Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa
File: 3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier: RPsznwY/0nypjtWj7dObhIaUIZsa9BmugFUSQVfRa0E=
Subject key identifier: D1:9B:1D:3E:13:D2:8F:B5:C8:49:1C:64:48:18:86:10:50:AB:C4:D8
Certificate issuer: /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial: 2E5DED4FFB9FF11298CCDEC05498F4772F54E0C6
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa
Signing time: Thu 29 May 2025 18:50:13 +0000
ROA not before: Thu 29 May 2025 18:45:13 +0000
ROA not after: Thu 28 May 2026 18:50:13 +0000
asID: 262503
IP address blocks: 167.249.170.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5d:ed:4f:fb:9f:f1:12:98:cc:de:c0:54:98:f4:77:2f:54:e0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Validity
Not Before: May 29 18:45:13 2025 GMT
Not After : May 28 18:50:13 2026 GMT
Subject: CN=D19B1D3E13D28FB5C8491C644818861050ABC4D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:23:16:54:2f:03:20:79:2f:92:e0:49:60:
28:d0:6c:c7:a3:31:66:1d:07:88:5a:29:56:29:bc:
24:8b:fe:8f:6e:56:43:6e:47:7f:69:5c:61:d5:55:
d3:92:0b:5c:a8:11:2c:07:44:21:ff:a6:f5:0b:77:
e7:57:99:9a:b9:4c:17:c1:77:c6:e5:03:3a:a5:bf:
f9:b4:08:a5:90:0f:75:b3:5a:77:ac:8d:f0:d5:9d:
4e:a0:e4:fe:ab:93:55:2f:7b:d8:df:65:61:f5:da:
29:25:91:b3:aa:13:49:7c:56:42:42:c0:80:ae:eb:
8c:3b:fa:d8:8d:2b:db:3d:d2:9b:4e:6c:29:fb:72:
79:65:38:10:b1:74:e6:b5:7c:5b:38:b0:da:49:c4:
2f:19:ce:f1:4d:e9:94:59:f8:4a:a3:a0:6d:3f:51:
2b:5c:69:ba:a0:38:cc:d1:c9:1b:86:1e:cf:cb:85:
31:fb:77:f5:c1:0c:17:bb:b6:bc:77:98:0e:96:84:
f3:36:cf:ae:a2:a7:a6:5a:7d:da:d2:d7:ec:1b:27:
9a:3c:bf:b0:83:fa:fa:49:f5:ff:74:97:7f:15:f7:
97:2a:21:c3:6f:67:b6:fa:9f:2c:15:5a:03:35:30:
4e:60:58:3f:ae:0f:3e:b5:fe:90:ce:6e:f1:6c:c7:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9B:1D:3E:13:D2:8F:B5:C8:49:1C:64:48:18:86:10:50:AB:C4:D8
X509v3 Authority Key Identifier:
keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32332d3233203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:86:c0:96:24:40:d4:9c:6f:44:cf:d5:b7:3e:7f:28:ef:fa:
69:cf:bf:de:93:19:83:0a:47:c4:7a:6e:84:3a:11:a0:e9:08:
93:a9:66:67:34:0d:f8:6b:b3:ed:a6:48:7a:9e:6a:a1:87:c2:
df:ec:4f:53:a7:ea:ea:d7:38:28:ad:2b:ff:4b:77:31:df:2f:
6e:2a:19:9b:ee:85:49:60:ed:a8:b1:04:39:3f:27:43:c3:c3:
56:c6:63:47:bd:64:e8:25:e1:e8:59:a6:32:65:4d:3e:90:24:
57:32:43:c6:db:06:db:59:71:03:51:aa:3a:24:08:c3:49:bf:
0d:c4:bc:b6:f1:b5:34:dd:86:51:be:1c:c0:94:fa:94:ea:a3:
c2:e5:36:24:16:d3:3b:d6:70:b8:67:4e:86:17:70:a1:4e:5b:
7e:cd:12:12:6c:48:cf:77:0e:59:d8:1f:3c:8a:5d:e1:98:f0:
3b:30:7a:8e:ea:d0:54:09:2e:5d:18:05:00:fb:23:a6:66:52:
01:09:7f:66:bd:2d:c6:7c:7a:09:fb:03:d3:93:7a:62:e7:fb:
eb:18:b8:71:65:3d:7a:e3:db:0a:c9:30:a3:9d:6f:53:70:36:
52:9d:df:0d:3a:c8:71:d7:09:24:bc:5d:bb:21:43:ac:f7:51:
11:a3:40:29
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULl3tT/uf8RKYzN7AVJj0dy9U4MYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM2NEIyRDE3NzFBQjMwRTE4ODgzQ0REMTQwMDFBODJE
OTkwNUY5ODAeFw0yNTA1MjkxODQ1MTNaFw0yNjA1MjgxODUwMTNaMDMxMTAvBgNV
BAMTKEQxOUIxRDNFMTNEMjhGQjVDODQ5MUM2NDQ4MTg4NjEwNTBBQkM0RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94iMWVC8DIHkvkuBJYCjQbMej
MWYdB4haKVYpvCSL/o9uVkNuR39pXGHVVdOSC1yoESwHRCH/pvULd+dXmZq5TBfB
d8blAzqlv/m0CKWQD3WzWnesjfDVnU6g5P6rk1Uve9jfZWH12iklkbOqE0l8VkJC
wICu64w7+tiNK9s90ptObCn7cnllOBCxdOa1fFs4sNpJxC8ZzvFN6ZRZ+EqjoG0/
UStcabqgOMzRyRuGHs/LhTH7d/XBDBe7trx3mA6WhPM2z66ip6ZafdrS1+wbJ5o8
v7CD+vpJ9f90l38V95cqIcNvZ7b6nywVWgM1ME5gWD+uDz61/pDObvFsxxylAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0ZsdPhPSj7XISRxkSBiGEFCrxNgwHwYDVR0j
BBgwFoAUrGSy0Xcasw4YiDzdFAAagtmQX5gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9BQzY0QjJEMTc3MUFCMzBFMTg4ODNDREQxNDAwMUE4MkQ5OTA1Rjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNjRCMkQxNzcxQUIzMEUx
ODg4M0NERDE0MDAxQTgyRDk5MDVGOTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNjM3MmUzMjM0MzkyZTMxMzczMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM1MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaf5qjANBgkqhkiG9w0BAQsFAAOCAQEAp4bA
liRA1JxvRM/Vtz5/KO/6ac+/3pMZgwpHxHpuhDoRoOkIk6lmZzQN+Guz7aZIep5q
oYfC3+xPU6fq6tc4KK0r/0t3Md8vbioZm+6FSWDtqLEEOT8nQ8PDVsZjR71k6CXh
6FmmMmVNPpAkVzJDxtsG21lxA1GqOiQIw0m/DcS8tvG1NN2GUb4cwJT6lOqjwuU2
JBbTO9ZwuGdOhhdwoU5bfs0SEmxIz3cOWdgfPIpd4ZjwOzB6jurQVAkuXRgFAPsj
pmZSAQl/Zr0txnx6CfsD05N6Yuf76xi4cWU9euPbCskwo51vU3A2Up3fDTrIcdcJ
JLxduyFDrPdREaNAKQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:03:02 2025 by rpki-client