Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135382e302f32342d3234203d3e20323637343639.roa
File: 3139322e3134312e3135382e302f32342d3234203d3e20323637343639.roa (raw, json)
Hash identifier: tXNaB17U6GGSrnxXWyX6p+SjYSRfb4LkAR3cMIa3f9U=
Subject key identifier: 0B:D0:14:E6:1A:2D:51:32:74:8A:3E:C8:18:58:81:0E:61:40:D0:10
Certificate issuer: /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial: 2B6E9B04E02EDC10BF74E8EB4B6C7E9B16B0BD91
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135382e302f32342d3234203d3e20323637343639.roa
Signing time: Fri 19 Sep 2025 01:54:12 +0000
ROA not before: Fri 19 Sep 2025 01:49:12 +0000
ROA not after: Fri 18 Sep 2026 01:54:12 +0000
asID: 267469
IP address blocks: 192.141.158.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6e:9b:04:e0:2e:dc:10:bf:74:e8:eb:4b:6c:7e:9b:16:b0:bd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
Validity
Not Before: Sep 19 01:49:12 2025 GMT
Not After : Sep 18 01:54:12 2026 GMT
Subject: CN=0BD014E61A2D5132748A3EC81858810E6140D010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:00:08:5f:c3:6b:bd:a5:9e:6b:46:34:4d:
37:4b:8f:4d:74:2c:dc:ba:bb:97:c3:f2:d8:f3:d9:
f4:26:22:13:69:c3:35:98:11:cd:b9:2e:80:0c:b3:
03:47:a8:20:02:44:08:cd:df:ea:6e:38:d4:36:8a:
8d:78:7a:3e:e9:ef:03:18:b5:17:05:39:c9:0e:3c:
44:87:00:92:5a:84:a6:e9:33:8c:71:22:7b:64:cd:
56:1f:b0:cf:97:84:72:1b:cd:22:b9:f2:15:67:d6:
95:a0:97:d2:b1:c0:32:d1:c5:d9:d2:73:44:89:70:
76:67:80:ac:37:ea:dd:a0:8e:91:4d:34:e0:e4:9d:
ac:be:db:3b:bc:31:f5:ab:54:08:39:2d:93:db:85:
36:e1:9a:23:d2:44:ef:e3:26:f9:68:b3:7e:8f:8b:
75:d1:50:39:a2:4c:99:41:e7:a0:51:69:6b:23:1a:
82:b8:72:2d:4e:19:5e:08:e1:c3:0b:bd:62:42:ab:
9d:57:90:fe:49:04:cc:3b:91:ed:8d:48:cb:59:17:
75:8d:38:ab:76:3c:fe:43:ed:18:b1:8f:5e:b0:94:
af:67:1f:1a:09:f5:43:41:c9:18:f1:12:33:35:6a:
19:08:eb:34:a2:d7:8d:31:87:ab:ab:a2:96:88:4f:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D0:14:E6:1A:2D:51:32:74:8A:3E:C8:18:58:81:0E:61:40:D0:10
X509v3 Authority Key Identifier:
keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135382e302f32342d3234203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:34:bd:35:3b:28:50:a7:9a:8e:b2:3b:cc:47:fd:5d:68:12:
a5:89:53:d0:f8:74:15:04:04:2f:52:7f:14:6c:dd:1d:00:7c:
5b:10:0e:f6:36:4a:30:8d:7c:75:ae:97:a2:7e:38:9f:30:94:
24:13:96:0b:87:20:d2:7e:ce:be:e2:9d:f3:66:0e:c2:c8:44:
c2:c9:72:b5:d9:75:95:7b:7b:91:9e:b9:40:8b:5d:95:32:77:
76:4e:44:01:3f:88:11:2b:12:3d:b5:b6:4e:ee:f1:25:5e:c8:
21:cf:05:f4:a8:12:11:c0:20:29:f0:aa:a5:06:92:38:36:8c:
e5:40:0c:26:c3:a5:92:68:a8:05:ec:14:15:45:09:81:a7:50:
a5:19:ae:66:e4:48:b7:dd:f3:01:63:b6:8f:c7:2a:18:04:2e:
e0:b2:0e:88:b6:29:9a:c7:ba:19:f5:4b:a8:01:75:96:6c:85:
92:62:b7:08:93:af:c5:b4:ae:23:85:89:6c:c6:17:d2:6f:08:
5d:fa:65:a1:d8:47:08:94:43:bf:3f:c1:db:1b:ef:87:98:e0:
dc:a7:94:34:1f:57:d3:db:55:2f:29:71:ad:ff:71:84:4d:83:
01:f6:56:e5:39:ba:4b:5a:f0:86:2d:ab:c7:4b:3b:7a:62:f6:
f6:2c:98:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:26:12 2025 by rpki-client