Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa
File: 3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa (raw, json)
Hash identifier: KIFTJjKKd6/PSI+6j7nOzWGYSCTtpxHe1qGG6vpOiNU=
Subject key identifier: F9:C6:1C:52:59:6C:9E:B2:B2:E6:F8:86:DB:3C:22:F3:14:F4:8F:E5
Certificate issuer: /CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
Certificate serial: 4260ACC9D63E6A5A876A649A346A7B9308F1B2E5
Authority key identifier: FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa
Signing time: Fri 04 Jul 2025 14:08:00 +0000
ROA not before: Fri 04 Jul 2025 14:03:00 +0000
ROA not after: Fri 03 Jul 2026 14:08:00 +0000
asID: 270758
IP address blocks: 200.39.144.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:60:ac:c9:d6:3e:6a:5a:87:6a:64:9a:34:6a:7b:93:08:f1:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
Validity
Not Before: Jul 4 14:03:00 2025 GMT
Not After : Jul 3 14:08:00 2026 GMT
Subject: CN=F9C61C52596C9EB2B2E6F886DB3C22F314F48FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:9e:30:88:49:4c:df:53:ee:98:07:8d:9c:
83:82:89:a3:74:e0:2e:df:93:29:f1:ff:0d:ad:02:
74:da:c3:7c:ff:0f:0d:ec:0b:7e:aa:04:f1:5c:18:
a6:b5:81:2d:51:9d:c4:27:38:e4:82:d8:d5:df:2a:
bf:e8:17:d5:dc:88:91:ab:88:2a:d4:e5:6e:5b:c1:
be:e1:b6:3e:f9:4c:31:be:cb:9c:e1:cf:92:c7:7e:
39:20:53:ad:28:e1:5e:04:25:de:39:06:0c:c0:7b:
ee:70:d4:e0:1d:5d:bd:4b:d7:44:95:99:72:4e:a4:
6c:a9:b9:91:f4:bc:8c:1a:56:24:7c:6e:e3:78:cd:
b6:35:36:27:63:76:0e:71:01:13:b4:36:e0:46:7c:
ad:5d:76:11:d4:ae:89:f1:d2:f6:5c:48:28:bf:2d:
a4:ca:d3:9e:53:87:42:ca:6e:22:11:7f:37:6d:69:
e8:26:08:86:13:b2:54:c2:80:1a:9d:9f:7c:34:45:
8f:e3:24:32:da:3d:80:4a:c3:a4:2c:27:f2:f9:f5:
ce:0d:3b:94:a3:f5:24:6c:89:26:82:ec:00:7e:76:
df:ea:ad:0f:73:a1:34:4c:2a:91:e9:48:5f:9f:12:
db:fa:ab:a8:6a:c1:59:cd:cf:fe:b6:07:5c:1b:4b:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C6:1C:52:59:6C:9E:B2:B2:E6:F8:86:DB:3C:22:F3:14:F4:8F:E5
X509v3 Authority Key Identifier:
keyid:FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.39.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d3:84:28:72:6a:89:ce:17:0d:2e:e5:36:23:06:70:26:ec:
fc:b6:c2:fa:47:f5:b4:70:43:01:a6:75:05:69:ab:70:5e:1c:
40:40:62:79:a0:be:88:e1:e7:ac:ab:a7:1f:27:40:a6:0a:0a:
f9:e2:be:55:a3:61:19:a3:14:76:b6:ba:c2:1a:00:aa:00:90:
61:b9:1d:f7:1a:ad:9c:7b:51:53:49:72:5f:8e:e6:fb:ba:ae:
07:34:f0:d2:7c:78:e8:06:f4:28:77:e6:d8:12:31:e0:01:c7:
cb:5b:82:e9:58:34:c9:7f:ec:5f:f7:b8:a8:b8:c7:4f:a0:19:
68:de:e4:83:2d:0a:5f:97:6b:79:46:39:39:62:01:c0:29:2e:
cc:a7:c7:5c:c9:57:6b:f7:ee:ce:c7:cf:e6:73:fa:f2:27:db:
2f:cc:4e:46:ad:42:34:7d:13:9d:5e:ff:f6:bc:c5:96:02:11:
90:d0:b6:12:24:52:81:64:f6:0e:68:2a:a9:29:e6:d9:ec:9e:
27:97:81:b3:ec:91:91:92:72:75:75:64:e9:0a:cf:ef:57:db:
cc:4f:cc:4c:f6:6b:63:df:62:7e:19:30:42:14:9f:58:62:9a:
38:1c:da:03:7d:f7:c9:4d:06:b2:4c:34:cf:99:84:f7:33:0b:
1b:8c:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 08:02:42 2025 by rpki-client