Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37372e302f32342d3234203d3e203532373636.roa
File: 3137372e3132352e37372e302f32342d3234203d3e203532373636.roa (raw, json)
Hash identifier: hMV0PmP1bIkVe5jy7BgKW2ObEfuIM/VAOkdwThtzkN0=
Subject key identifier: ED:49:07:8E:FA:68:C1:D1:1A:8E:02:A6:A1:04:A9:04:BA:92:AD:DC
Certificate issuer: /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
Certificate serial: 7E831786791C50A67948BCFDCDF3AB7B640AF4B6
Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37372e302f32342d3234203d3e203532373636.roa
Signing time: Mon 07 Jul 2025 14:35:11 +0000
ROA not before: Mon 07 Jul 2025 14:30:11 +0000
ROA not after: Mon 06 Jul 2026 14:35:11 +0000
asID: 52766
IP address blocks: 177.125.77.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:83:17:86:79:1c:50:a6:79:48:bc:fd:cd:f3:ab:7b:64:0a:f4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
Validity
Not Before: Jul 7 14:30:11 2025 GMT
Not After : Jul 6 14:35:11 2026 GMT
Subject: CN=ED49078EFA68C1D11A8E02A6A104A904BA92ADDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:e0:ea:62:d9:09:97:c3:f2:b8:9e:86:b3:
6a:d1:af:97:a3:41:c7:47:c0:3e:18:26:d7:26:9e:
88:48:57:a7:82:6e:4d:20:c8:82:8d:fb:00:0f:2b:
5e:15:97:0b:e5:2f:40:60:ee:0f:18:d2:ae:bd:27:
53:90:62:8e:2c:8c:f0:70:e8:33:fb:79:d2:b6:91:
2d:97:19:e3:7c:50:43:9a:63:d8:b7:bb:4a:73:c4:
b7:2d:4e:7f:90:e3:91:ee:49:8a:10:fa:34:20:88:
e4:fd:3e:20:b8:36:be:f7:a7:87:39:5b:da:23:67:
16:32:d6:b8:ae:48:c3:eb:67:54:96:01:3a:41:53:
92:4f:fe:a2:f6:56:a3:73:ae:61:84:b8:22:57:f0:
0a:01:20:c2:6f:bb:ec:13:fc:67:5f:23:bf:10:f8:
98:f0:08:be:28:1d:1f:b3:e6:d4:64:4e:04:f1:bc:
42:a3:52:2b:04:bd:91:4a:3e:e6:82:cb:01:af:5b:
2e:0e:bd:57:e9:a0:40:9a:ec:6b:4c:72:88:be:87:
64:36:fd:8e:d6:7e:08:62:e5:fe:35:45:d3:8e:b1:
ad:26:0f:47:fd:51:9f:a4:04:76:1a:d7:dc:17:68:
58:d9:d8:7f:7a:2d:64:e6:d6:f7:5b:cd:c2:3d:42:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:07:8E:FA:68:C1:D1:1A:8E:02:A6:A1:04:A9:04:BA:92:AD:DC
X509v3 Authority Key Identifier:
keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37372e302f32342d3234203d3e203532373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:56:d7:d0:53:97:6b:a8:4b:e9:8e:7b:c0:20:8b:db:4d:d0:
de:f6:96:8d:6d:c8:15:a4:0c:dc:e4:b5:26:5a:ac:d9:7e:b3:
89:35:92:4b:70:48:6a:25:11:e3:66:84:92:12:ae:9c:9a:f9:
a5:69:d2:9c:5c:c6:f7:b1:ac:9a:fd:ef:0a:f6:bc:b5:56:aa:
28:b9:be:e2:d2:03:c2:6b:68:1f:cf:83:68:7a:8d:44:7f:8f:
ac:11:18:63:97:1e:a4:73:f6:3a:36:a6:b5:43:0f:4f:81:56:
e8:d7:d2:1e:f3:a0:4c:62:9b:4c:64:2c:28:67:2d:f8:f3:c5:
19:47:4f:1b:6b:da:c1:a0:57:b9:f4:6b:ad:eb:35:59:d4:f3:
35:73:7e:2a:dd:1a:49:42:4a:73:7d:d1:6d:fe:55:31:52:a6:
24:96:23:82:34:56:01:04:cd:e2:c9:7a:5b:46:79:c7:2e:41:
30:13:28:97:59:13:00:5b:17:d0:9b:dd:e1:7c:1b:cc:8c:00:
37:bb:f9:be:48:9f:57:f8:ff:81:33:21:ef:4b:42:cb:6c:a4:
b2:40:db:29:cd:de:22:a7:ac:2c:08:0b:ef:c3:db:07:bd:49:
ab:14:be:97:99:1b:25:66:a6:64:8c:6c:b1:1a:e3:88:c9:19:
9e:5e:8f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:42:58 2025 by rpki-client