Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32322d3232203d3e20323637343639.roa
File: 3139322e3134312e3135362e302f32322d3232203d3e20323637343639.roa (raw, json)
Hash identifier: szMe4hyJoYnuwrdNkHa6fDp91+Pa2gq1RpZnuceq7ac=
Subject key identifier: BB:B8:9D:32:5E:1E:A0:41:CD:58:C7:18:CB:4F:5D:11:99:33:EA:BD
Certificate issuer: /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial: 6974F4E4CA359EC08B419CF71286585BCDD38FAE
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32322d3232203d3e20323637343639.roa
Signing time: Fri 19 Sep 2025 01:54:13 +0000
ROA not before: Fri 19 Sep 2025 01:49:13 +0000
ROA not after: Fri 18 Sep 2026 01:54:13 +0000
asID: 267469
IP address blocks: 192.141.156.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:74:f4:e4:ca:35:9e:c0:8b:41:9c:f7:12:86:58:5b:cd:d3:8f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
Validity
Not Before: Sep 19 01:49:13 2025 GMT
Not After : Sep 18 01:54:13 2026 GMT
Subject: CN=BBB89D325E1EA041CD58C718CB4F5D119933EABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:20:af:e2:1b:0d:1e:0d:c8:01:99:05:7f:
dd:74:43:2e:e7:9f:19:d2:5e:2a:0c:b0:6b:61:9c:
fa:9f:fb:de:6d:8c:f4:d9:87:29:9f:0c:9e:29:b6:
5e:22:17:33:07:f5:55:f3:b5:af:bb:82:47:96:d3:
20:8c:1d:40:fc:36:8d:45:0f:5b:b2:6d:cc:87:07:
eb:ed:ee:db:e6:85:ce:d3:e7:17:ce:3f:c3:c7:23:
ed:fc:79:5a:bc:7a:55:62:7d:42:d1:34:0f:98:1b:
12:77:94:b8:75:90:72:68:45:fd:c2:37:10:4f:92:
f9:55:c8:43:97:cb:03:5e:b8:5f:34:f1:1a:f1:df:
a2:62:80:17:04:bf:50:55:f2:41:99:d5:b3:c4:0b:
39:f9:f3:0f:4d:eb:b0:4a:9d:04:d1:17:00:03:80:
4e:65:27:f8:b3:f1:3c:26:e8:14:e7:d9:da:1b:04:
a2:6d:b6:5a:4e:31:e8:06:18:2b:7b:b8:f4:84:c7:
33:b8:51:0d:60:50:a5:c0:49:00:64:51:d2:0e:8c:
e4:2c:de:10:10:6c:86:78:7b:4d:2c:b3:a5:51:d3:
5b:cc:ac:15:8f:d4:ce:d6:14:e8:43:67:4f:8a:4c:
78:76:b0:1c:f7:33:ce:9a:31:ec:1b:77:99:be:a7:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B8:9D:32:5E:1E:A0:41:CD:58:C7:18:CB:4F:5D:11:99:33:EA:BD
X509v3 Authority Key Identifier:
keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32322d3232203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.156.0/22
Signature Algorithm: sha256WithRSAEncryption
27:c4:29:4a:c2:8f:d9:90:01:16:52:36:ea:d2:ff:cf:7f:45:
06:30:31:81:b8:d7:fa:c5:50:d1:d8:a3:24:19:0d:93:50:73:
cc:ae:e2:6e:c9:81:a5:69:65:ca:e1:ea:89:c6:a8:38:34:6a:
dd:c4:d9:72:8f:73:f9:22:d9:6d:c6:b5:7d:1b:2c:36:03:3b:
5a:04:ff:f6:86:52:8e:2e:5f:0d:7c:b3:34:67:64:2d:f6:9d:
47:49:fb:73:94:cc:f8:74:85:7a:fa:96:ae:40:f6:ca:45:39:
0a:4f:cf:5a:90:19:81:a0:29:49:e9:61:f5:a3:ce:03:5f:b2:
45:c0:ca:35:15:50:e0:8a:94:4d:74:30:0e:9e:8e:33:7f:b7:
33:13:b6:fe:06:9b:4e:d3:65:cd:b1:10:d8:e7:a7:a1:7f:54:
a9:20:00:45:1a:ef:97:e9:b2:08:df:1a:13:e2:f2:6c:56:d0:
39:1a:9d:cc:c5:4f:56:d6:d5:d8:88:8c:bc:27:e2:74:08:31:
99:0b:ca:52:5a:56:97:c1:f9:95:fe:7b:41:d3:fb:f0:c3:f5:
27:3d:dc:6c:7f:cd:46:6a:0c:db:31:25:ff:cc:25:a8:15:6c:
6a:88:18:e5:59:30:cc:b0:bd:1a:86:77:a7:33:51:0d:c3:f3:
07:00:4e:89
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaXT05Mo1nsCLQZz3EoZYW83Tj64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5NzYyMkY0MDU1QzY1Qjk5RTMwOTU3NDQyNEZBNzRF
REQ5ODlBODAeFw0yNTA5MTkwMTQ5MTNaFw0yNjA5MTgwMTU0MTNaMDMxMTAvBgNV
BAMTKEJCQjg5RDMyNUUxRUEwNDFDRDU4QzcxOENCNEY1RDExOTkzM0VBQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCSCv4hsNHg3IAZkFf910Qy7n
nxnSXioMsGthnPqf+95tjPTZhymfDJ4ptl4iFzMH9VXzta+7gkeW0yCMHUD8No1F
D1uybcyHB+vt7tvmhc7T5xfOP8PHI+38eVq8elVifULRNA+YGxJ3lLh1kHJoRf3C
NxBPkvlVyEOXywNeuF808Rrx36JigBcEv1BV8kGZ1bPECzn58w9N67BKnQTRFwAD
gE5lJ/iz8Twm6BTn2dobBKJttlpOMegGGCt7uPSExzO4UQ1gUKXASQBkUdIOjOQs
3hAQbIZ4e00ss6VR01vMrBWP1M7WFOhDZ0+KTHh2sBz3M86aMewbd5m+p8YvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUu7idMl4eoEHNWMcYy09dEZkz6r0wHwYDVR0j
BBgwFoAU+5diL0BVxluZ4wlXRCT6dO3ZiagwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9yVmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tu
LzAvRkI5NzYyMkY0MDU1QzY1Qjk5RTMwOTU3NDQyNEZBNzRFREQ5ODlBOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQjk3NjIyRjQwNTVDNjVCOTlF
MzA5NTc0NDI0RkE3NEVERDk4OUE4LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
VmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tuLzAvMzEz
OTMyMmUzMTM0MzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYz
NzM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAsCNnDANBgkqhkiG9w0BAQsFAAOCAQEAJ8QpSsKP
2ZABFlI26tL/z39FBjAxgbjX+sVQ0dijJBkNk1BzzK7ibsmBpWllyuHqicaoODRq
3cTZco9z+SLZbca1fRssNgM7WgT/9oZSji5fDXyzNGdkLfadR0n7c5TM+HSFevqW
rkD2ykU5Ck/PWpAZgaApSelh9aPOA1+yRcDKNRVQ4IqUTXQwDp6OM3+3MxO2/gab
TtNlzbEQ2OenoX9UqSAARRrvl+myCN8aE+LybFbQORqdzMVPVtbV2IiMvCfidAgx
mQvKUlpWl8H5lf57QdP78MP1Jz3cbH/NRmoM2zEl/8wlqBVsaogY5VkwzLC9GoZ3
pzNRDcPzBwBOiQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:26:26 2025 by rpki-client