Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa
File: 3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa (raw, json)
Hash identifier: m1ILzRIrl0/97RtPKWHe5wZbnE3S5SqXAAxti1UfJic=
Subject key identifier: 4F:6B:6A:81:18:73:76:8D:37:58:BB:69:F8:9A:14:A9:5D:BE:CD:DD
Certificate issuer: /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial: 46906D534F95AF3A476DF85757587EA10E63D7E9
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa
Signing time: Fri 19 Sep 2025 01:54:11 +0000
ROA not before: Fri 19 Sep 2025 01:49:11 +0000
ROA not after: Fri 18 Sep 2026 01:54:11 +0000
asID: 267469
IP address blocks: 192.141.156.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:90:6d:53:4f:95:af:3a:47:6d:f8:57:57:58:7e:a1:0e:63:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
Validity
Not Before: Sep 19 01:49:11 2025 GMT
Not After : Sep 18 01:54:11 2026 GMT
Subject: CN=4F6B6A811873768D3758BB69F89A14A95DBECDDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:bd:59:95:49:7c:a8:69:9e:d7:95:2a:b1:
76:6d:3a:69:8a:0a:a3:c1:f3:2f:6d:eb:02:70:73:
7f:df:15:9f:07:87:ac:fe:c4:68:ee:27:c3:e5:fa:
d5:95:1f:75:51:01:3f:8f:ee:ec:73:9a:46:29:d1:
94:f4:ba:36:37:8e:9e:99:66:1a:45:3c:ca:5f:2c:
41:c6:12:71:bd:0f:d3:4a:13:1e:45:a7:b2:42:95:
66:95:46:e5:57:28:75:68:e9:15:4f:d7:55:d2:13:
4d:ea:9a:17:1d:d6:f8:fc:6f:60:27:bf:11:12:6d:
ad:c5:1c:aa:87:a3:76:71:a5:30:b0:f0:f1:2f:19:
38:a2:88:b0:e2:b8:85:6d:c5:c4:a1:49:ba:b6:50:
97:90:24:ed:95:65:7a:86:f2:8c:a0:db:bd:83:06:
4c:47:9a:b5:3b:98:52:e0:eb:07:4d:81:70:5a:2e:
56:41:6f:c6:55:59:a6:58:78:2f:e8:f5:0a:12:de:
4c:fd:56:5c:68:c3:49:b5:59:66:65:8d:7d:77:91:
02:9c:7f:66:88:46:91:6a:92:8f:86:72:3e:f8:68:
64:f7:76:3c:df:f1:55:a8:bd:33:5b:7c:76:2d:1a:
60:42:50:e8:ba:9f:fb:f6:38:a0:3b:6e:3e:1c:83:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:6A:81:18:73:76:8D:37:58:BB:69:F8:9A:14:A9:5D:BE:CD:DD
X509v3 Authority Key Identifier:
keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32342d3234203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f1:e0:33:57:02:6e:ab:bd:c2:00:33:72:a5:47:68:76:7e:
89:ab:86:0f:a2:b7:bc:30:a9:c9:ea:28:87:20:32:cb:12:db:
e0:43:6a:79:7e:f0:50:7c:97:3c:b1:5e:ef:c0:cd:68:c8:89:
c6:56:92:b2:06:7d:4e:b8:15:ac:ef:aa:56:d8:f1:ae:8a:c5:
48:c7:e1:13:de:51:32:15:bf:e7:96:f0:47:04:5d:06:da:9b:
67:0c:2d:8b:a0:38:fc:ee:53:93:3a:d0:3e:9d:56:27:47:a3:
9a:84:69:92:33:c0:e1:44:48:f7:c2:ba:f1:08:61:73:d9:49:
91:bc:39:46:7e:f3:27:9a:12:18:c2:a8:a8:87:2a:b3:bb:00:
62:7d:8b:38:35:b3:4d:f4:9b:e5:d6:d0:f4:ce:b3:18:dd:c2:
df:14:b7:e4:28:4f:18:04:7b:7e:84:15:eb:0c:99:9a:d3:5d:
19:34:d8:75:c1:8d:d1:f3:ff:cb:77:bc:0c:67:d0:62:c5:dd:
e1:b4:c6:69:9b:9f:4a:f0:da:0a:6b:10:e2:bb:92:de:60:45:
c4:d2:84:02:ea:bd:4e:96:f4:00:61:86:bc:79:59:de:b2:84:
19:bb:2a:06:69:55:7a:d4:62:e9:c7:83:08:28:4e:df:12:80:
4c:1e:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:25 2025 by rpki-client