:a5:b9:ad:91:
21:1a:1c:a6:ed:59:74:cd:d8:bd:4a:c8:3f:f4:9f:9d:85:54:
cc:12:b9:cf:30:63:18:60:9f:5f:4b:10:42:e9:40:ef:80:ea:
61:92:34:ee:69:0d:7e:f3:0b:4f:52:7e:96:0c:29:4a:5c:a5:
9d:90:e6:99:bd:be:47:44:6e:7f:fa:6c:43:bb:66:b4:3f:ed:
74:f6:e0:ba:ec:6a:7e:33:5f:93:65:a0:36:17:1a:a9:b4:23:
e7:ab:5b:b5:bc:6f:60:fe:b5:90:98:bf:fa:89:87:60:4a:22:
a0:22:78:e0:7f:c4:00:49:6d:06:2e:e0:7b:05:be:0f:55:f2:
6d:4f:dd:b7:e0:e5:52:c6:1e:f6:a8:11:ba:cf:57:10:83:dc:
a5:51:71:c2:24:3a:37:ca:7e:65:7a:be:51:60:b1:de:a4:6d:
98:e9:d0:ab:77:ab:e5:0c:8a:15:78:f7:96:68:26:77:90:95:
87:35:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:32:13 2025 by rpki-client