Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135392e302f32342d3234203d3e20323637343639.roa
File: 3139322e3134312e3135392e302f32342d3234203d3e20323637343639.roa (raw, json)
Hash identifier: /Z4iJLEJt0qEvLvaOrdMYiaBu3pTQQE6aVU1KZbUOsw=
Subject key identifier: 99:93:58:A7:E7:04:50:35:8F:9E:47:9A:CD:E9:47:94:D1:E9:7D:E5
Certificate issuer: /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial: 0E111A123A90376D25911FE4F7EE6FB861E53CB9
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135392e302f32342d3234203d3e20323637343639.roa
Signing time: Fri 19 Sep 2025 01:54:13 +0000
ROA not before: Fri 19 Sep 2025 01:49:13 +0000
ROA not after: Fri 18 Sep 2026 01:54:13 +0000
asID: 267469
IP address blocks: 192.141.159.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:11:1a:12:3a:90:37:6d:25:91:1f:e4:f7:ee:6f:b8:61:e5:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
Validity
Not Before: Sep 19 01:49:13 2025 GMT
Not After : Sep 18 01:54:13 2026 GMT
Subject: CN=999358A7E70450358F9E479ACDE94794D1E97DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:a6:ba:4a:78:9e:1b:49:2b:9b:78:33:0a:
fb:1e:1c:29:3a:14:de:0a:7d:ff:bc:07:8d:1e:6c:
1d:a8:bf:9f:48:28:f2:8c:d4:5c:bc:d2:6d:8b:db:
e4:c2:2d:40:09:03:51:2f:50:17:b5:02:69:65:37:
77:e3:fa:ca:e5:d3:10:16:f5:89:a1:e0:27:14:43:
0d:4a:96:23:b4:df:bc:b3:1d:ed:4c:0d:45:15:86:
b8:a9:60:30:ca:a6:f1:81:78:a7:b9:1f:92:28:d9:
f7:f4:70:fc:ea:1d:80:d2:a3:a5:e0:f3:e6:47:c4:
8d:85:4a:ad:9a:a7:b1:a0:e6:27:d2:73:05:54:eb:
23:d7:4d:ef:70:f4:41:63:1a:d4:a8:01:c9:24:75:
3f:b3:33:19:d8:d2:6a:56:f3:aa:c2:ac:06:29:b2:
35:50:a5:b5:6b:38:ab:83:4a:16:d8:0b:7b:ab:df:
a1:bf:f3:f7:b2:0d:d3:44:27:96:4e:5e:cb:f3:4d:
8e:25:6e:8e:2d:29:2a:4b:98:8a:05:05:f7:89:a0:
e3:7e:5f:36:bc:10:9d:cb:2f:50:b8:e6:3a:6e:87:
48:1d:5c:6a:6c:23:70:41:ce:b7:d1:e2:8d:a3:66:
6a:04:05:3a:11:ac:37:c7:db:d3:0f:34:c2:ed:72:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:58:A7:E7:04:50:35:8F:9E:47:9A:CD:E9:47:94:D1:E9:7D:E5
X509v3 Authority Key Identifier:
keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135392e302f32342d3234203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.159.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ac:78:96:81:1a:eb:e1:8b:2b:c5:cf:c9:78:9d:12:6a:c6:
a6:59:a9:a9:d1:b6:2d:86:3d:a3:4c:d1:0e:91:e7:5c:2a:41:
78:66:53:8b:41:c7:b6:5a:59:2f:ec:ec:4d:9d:35:78:2c:32:
7b:74:02:2e:db:54:23:ad:2a:15:0a:f5:3c:7b:22:46:34:02:
d4:c7:94:e1:09:27:19:ee:4b:dd:9b:cd:59:a5:93:d0:2d:06:
c5:fc:43:58:3b:6f:39:a0:87:dc:8a:e2:05:52:84:99:cf:2a:
00:c4:b1:80:ca:ad:25:75:1b:e9:15:1c:92:5d:2a:b8:5b:6f:
b3:ac:da:da:7e:e8:2c:fa:59:70:11:1c:99:67:87:53:b5:5e:
54:ac:d3:9b:26:7d:35:16:e6:cb:ad:11:f1:30:1d:c3:a1:a1:
ef:c1:ab:ce:c4:d6:ca:2c:8e:c8:2c:3c:5b:76:2d:d5:01:69:
e4:ee:cd:30:c6:4d:e7:e1:c8:6a:5c:4b:a8:b0:6f:b8:31:2a:
95:80:ee:9d:03:5d:3e:10:0b:ca:27:8c:34:b5:b0:11:0c:70:
35:a7:0e:64:bd:67:dd:38:13:0f:0f:87:c0:e9:27:cd:0e:2a:
b9:33:d5:87:80:a5:db:e1:ce:66:97:c6:ab:03:35:6d:34:04:
64:66:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:55 2025 by rpki-client