Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135372e302f32342d3234203d3e20323637343639.roa
File: 3139322e3134312e3135372e302f32342d3234203d3e20323637343639.roa (raw, json)
Hash identifier: 4G05JDt9AYRd7YryKkteVDPstEgNS2COfVotL+PVH84=
Subject key identifier: 9A:7E:0E:D1:1D:83:F5:9E:D3:3D:DF:6F:65:19:97:B8:FA:D9:B1:FE
Certificate issuer: /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial: 072EE3018EF26E597138F00EEC7E8B536639ED3A
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135372e302f32342d3234203d3e20323637343639.roa
Signing time: Fri 19 Sep 2025 01:54:14 +0000
ROA not before: Fri 19 Sep 2025 01:49:14 +0000
ROA not after: Fri 18 Sep 2026 01:54:14 +0000
asID: 267469
IP address blocks: 192.141.157.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2e:e3:01:8e:f2:6e:59:71:38:f0:0e:ec:7e:8b:53:66:39:ed:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
Validity
Not Before: Sep 19 01:49:14 2025 GMT
Not After : Sep 18 01:54:14 2026 GMT
Subject: CN=9A7E0ED11D83F59ED33DDF6F651997B8FAD9B1FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:62:ee:5e:d7:5b:ed:33:ef:d9:48:f0:ac:
15:5f:0f:4a:ed:0b:46:87:89:09:04:10:bc:a9:27:
45:6b:a4:55:8e:4f:ec:60:14:1f:1e:b2:95:8a:39:
df:b4:9b:c4:49:61:e3:a8:b1:b3:5b:6b:48:fd:51:
f6:77:d4:a6:3a:20:98:95:04:6a:29:e4:74:99:e8:
83:89:93:52:b3:cf:ac:8c:8a:4b:39:74:60:a6:c4:
c3:6a:9d:2d:76:c1:ec:4c:85:ac:32:45:b7:f5:2d:
ff:01:b2:4c:88:84:07:5b:4a:18:ec:81:cc:75:82:
4f:aa:ca:01:f9:01:3e:3c:00:22:f0:98:d1:ab:8e:
6f:cd:5e:51:6d:91:7c:48:fd:6f:73:62:6c:49:ed:
a7:1f:5e:ca:e1:f6:48:1e:f9:cd:e6:e1:31:0e:d0:
cf:a6:28:38:fc:7b:74:0e:c9:1a:c7:75:c9:8c:fe:
e1:f8:01:a4:fa:50:47:f3:55:fb:a6:b7:52:b1:62:
97:21:08:6c:98:e6:cd:b4:48:c9:64:7d:86:8e:38:
91:90:17:54:81:7f:93:04:27:96:87:0e:5e:9f:b1:
68:66:54:44:a9:6d:60:76:88:60:09:40:fa:ab:cf:
19:dd:73:ca:f2:d2:f1:d6:fd:eb:9a:29:d1:19:40:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:0E:D1:1D:83:F5:9E:D3:3D:DF:6F:65:19:97:B8:FA:D9:B1:FE
X509v3 Authority Key Identifier:
keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135372e302f32342d3234203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.157.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4d:ac:51:16:f3:f2:72:f5:3f:81:99:16:fe:fa:3f:b1:0a:
66:f3:66:20:05:9f:df:84:75:1e:ef:2c:bf:1d:33:f4:9b:59:
26:86:11:a8:55:1d:8b:31:15:3d:86:9f:d2:b5:f3:75:98:7d:
77:0b:8a:77:00:43:a0:12:e4:99:50:c6:96:99:18:fd:51:cd:
8d:27:bc:80:58:1e:3e:65:bf:32:2b:26:49:28:80:a7:03:4c:
8f:36:43:81:a6:06:d5:8b:18:b9:f8:3b:d8:69:08:7c:f7:e9:
d0:06:c7:a4:c5:81:7c:d6:c2:d0:e0:32:09:c6:90:29:60:e1:
65:21:74:ab:45:68:94:f6:53:72:be:bf:9b:cf:94:4e:12:2c:
34:c3:e0:c3:39:d9:6e:1f:ac:4c:e5:46:95:f6:be:6e:70:87:
5f:6b:3c:52:6d:7e:ae:a6:98:7e:d7:3e:ec:c5:8d:72:c4:66:
56:e4:2e:a9:28:bb:85:91:b9:b7:7b:58:9c:cd:8c:bd:70:1e:
2d:da:29:ab:c1:fe:4b:74:57:09:a4:77:1d:fd:cb:ff:2c:fb:
57:b9:ec:b0:63:9d:83:3a:42:9f:5b:3b:6d:32:34:d3:9b:41:
67:e0:58:10:88:c7:5b:a9:e2:f7:25:91:66:08:bd:c7:d7:c8:
37:bc:0d:fc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBy7jAY7ybllxOPAO7H6LU2Y57TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5NzYyMkY0MDU1QzY1Qjk5RTMwOTU3NDQyNEZBNzRF
REQ5ODlBODAeFw0yNTA5MTkwMTQ5MTRaFw0yNjA5MTgwMTU0MTRaMDMxMTAvBgNV
BAMTKDlBN0UwRUQxMUQ4M0Y1OUVEMzNEREY2RjY1MTk5N0I4RkFEOUIxRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVt2LuXtdb7TPv2UjwrBVfD0rt
C0aHiQkEELypJ0VrpFWOT+xgFB8espWKOd+0m8RJYeOosbNba0j9UfZ31KY6IJiV
BGop5HSZ6IOJk1Kzz6yMiks5dGCmxMNqnS12wexMhawyRbf1Lf8BskyIhAdbShjs
gcx1gk+qygH5AT48ACLwmNGrjm/NXlFtkXxI/W9zYmxJ7acfXsrh9kge+c3m4TEO
0M+mKDj8e3QOyRrHdcmM/uH4AaT6UEfzVfumt1KxYpchCGyY5s20SMlkfYaOOJGQ
F1SBf5MEJ5aHDl6fsWhmVESpbWB2iGAJQPqrzxndc8ry0vHW/euaKdEZQPIJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmn4O0R2D9Z7TPd9vZRmXuPrZsf4wHwYDVR0j
BBgwFoAU+5diL0BVxluZ4wlXRCT6dO3ZiagwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9yVmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tu
LzAvRkI5NzYyMkY0MDU1QzY1Qjk5RTMwOTU3NDQyNEZBNzRFREQ5ODlBOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQjk3NjIyRjQwNTVDNjVCOTlF
MzA5NTc0NDI0RkE3NEVERDk4OUE4LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
VmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tuLzAvMzEz
OTMyMmUzMTM0MzEyZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
NzM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAMCNnTANBgkqhkiG9w0BAQsFAAOCAQEAOU2sURbz
8nL1P4GZFv76P7EKZvNmIAWf34R1Hu8svx0z9JtZJoYRqFUdizEVPYaf0rXzdZh9
dwuKdwBDoBLkmVDGlpkY/VHNjSe8gFgePmW/MismSSiApwNMjzZDgaYG1YsYufg7
2GkIfPfp0AbHpMWBfNbC0OAyCcaQKWDhZSF0q0VolPZTcr6/m8+UThIsNMPgwznZ
bh+sTOVGlfa+bnCHX2s8Um1+rqaYftc+7MWNcsRmVuQuqSi7hZG5t3tYnM2MvXAe
Ldopq8H+S3RXCaR3Hf3L/yz7V7nssGOdgzpCn1s7bTI005tBZ+BYEIjHW6ni9yWR
Zgi9x9fIN7wN/A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:26:17 2025 by rpki-client