Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa
File: 3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa (raw, json)
Hash identifier: 6+196TGm0r/m9Lkt3pSNJrBmw8K8qNlhgsxwB1kZD5M=
Subject key identifier: 83:EF:26:89:40:73:74:EC:5E:E0:5C:E3:12:F0:6D:1E:0B:AB:8F:FD
Certificate issuer: /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial: 7366C158F8A9DF1EAF97069A7DE59619E38DDD67
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa
Signing time: Thu 17 Jul 2025 18:36:39 +0000
ROA not before: Thu 17 Jul 2025 18:31:39 +0000
ROA not after: Thu 16 Jul 2026 18:36:39 +0000
asID: 263059
IP address blocks: 186.232.152.0/21 maxlen: 21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:66:c1:58:f8:a9:df:1e:af:97:06:9a:7d:e5:96:19:e3:8d:dd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Validity
Not Before: Jul 17 18:31:39 2025 GMT
Not After : Jul 16 18:36:39 2026 GMT
Subject: CN=83EF2689407374EC5EE05CE312F06D1E0BAB8FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:ee:e7:f6:b3:83:12:2a:1d:5b:b1:ec:50:
33:1f:55:be:ef:b8:f8:9a:76:36:5d:02:75:72:31:
6b:6e:c9:e7:a6:f0:59:fe:07:15:7e:00:5f:1c:25:
91:24:b3:f3:66:79:02:8d:c0:8e:4c:23:21:66:3c:
9b:06:8e:d1:de:a8:78:a5:d9:88:91:b0:0d:fa:8c:
a7:64:21:9a:08:9c:a8:d5:47:dc:b8:c3:01:6e:27:
b6:06:fc:f8:b3:6a:fe:c5:14:df:e2:36:f4:d0:5d:
8f:f2:9d:e3:d7:06:8c:23:e5:0d:4c:25:16:81:b9:
04:a6:9b:c9:0f:9b:04:67:55:dd:9c:b5:63:45:96:
c2:de:2c:99:ed:94:13:09:c7:37:36:06:6d:c3:7e:
9c:b5:d1:82:b5:52:a6:23:e9:c6:5c:87:5c:1c:9c:
0d:d3:31:1b:47:a3:18:b3:66:db:0b:e5:08:06:b5:
94:a5:ef:44:5a:78:71:74:b4:a6:62:ea:b9:dd:5a:
a4:17:66:72:7e:23:7e:3f:8c:60:33:68:23:ca:bc:
b8:54:13:6c:4d:f0:28:79:18:56:a6:f4:78:be:35:
f2:b6:cd:9c:29:a2:70:2e:3b:01:48:66:31:a3:f1:
88:10:73:1f:3b:d4:5d:f9:fd:97:51:ac:51:2f:a1:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EF:26:89:40:73:74:EC:5E:E0:5C:E3:12:F0:6D:1E:0B:AB:8F:FD
X509v3 Authority Key Identifier:
keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.232.152.0/21
Signature Algorithm: sha256WithRSAEncryption
02:a9:3c:78:f8:8b:98:1e:e0:0c:fd:a7:5d:50:21:ef:bc:17:
ef:e1:5e:58:a7:76:e5:7c:77:a7:cf:76:e5:1d:25:a7:46:8d:
0e:fa:8a:bb:92:3a:15:77:22:d3:07:c7:03:59:c4:6c:2d:98:
20:10:72:cb:b2:01:85:e6:a0:e3:1c:5a:37:f9:a5:05:5c:08:
4a:c5:58:77:6b:ad:ba:b3:c1:f4:d8:26:03:96:d6:76:e8:7f:
67:65:7b:5b:2b:9b:5b:56:04:ad:4f:ff:7d:05:88:27:6f:e4:
52:4e:60:8c:03:63:a7:7e:f2:5f:8a:1b:78:c8:bb:88:76:1e:
6d:92:a3:d1:cf:d1:80:11:6f:a2:b5:37:c2:ff:bd:98:9d:62:
e0:a6:87:2a:b3:04:31:37:33:9c:28:b1:5b:c5:47:e0:c2:22:
8c:be:69:dc:3d:22:5a:00:fd:b8:f5:5a:40:e3:9e:7d:f0:79:
10:38:76:7d:3d:af:19:77:ff:0c:10:e6:db:a9:0e:fb:3c:42:
8e:89:f5:82:c3:ba:8e:d2:57:07:48:d7:86:66:3b:5f:08:c6:
c3:59:6d:8b:91:50:8c:d4:07:89:9b:f3:24:f4:df:93:39:72:
59:03:18:a2:70:88:1b:6e:9f:00:bd:e3:62:1b:f9:02:9e:3c:
19:f8:3e:62
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUc2bBWPip3x6vlwaafeWWGeON3WcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc1MkUyQkUwREE5OEVFRDQ2NDg1NENEQjQ4QTIzRTcw
RDk3REY1NTAeFw0yNTA3MTcxODMxMzlaFw0yNjA3MTYxODM2MzlaMDMxMTAvBgNV
BAMTKDgzRUYyNjg5NDA3Mzc0RUM1RUUwNUNFMzEyRjA2RDFFMEJBQjhGRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeO7n9rODEiodW7HsUDMfVb7v
uPiadjZdAnVyMWtuyeem8Fn+BxV+AF8cJZEks/NmeQKNwI5MIyFmPJsGjtHeqHil
2YiRsA36jKdkIZoInKjVR9y4wwFuJ7YG/Pizav7FFN/iNvTQXY/ynePXBowj5Q1M
JRaBuQSmm8kPmwRnVd2ctWNFlsLeLJntlBMJxzc2Bm3Dfpy10YK1UqYj6cZch1wc
nA3TMRtHoxizZtsL5QgGtZSl70RaeHF0tKZi6rndWqQXZnJ+I34/jGAzaCPKvLhU
E2xN8Ch5GFam9Hi+NfK2zZwponAuOwFIZjGj8YgQcx871F35/ZdRrFEvoedBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUg+8miUBzdOxe4FzjEvBtHgurj/0wHwYDVR0j
BBgwFoAUh1Livg2pju1GSFTNtIoj5w2X31UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC84NzUyRTJCRTBEQTk4RUVENDY0ODU0Q0RCNDhBMjNFNzBEOTdERjU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3NTJFMkJFMERBOThFRUQ0
NjQ4NTRDREI0OEEyM0U3MEQ5N0RGNTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzEzODM2MmUzMjMzMzIyZTMxMzUzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7romDANBgkqhkiG9w0BAQsFAAOCAQEAAqk8
ePiLmB7gDP2nXVAh77wX7+FeWKd25Xx3p8925R0lp0aNDvqKu5I6FXci0wfHA1nE
bC2YIBByy7IBheag4xxaN/mlBVwISsVYd2uturPB9NgmA5bWduh/Z2V7WyubW1YE
rU//fQWIJ2/kUk5gjANjp37yX4obeMi7iHYebZKj0c/RgBFvorU3wv+9mJ1i4KaH
KrMEMTcznCixW8VH4MIijL5p3D0iWgD9uPVaQOOeffB5EDh2fT2vGXf/DBDm26kO
+zxCjon1gsO6jtJXB0jXhmY7XwjGw1lti5FQjNQHiZvzJPTfkzlyWQMYonCIG26f
AL3jYhv5Ap48Gfg+Yg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:07:37 2025 by rpki-client