Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
File: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (raw, json)
Hash identifier: rCrmhwsFRy9aRwxCGGgMG00ljPc2c2uCUILsYaOY2qY=
Subject key identifier: 18:07:66:47:3E:13:3C:5B:34:8B:1D:38:46:C8:7C:12:AC:AC:6E:CF
Certificate issuer: /CN=AB5501490ACA7067C26C7BD37A447971D139570B
Certificate serial: 01CD5D1DE4C6784AB05479421465F02EE8276B0E
Authority key identifier: AB:55:01:49:0A:CA:70:67:C2:6C:7B:D3:7A:44:79:71:D1:39:57:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB5501490ACA7067C26C7BD37A447971D139570B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
Signing time: Tue 01 Jul 2025 13:46:03 +0000
ROA not before: Tue 01 Jul 2025 13:41:03 +0000
ROA not after: Tue 30 Jun 2026 13:46:03 +0000
asID: 262403
IP address blocks: 177.38.96.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:cd:5d:1d:e4:c6:78:4a:b0:54:79:42:14:65:f0:2e:e8:27:6b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5501490ACA7067C26C7BD37A447971D139570B
Validity
Not Before: Jul 1 13:41:03 2025 GMT
Not After : Jun 30 13:46:03 2026 GMT
Subject: CN=180766473E133C5B348B1D3846C87C12ACAC6ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ca:a6:ba:2a:ae:d2:33:d0:2a:1a:93:d7:31:
11:ef:4d:d9:2a:e8:e4:4d:64:c4:d5:cb:a2:2c:e0:
d0:de:ad:b0:30:53:b4:a0:70:0f:62:81:c7:be:5e:
2a:1e:44:cf:da:9e:1f:f6:9e:48:97:2b:05:40:99:
98:6b:93:af:49:eb:12:f5:66:a8:00:0f:38:62:cc:
85:88:3c:5a:46:8c:49:59:45:bd:9f:3f:4c:3d:29:
88:19:af:41:05:c4:af:48:fa:ab:77:58:a3:63:63:
c7:6b:b3:f9:d5:34:56:fb:c1:f0:8e:d0:8a:e6:81:
3a:19:51:d9:90:97:17:06:37:12:e7:8c:f1:28:87:
3d:25:4a:c4:0b:12:86:10:c4:58:50:49:b8:b4:14:
f2:1a:af:7a:88:cc:6b:fa:8c:4a:07:14:bc:6b:af:
29:9e:92:a8:55:d0:82:cc:95:c9:b2:65:2a:10:80:
55:38:01:5b:e9:75:84:b3:d9:2c:8a:35:9e:05:65:
40:ae:09:49:c4:89:96:cd:cf:b0:b6:b2:92:c5:30:
f5:d8:e1:19:e6:20:f6:44:7e:aa:70:d4:8f:22:21:
5b:42:1e:da:27:07:c8:63:24:bb:77:76:95:cd:f1:
fc:ad:1f:93:ab:73:12:47:dd:e5:95:6c:21:58:ec:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:07:66:47:3E:13:3C:5B:34:8B:1D:38:46:C8:7C:12:AC:AC:6E:CF
X509v3 Authority Key Identifier:
keyid:AB:55:01:49:0A:CA:70:67:C2:6C:7B:D3:7A:44:79:71:D1:39:57:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/AB5501490ACA7067C26C7BD37A447971D139570B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB5501490ACA7067C26C7BD37A447971D139570B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.38.96.0/21
Signature Algorithm: sha256WithRSAEncryption
01:e9:0c:21:4f:10:7a:8e:65:d1:63:d5:e4:e2:b2:69:49:25:
7f:bf:4e:27:63:fa:93:7c:9e:93:a7:ba:a4:e4:fa:cd:a1:9d:
01:9a:d7:ec:6a:0f:88:03:b5:40:95:5c:f2:2b:5e:68:b3:2a:
1d:ff:14:46:f3:9a:bd:8f:1a:ea:2c:cf:ce:bb:be:b8:90:ec:
88:26:1e:0e:52:43:b2:78:ca:7e:2a:50:69:27:60:4a:d9:e1:
2d:41:cb:5b:43:ba:45:ac:41:91:61:78:20:e7:5f:77:dc:a0:
b7:b4:18:0a:0f:50:c9:47:9f:0f:95:f3:fd:a8:01:49:c9:4e:
c9:d7:42:15:ed:0a:35:82:e8:8d:32:c8:68:27:a7:f5:70:79:
e4:3a:25:27:18:29:18:e1:cb:cc:6e:b2:09:e3:f1:4e:a2:3e:
f2:53:ae:27:80:cf:a3:eb:3b:da:2f:0c:d3:54:90:da:1e:64:
c5:16:bb:53:87:cd:9b:38:21:cd:97:72:d1:bf:ac:23:a6:e3:
10:f9:e3:d6:96:52:a2:16:96:6b:b2:82:e0:2c:29:1e:67:39:
0e:11:15:bd:20:5b:67:6a:bd:60:cf:7c:2c:a4:d3:55:0a:35:
92:3c:b7:bd:ac:06:7b:be:82:9e:72:e1:35:ea:cb:40:b5:43:
39:57:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:11:47 2025 by rpki-client