Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/3139322e3134312e38382e302f32322d3234203d3e20323637343539.roa
File: 3139322e3134312e38382e302f32322d3234203d3e20323637343539.roa (raw, json)
Hash identifier: /G2cxsR4X4qBWNv/KiJY7TQZmL6JoIuPaKjPtYPbUyE=
Subject key identifier: 18:88:A0:57:8A:50:2C:70:A3:BC:05:D2:F3:23:ED:B1:6A:1C:17:53
Certificate issuer: /CN=8F91E515016C4617D482162163052E1ABB4B35B2
Certificate serial: 1F860A2A5A8FC85A505BBE5AC52756BD58FF2B16
Authority key identifier: 8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/3139322e3134312e38382e302f32322d3234203d3e20323637343539.roa
Signing time: Mon 27 Oct 2025 19:32:15 +0000
ROA not before: Mon 27 Oct 2025 19:27:15 +0000
ROA not after: Mon 26 Oct 2026 19:32:15 +0000
asID: 267459
IP address blocks: 192.141.88.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:86:0a:2a:5a:8f:c8:5a:50:5b:be:5a:c5:27:56:bd:58:ff:2b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F91E515016C4617D482162163052E1ABB4B35B2
Validity
Not Before: Oct 27 19:27:15 2025 GMT
Not After : Oct 26 19:32:15 2026 GMT
Subject: CN=1888A0578A502C70A3BC05D2F323EDB16A1C1753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:08:99:bc:d3:c8:e8:cb:fa:fc:79:34:ea:
96:a0:54:61:88:54:9c:d3:b0:30:f0:4f:a9:44:c9:
f8:a6:aa:5a:fa:52:21:33:07:b7:f7:10:45:ee:8e:
d0:14:2b:34:f5:87:e4:ef:e7:cc:66:97:91:fe:62:
1d:aa:dc:41:c3:bd:6e:c2:08:0c:8e:67:7a:c6:e7:
dc:ee:fc:a2:e0:a2:44:a5:8d:3f:7c:43:bd:9b:4b:
de:29:47:e7:16:f3:3f:34:74:d7:cb:5e:24:2d:e1:
e4:04:4d:bb:cb:b7:21:6b:14:c9:ec:5d:59:0e:b7:
84:e8:4b:53:4c:d9:a3:d6:78:fd:d6:bd:31:7b:83:
6f:60:d2:d2:59:05:63:31:75:35:20:ea:01:cf:3b:
9e:0d:c7:32:26:dd:2b:3c:55:3c:5a:81:98:c2:54:
96:58:86:bd:5a:fe:23:b5:20:17:7f:18:f1:23:37:
13:4d:62:67:4f:cd:b3:3c:4e:24:f8:3d:96:d1:e6:
b2:89:43:fa:57:90:cc:2b:d9:25:b7:43:af:fe:da:
78:37:63:c1:6c:d6:16:c5:0d:ca:5f:cc:fa:70:9d:
e5:29:84:89:3b:2f:4a:29:bd:aa:bc:3f:50:71:29:
a7:67:c3:91:5a:88:55:64:8d:d8:7b:29:3d:60:d2:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:A0:57:8A:50:2C:70:A3:BC:05:D2:F3:23:ED:B1:6A:1C:17:53
X509v3 Authority Key Identifier:
keyid:8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/3139322e3134312e38382e302f32322d3234203d3e20323637343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.88.0/22
Signature Algorithm: sha256WithRSAEncryption
19:70:ef:80:57:61:b8:1e:87:0f:35:0e:be:e1:6b:d3:c3:ad:
28:79:59:46:c6:5d:95:a3:9f:9a:1c:36:1d:52:d3:62:bb:24:
bc:83:55:30:57:a0:b8:5b:cb:41:bf:f5:46:87:81:42:de:21:
f7:75:80:9f:b3:b5:9a:91:e5:76:03:f3:57:90:f5:dd:73:cf:
b0:7d:1c:b4:a8:32:9d:65:07:b3:82:be:2c:78:23:d7:79:dd:
53:26:78:6b:06:2e:af:f9:ed:70:6c:cb:46:aa:12:92:26:80:
23:ca:90:cd:4c:c0:b3:cc:0d:47:fd:72:ff:e6:cd:ca:6e:17:
0d:55:39:65:f0:1b:6b:c0:22:12:b5:8d:d1:82:42:64:9d:ac:
1e:08:c5:0b:86:84:32:c7:0e:a2:70:b5:a6:7d:27:4d:33:bf:
4c:c8:b7:98:24:9a:68:14:01:ad:80:d1:fa:60:2e:f4:92:1e:
32:5b:84:5a:3c:ee:a4:c7:36:bd:5c:1c:a4:66:fd:ae:16:f0:
d1:26:db:b8:80:c1:b7:13:0b:7e:09:32:5c:57:95:91:74:a9:
d2:02:43:0b:9f:29:8c:f7:36:f9:69:bd:27:10:7e:da:1b:cd:
51:73:d3:ee:d3:9c:40:8a:78:1f:bc:f2:22:f1:cb:e8:b5:44:
9d:38:b5:f5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH4YKKlqPyFpQW75axSdWvVj/KxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY5MUU1MTUwMTZDNDYxN0Q0ODIxNjIxNjMwNTJFMUFC
QjRCMzVCMjAeFw0yNTEwMjcxOTI3MTVaFw0yNjEwMjYxOTMyMTVaMDMxMTAvBgNV
BAMTKDE4ODhBMDU3OEE1MDJDNzBBM0JDMDVEMkYzMjNFREIxNkExQzE3NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg/AiZvNPI6Mv6/Hk06pagVGGI
VJzTsDDwT6lEyfimqlr6UiEzB7f3EEXujtAUKzT1h+Tv58xml5H+Yh2q3EHDvW7C
CAyOZ3rG59zu/KLgokSljT98Q72bS94pR+cW8z80dNfLXiQt4eQETbvLtyFrFMns
XVkOt4ToS1NM2aPWeP3WvTF7g29g0tJZBWMxdTUg6gHPO54NxzIm3Ss8VTxagZjC
VJZYhr1a/iO1IBd/GPEjNxNNYmdPzbM8TiT4PZbR5rKJQ/pXkMwr2SW3Q6/+2ng3
Y8Fs1hbFDcpfzPpwneUphIk7L0opvaq8P1BxKadnw5FaiFVkjdh7KT1g0vOzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGIigV4pQLHCjvAXS8yPtsWocF1MwHwYDVR0j
BBgwFoAUj5HlFQFsRhfUghYhYwUuGrtLNbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERRNnhobkNLTFlMY1l3NUxSTm91R0YxRW1hRUJFa2ppc3c4alppTHB1
dVMvMC84RjkxRTUxNTAxNkM0NjE3RDQ4MjE2MjE2MzA1MkUxQUJCNEIzNUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGOTFFNTE1MDE2QzQ2MTdE
NDgyMTYyMTYzMDUyRTFBQkI0QjM1QjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hEUTZ4aG5DS0xZTGNZdzVMUk5vdUdGMUVtYUVCRWtqaXN3OGpaaUxwdXVTLzAv
MzEzOTMyMmUzMTM0MzEyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAjVgwDQYJKoZIhvcNAQELBQADggEBABlw74BX
Ybgehw81Dr7ha9PDrSh5WUbGXZWjn5ocNh1S02K7JLyDVTBXoLhby0G/9UaHgULe
Ifd1gJ+ztZqR5XYD81eQ9d1zz7B9HLSoMp1lB7OCvix4I9d53VMmeGsGLq/57XBs
y0aqEpImgCPKkM1MwLPMDUf9cv/mzcpuFw1VOWXwG2vAIhK1jdGCQmSdrB4IxQuG
hDLHDqJwtaZ9J00zv0zIt5gkmmgUAa2A0fpgLvSSHjJbhFo87qTHNr1cHKRm/a4W
8NEm27iAwbcTC34JMlxXlZF0qdICQwufKYz3NvlpvScQftobzVFz0+7TnECKeB+8
8iLxy+i1RJ04tfU=
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:01:24 2025 by rpki-client