Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32342d3234203d3e20323636323536.roa
File: 3139322e3134302e3130302e302f32342d3234203d3e20323636323536.roa (raw, json)
Hash identifier: 5yr7qZjphGU1yPTK0OqmB7ET3l0ilm/TkxGEXHfNxRY=
Subject key identifier: 3A:36:1E:72:FE:BC:F0:9B:B5:58:20:45:8B:4E:CB:F4:37:D6:F6:B2
Certificate issuer: /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial: 56AFBA98509C4B0AC24D287606497C697E175CB3
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32342d3234203d3e20323636323536.roa
Signing time: Thu 06 Mar 2025 02:51:47 +0000
ROA not before: Thu 06 Mar 2025 02:46:47 +0000
ROA not after: Thu 05 Mar 2026 02:51:47 +0000
asID: 266256
IP address blocks: 192.140.100.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:af:ba:98:50:9c:4b:0a:c2:4d:28:76:06:49:7c:69:7e:17:5c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Validity
Not Before: Mar 6 02:46:47 2025 GMT
Not After : Mar 5 02:51:47 2026 GMT
Subject: CN=3A361E72FEBCF09BB55820458B4ECBF437D6F6B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:3c:6f:b0:58:60:ef:23:59:1b:61:ea:54:
dc:07:68:8c:18:ea:17:03:b8:72:01:e0:47:3f:d9:
e6:6a:c8:86:d8:0d:39:a5:80:f3:9d:15:fa:40:b5:
ec:99:a3:e7:88:12:b8:57:5e:e4:55:83:98:38:48:
71:76:8b:04:cb:a4:cf:35:a0:b1:0e:60:41:55:a7:
ce:45:80:df:b4:79:58:a4:46:a8:0b:4c:b2:8f:f7:
5a:39:d0:28:54:38:50:45:11:d0:26:dc:57:18:76:
fe:66:70:90:5a:5d:4a:d5:86:06:24:38:ec:20:8b:
2d:83:55:d8:e1:5c:cd:d1:30:da:39:a3:de:01:fa:
71:e4:fd:48:1e:e5:b6:b2:21:f2:1c:6e:01:c5:44:
52:d8:4e:37:09:51:da:2d:d1:2d:21:54:19:de:4d:
4a:07:c6:a0:eb:98:f5:37:7b:57:22:b7:e4:20:7b:
ca:70:75:a3:f8:8c:1f:27:eb:3b:63:9a:e7:a0:64:
b0:ac:fd:90:a6:d1:7e:ab:52:53:d8:e5:9d:51:0f:
94:44:71:47:18:dc:40:3a:78:4e:cd:db:97:26:e4:
1c:45:8f:0e:10:b2:0e:d8:8f:f6:fd:d9:11:35:63:
95:c4:ec:87:2d:c9:3f:bb:4f:83:8e:b0:f9:24:c5:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:36:1E:72:FE:BC:F0:9B:B5:58:20:45:8B:4E:CB:F4:37:D6:F6:B2
X509v3 Authority Key Identifier:
keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32342d3234203d3e20323636323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.100.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f3:ae:2a:8f:43:71:4b:e6:ef:14:4e:02:fb:04:35:14:82:
cc:d3:c0:86:2f:49:52:b3:1d:58:94:14:d0:22:bb:8f:88:8a:
2a:15:c0:23:5c:6e:49:1f:06:8f:56:54:a7:36:c5:23:ca:e6:
89:32:44:f1:44:2c:6a:9e:cc:0a:7b:94:26:9a:37:64:48:aa:
e7:a5:b4:f2:22:c9:a6:94:5e:2c:40:e5:8a:04:32:7a:9d:10:
a7:95:cb:0d:06:b2:80:6b:1f:b9:03:79:8d:ca:be:66:8f:bf:
48:c3:99:df:42:a7:aa:46:b0:49:ea:af:9a:e7:28:74:f1:05:
a4:a5:4b:66:23:c1:e6:d9:8d:44:fc:a8:1b:d5:9a:94:43:62:
2b:af:f5:ea:43:4b:f4:28:eb:6d:7e:c5:e0:50:3a:4c:7b:bb:
98:50:39:c7:78:40:f2:4e:07:8c:61:3a:24:f2:54:ca:8e:25:
c2:6b:13:cd:0b:c3:6a:d6:b7:e7:06:56:54:0e:73:6a:24:07:
e6:d0:de:a1:8f:c2:c0:32:c9:3f:45:da:24:e0:1f:98:ec:42:
81:d3:99:ed:b0:f8:e5:0f:4b:17:5e:06:52:0d:0a:f5:8d:6e:
9a:9f:a4:32:2f:92:f9:0d:40:4f:15:09:e9:97:38:a5:d8:61:
43:87:7a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:50:50 2025 by rpki-client