Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/APGdqwC23MCpC9HxPbrLLprhkFph5F1yTX6tPZ4QSn6C/0/3137372e37322e3135322e302f32322d3332203d3e20323730383631.roa
File: 3137372e37322e3135322e302f32322d3332203d3e20323730383631.roa (raw, json)
Hash identifier: qnoNORkmRiIQDj3kN9oqSNlpYv9tSeUtIX8E/DR46lc=
Subject key identifier: 36:76:CA:CA:7A:B8:DB:02:7B:A8:6C:28:49:10:68:9F:BE:B6:24:AE
Certificate issuer: /CN=B9E9991A93ED933A6F8270541FD3B0F7B1EA4263
Certificate serial: 1B53B03FB997475D1CB5DBD7CC1B3EECC5100CD6
Authority key identifier: B9:E9:99:1A:93:ED:93:3A:6F:82:70:54:1F:D3:B0:F7:B1:EA:42:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9E9991A93ED933A6F8270541FD3B0F7B1EA4263.cer
Subject info access: rsync://rpki-repo.registro.br/repo/APGdqwC23MCpC9HxPbrLLprhkFph5F1yTX6tPZ4QSn6C/0/3137372e37322e3135322e302f32322d3332203d3e20323730383631.roa
Signing time: Sat 21 Jun 2025 00:01:56 +0000
ROA not before: Fri 20 Jun 2025 23:56:56 +0000
ROA not after: Sat 20 Jun 2026 00:01:56 +0000
asID: 270861
IP address blocks: 177.72.152.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:53:b0:3f:b9:97:47:5d:1c:b5:db:d7:cc:1b:3e:ec:c5:10:0c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9E9991A93ED933A6F8270541FD3B0F7B1EA4263
Validity
Not Before: Jun 20 23:56:56 2025 GMT
Not After : Jun 20 00:01:56 2026 GMT
Subject: CN=3676CACA7AB8DB027BA86C284910689FBEB624AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:b5:75:1c:24:21:bd:fc:9e:0b:26:21:df:
b6:f5:b6:68:f9:ba:15:5c:97:dc:83:96:51:78:f1:
97:3f:6d:b4:0e:ea:8e:38:08:8f:2e:1d:c2:06:07:
a8:a7:f4:49:24:df:0c:1e:e2:bd:23:c2:3d:79:7b:
4a:09:02:60:4c:a5:75:16:54:46:18:17:70:0b:dd:
3c:3e:c5:ff:cd:9d:fe:3b:37:0d:bb:97:d7:0c:bc:
4b:3f:a3:5a:63:78:49:97:ad:f9:65:fe:12:3f:5e:
0a:6c:11:b2:31:94:f7:1c:e4:27:b5:4e:29:2b:63:
10:a8:48:57:43:dc:58:44:c0:22:64:ab:f6:52:55:
22:54:45:75:90:d4:fa:8f:e4:55:55:42:6e:53:3c:
66:80:b2:2c:80:9a:7f:4a:d3:40:cf:b2:f3:9c:33:
0b:a6:59:2a:db:5a:65:e9:de:53:f8:51:31:c6:81:
36:45:47:c6:95:e3:cf:97:1d:3e:20:98:32:7d:fb:
ac:d7:1f:e9:d4:1e:fd:dc:b3:2c:51:00:82:a0:c5:
f6:fa:21:36:d5:b0:ea:11:54:30:fe:2f:49:d0:22:
29:27:24:66:17:7c:7f:4b:74:1d:a9:13:83:01:1d:
0b:85:f6:e6:d8:e6:a8:b0:cc:6d:56:da:58:49:e2:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:CA:CA:7A:B8:DB:02:7B:A8:6C:28:49:10:68:9F:BE:B6:24:AE
X509v3 Authority Key Identifier:
keyid:B9:E9:99:1A:93:ED:93:3A:6F:82:70:54:1F:D3:B0:F7:B1:EA:42:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/APGdqwC23MCpC9HxPbrLLprhkFph5F1yTX6tPZ4QSn6C/0/B9E9991A93ED933A6F8270541FD3B0F7B1EA4263.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9E9991A93ED933A6F8270541FD3B0F7B1EA4263.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGdqwC23MCpC9HxPbrLLprhkFph5F1yTX6tPZ4QSn6C/0/3137372e37322e3135322e302f32322d3332203d3e20323730383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.72.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:fa:bf:bf:d6:b4:02:9b:f5:9a:b3:14:90:c8:b4:71:3c:27:
be:73:38:ea:8a:21:19:d5:49:8e:2b:48:a2:a4:d9:1f:d1:99:
df:f8:7c:2e:24:6b:a1:69:4c:ab:6a:63:c1:af:15:67:9b:ad:
a4:81:72:df:8e:ce:e3:3c:09:fa:3c:b6:01:c5:e4:4e:cb:4e:
19:7f:5a:e3:ad:fb:3c:ff:76:6b:f8:56:02:c2:ca:43:51:a6:
ca:ee:44:ff:48:55:42:86:19:a7:51:e4:9b:b8:3d:98:a0:a2:
b7:d3:8b:c5:9e:9c:f6:28:4c:f0:40:9e:13:31:52:7b:ee:d5:
05:8b:d7:b1:59:9f:78:68:8d:81:a6:32:ae:ea:e8:ce:e3:1f:
5b:ce:10:2e:3d:fb:fe:04:e5:6c:30:f7:c9:ca:ae:e7:d5:49:
29:76:22:d4:55:d1:c3:d6:e9:24:7f:72:9a:f7:dd:7c:ff:ff:
5a:51:87:a9:52:ff:fa:c2:79:88:e6:93:8b:06:f2:3e:04:2f:
91:b2:7d:fa:ee:88:48:c5:db:4a:5a:74:9e:04:43:5f:ce:dc:
74:22:0c:d2:70:a6:d8:4a:99:84:83:7a:1f:b2:bb:fa:56:1d:
97:f0:a6:64:eb:b2:96:41:4f:2d:b2:57:f5:23:a8:cf:ed:12:
66:bb:78:5c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG1OwP7mXR10ctdvXzBs+7MUQDNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlFOTk5MUE5M0VEOTMzQTZGODI3MDU0MUZEM0IwRjdC
MUVBNDI2MzAeFw0yNTA2MjAyMzU2NTZaFw0yNjA2MjAwMDAxNTZaMDMxMTAvBgNV
BAMTKDM2NzZDQUNBN0FCOERCMDI3QkE4NkMyODQ5MTA2ODlGQkVCNjI0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BLV1HCQhvfyeCyYh37b1tmj5
uhVcl9yDllF48Zc/bbQO6o44CI8uHcIGB6in9Ekk3wwe4r0jwj15e0oJAmBMpXUW
VEYYF3AL3Tw+xf/Nnf47Nw27l9cMvEs/o1pjeEmXrfll/hI/XgpsEbIxlPcc5Ce1
TikrYxCoSFdD3FhEwCJkq/ZSVSJURXWQ1PqP5FVVQm5TPGaAsiyAmn9K00DPsvOc
MwumWSrbWmXp3lP4UTHGgTZFR8aV48+XHT4gmDJ9+6zXH+nUHv3csyxRAIKgxfb6
ITbVsOoRVDD+L0nQIiknJGYXfH9LdB2pE4MBHQuF9ubY5qiwzG1W2lhJ4krFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNnbKynq42wJ7qGwoSRBon762JK4wHwYDVR0j
BBgwFoAUuemZGpPtkzpvgnBUH9Ow97HqQmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVBHZHF3QzIzTUNwQzlIeFBickxMcHJoa0ZwaDVGMXlUWDZ0UFo0UVNu
NkMvMC9COUU5OTkxQTkzRUQ5MzNBNkY4MjcwNTQxRkQzQjBGN0IxRUE0MjYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5RTk5OTFBOTNFRDkzM0E2
RjgyNzA1NDFGRDNCMEY3QjFFQTQyNjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FQR2Rxd0MyM01DcEM5SHhQYnJMTHByaGtGcGg1RjF5VFg2dFBaNFFTbjZDLzAv
MzEzNzM3MmUzNzMyMmUzMTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzODM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxSJgwDQYJKoZIhvcNAQELBQADggEBAE36v7/W
tAKb9ZqzFJDItHE8J75zOOqKIRnVSY4rSKKk2R/Rmd/4fC4ka6FpTKtqY8GvFWeb
raSBct+OzuM8Cfo8tgHF5E7LThl/WuOt+zz/dmv4VgLCykNRpsruRP9IVUKGGadR
5Ju4PZigorfTi8WenPYoTPBAnhMxUnvu1QWL17FZn3hojYGmMq7q6M7jH1vOEC49
+/4E5Www98nKrufVSSl2ItRV0cPW6SR/cpr33Xz//1pRh6lS//rCeYjmk4sG8j4E
L5GyffruiEjF20padJ4EQ1/O3HQiDNJwpthKmYSDeh+yu/pWHZfwpmTrspZBTy2y
V/UjqM/tEma7eFw=
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:05:23 2025 by rpki-client