Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa
File: 3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier: SgEnakWWlh6mOXYejlFrDrjnT34ctnnkRDrar2MCFKs=
Subject key identifier: A3:AA:6A:41:F2:B8:99:05:22:80:F6:97:6D:11:9A:F8:A2:A5:17:E5
Certificate issuer: /CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Certificate serial: 4190E323F9D8A8D05F92C8001956BED914820C28
Authority key identifier: 12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa
Signing time: Tue 19 Aug 2025 20:06:22 +0000
ROA not before: Tue 19 Aug 2025 20:01:22 +0000
ROA not after: Tue 18 Aug 2026 20:06:22 +0000
asID: 262503
IP address blocks: 177.66.192.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:90:e3:23:f9:d8:a8:d0:5f:92:c8:00:19:56:be:d9:14:82:0c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123B03D46660DEE9B32E2712342EB4F48591C7B6
Validity
Not Before: Aug 19 20:01:22 2025 GMT
Not After : Aug 18 20:06:22 2026 GMT
Subject: CN=A3AA6A41F2B899052280F6976D119AF8A2A517E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:1f:37:95:79:d6:bc:22:6c:41:a3:af:14:
5a:d9:bf:d2:55:84:3a:97:e8:ee:85:cd:a7:66:08:
dd:2b:f4:a7:74:24:d1:0a:ae:22:cd:ae:bc:dc:0d:
1b:da:fe:46:8b:ff:05:58:f1:70:7c:e1:2f:7d:14:
ad:3a:4f:19:3e:7a:57:7f:1f:2f:61:ce:4a:c8:05:
87:d8:ba:9d:d9:aa:9f:14:66:7d:fd:dd:3d:73:80:
fa:73:04:b0:7b:9e:2f:8d:1d:b9:6a:d9:94:8e:19:
fd:84:99:a0:88:7d:eb:f2:d6:ff:18:12:11:6a:59:
84:ed:f5:a2:1b:b1:16:cd:3f:d1:cc:c5:59:82:35:
93:6d:19:64:fa:55:83:14:a1:ee:32:89:07:89:33:
9a:bd:50:47:5d:94:3f:32:0b:4a:50:d8:ef:75:3c:
07:0f:5f:29:e2:07:4e:4b:c2:32:a1:c4:76:49:6c:
3d:67:9c:4a:f7:fa:80:2e:ab:bc:af:ed:f5:d9:dc:
fe:47:58:85:64:78:fc:5f:db:43:c8:a8:00:a4:5e:
24:1c:48:ea:56:51:05:f4:3c:af:d7:8d:71:a0:72:
49:f7:a3:93:ff:f3:b8:28:c7:7d:ae:95:b6:45:7a:
c3:e2:c9:e3:28:17:40:4d:95:7d:75:e4:29:dd:1a:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:6A:41:F2:B8:99:05:22:80:F6:97:6D:11:9A:F8:A2:A5:17:E5
X509v3 Authority Key Identifier:
keyid:12:3B:03:D4:66:60:DE:E9:B3:2E:27:12:34:2E:B4:F4:85:91:C7:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/123B03D46660DEE9B32E2712342EB4F48591C7B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/123B03D46660DEE9B32E2712342EB4F48591C7B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.66.192.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:63:85:49:c0:8b:c7:11:31:eb:d2:58:93:ef:18:bf:d5:e5:
be:a0:04:06:98:ae:d2:fc:69:dd:d6:68:91:a4:3c:fa:65:c6:
88:c1:12:5f:9c:45:ae:76:cf:cc:51:4f:d1:c5:e0:b9:72:87:
48:92:ca:2b:ba:c5:03:42:6a:5a:34:bd:ca:0b:77:4f:f2:c5:
66:05:62:fc:14:fa:5c:84:3c:18:b7:e5:87:8c:e7:90:ce:7b:
76:2a:09:47:da:8c:4c:dd:4b:52:20:a4:5f:07:1d:44:69:10:
2e:9f:e5:a5:14:b6:a4:ec:4c:8b:9a:20:79:6a:c2:97:38:47:
66:0d:07:f9:b1:dc:90:78:06:e8:89:98:fb:87:05:0e:ab:ac:
58:09:4e:6e:d5:ef:79:d1:15:e2:2f:6f:76:c5:ef:02:44:2c:
cd:8b:33:88:b0:1a:25:85:32:94:55:a3:8b:d3:7a:91:43:11:
df:fd:1b:c2:dd:be:de:44:78:9a:96:d7:61:ff:f4:a4:c3:5e:
d1:c9:51:b6:be:9d:7f:c1:63:79:74:2b:4f:d7:d1:43:ea:96:
1c:7e:f5:b7:0f:10:61:fd:0a:36:d8:10:4b:5e:e0:98:2d:8c:
19:d0:00:e3:bf:a8:9d:86:99:7d:e8:88:09:ce:5f:39:3a:91:
b6:db:75:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQZDjI/nYqNBfksgAGVa+2RSCDCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzQjAzRDQ2NjYwREVFOUIzMkUyNzEyMzQyRUI0RjQ4
NTkxQzdCNjAeFw0yNTA4MTkyMDAxMjJaFw0yNjA4MTgyMDA2MjJaMDMxMTAvBgNV
BAMTKEEzQUE2QTQxRjJCODk5MDUyMjgwRjY5NzZEMTE5QUY4QTJBNTE3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmh83lXnWvCJsQaOvFFrZv9JV
hDqX6O6FzadmCN0r9Kd0JNEKriLNrrzcDRva/kaL/wVY8XB84S99FK06Txk+eld/
Hy9hzkrIBYfYup3Zqp8UZn393T1zgPpzBLB7ni+NHblq2ZSOGf2EmaCIfevy1v8Y
EhFqWYTt9aIbsRbNP9HMxVmCNZNtGWT6VYMUoe4yiQeJM5q9UEddlD8yC0pQ2O91
PAcPXyniB05LwjKhxHZJbD1nnEr3+oAuq7yv7fXZ3P5HWIVkePxf20PIqACkXiQc
SOpWUQX0PK/XjXGgckn3o5P/87gox32ulbZFesPiyeMoF0BNlX115CndGhx5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUo6pqQfK4mQUigPaXbRGa+KKlF+UwHwYDVR0j
BBgwFoAUEjsD1GZg3umzLicSNC609IWRx7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC8xMjNCMDNENDY2NjBERUU5QjMyRTI3MTIzNDJFQjRGNDg1OTFDN0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyM0IwM0Q0NjY2MERFRTlC
MzJFMjcxMjM0MkVCNEY0ODU5MUM3QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNzM3MmUzNjM2MmUzMTM5MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxQsAwDQYJKoZIhvcNAQELBQADggEBAD1jhUnA
i8cRMevSWJPvGL/V5b6gBAaYrtL8ad3WaJGkPPplxojBEl+cRa52z8xRT9HF4Lly
h0iSyiu6xQNCalo0vcoLd0/yxWYFYvwU+lyEPBi35YeM55DOe3YqCUfajEzdS1Ig
pF8HHURpEC6f5aUUtqTsTIuaIHlqwpc4R2YNB/mx3JB4BuiJmPuHBQ6rrFgJTm7V
73nRFeIvb3bF7wJELM2LM4iwGiWFMpRVo4vTepFDEd/9G8Ldvt5EeJqW12H/9KTD
XtHJUba+nX/BY3l0K0/X0UPqlhx+9bcPEGH9CjbYEEte4JgtjBnQAOO/qJ2GmX3o
iAnOXzk6kbbbdbI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:09:53 2025 by rpki-client