Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa
File: 3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa (raw, json)
Hash identifier: nTHnk58+NlGCzA2boJphxaatQL1TrBKE4lQslsXvu7o=
Subject key identifier: ED:4B:0D:E7:DE:C5:83:98:2C:C6:02:9A:09:E6:50:79:79:E8:F3:15
Certificate issuer: /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Certificate serial: 5E9B1CF8B798C25E6AA7F7A8E09626AE5F92B637
Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa
Signing time: Sat 05 Apr 2025 12:29:51 +0000
ROA not before: Sat 05 Apr 2025 12:24:51 +0000
ROA not after: Sat 04 Apr 2026 12:29:51 +0000
asID: 263840
IP address blocks: 138.185.124.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9b:1c:f8:b7:98:c2:5e:6a:a7:f7:a8:e0:96:26:ae:5f:92:b6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Validity
Not Before: Apr 5 12:24:51 2025 GMT
Not After : Apr 4 12:29:51 2026 GMT
Subject: CN=ED4B0DE7DEC583982CC6029A09E6507979E8F315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:a8:53:eb:04:9f:55:0e:84:8c:3e:15:56:
cd:34:46:e7:96:4d:0b:79:4b:b7:0d:50:71:b5:c3:
46:42:fc:66:7b:05:75:f2:10:db:32:9b:da:30:51:
7a:a4:cb:d8:bf:59:eb:11:e4:76:70:6a:cf:e8:2e:
4c:f3:c1:59:64:fe:bd:56:2e:2c:39:14:01:fa:0d:
b5:c1:37:c0:f4:18:de:70:c9:0b:72:01:0f:f2:bb:
67:bd:f3:2c:f8:1c:53:7c:db:1b:95:6c:6e:0d:03:
fb:41:9a:9e:cf:ab:1c:3e:9b:c1:bc:06:7a:58:df:
19:b5:60:cf:33:53:37:65:2a:5b:e4:ed:e1:07:0c:
ac:03:92:5f:0f:81:bb:10:4b:9b:88:a1:85:36:c0:
6e:dc:a9:f5:ab:22:fd:8e:97:d1:db:f0:a7:0d:5f:
d1:08:1d:32:47:3d:50:84:74:62:f2:01:f2:29:ef:
a0:c1:fc:47:32:b4:4f:f0:4b:7a:14:d5:b8:35:22:
a3:5e:6b:4a:4a:7b:82:3e:23:77:df:02:06:b2:1d:
57:34:f4:80:a6:9c:b6:86:92:0b:02:ad:20:ff:30:
71:35:e2:1a:ac:1e:a3:af:f7:e0:4e:23:cf:33:a2:
a8:b1:9d:89:78:d8:29:8c:81:23:3d:11:e6:8a:76:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:0D:E7:DE:C5:83:98:2C:C6:02:9A:09:E6:50:79:79:E8:F3:15
X509v3 Authority Key Identifier:
keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.124.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ec:12:60:f3:fc:09:6a:c4:55:86:48:3c:5f:6a:66:4e:9e:
b6:07:6e:ab:b7:b3:4d:b2:fe:f8:a0:0f:29:15:38:e8:b9:e2:
5c:e4:ba:0a:2d:e4:e7:ed:16:18:e3:69:53:32:21:d9:ec:74:
71:37:c0:62:04:0e:cb:fe:e7:39:8d:13:e3:34:12:d7:00:dc:
48:ca:50:f0:da:b4:a2:25:52:7a:88:a6:97:47:67:e4:84:78:
ed:c4:3a:a1:84:9d:f3:46:11:26:c1:a9:58:4b:2e:ad:36:b6:
b8:2d:a7:25:94:fc:21:aa:e2:d4:70:be:9b:c5:88:b8:b6:39:
ff:bd:66:6b:1e:29:6f:87:73:fe:c4:71:e4:b2:50:56:19:b4:
e9:9a:00:a5:22:ab:71:d8:2a:06:39:9f:84:cc:66:29:18:76:
9e:89:c0:64:d4:2d:55:af:7c:e6:de:b6:ca:ed:2f:6b:e7:12:
ca:5e:27:db:23:ae:50:73:83:e2:9d:6d:a2:7e:94:50:9a:91:
44:b3:c7:25:ad:b7:f5:16:a2:38:c7:d0:ce:0d:22:b1:ed:c0:
df:fa:c4:4b:ed:63:81:35:08:81:2d:b7:60:b2:d5:22:14:26:
3d:ee:06:ae:0c:bf:b6:eb:d8:d4:f1:e6:5d:44:62:cc:7d:e4:
9e:12:16:18
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXpsc+LeYwl5qp/eo4JYmrl+StjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBB
OERGNUJGRTAeFw0yNTA0MDUxMjI0NTFaFw0yNjA0MDQxMjI5NTFaMDMxMTAvBgNV
BAMTKEVENEIwREU3REVDNTgzOTgyQ0M2MDI5QTA5RTY1MDc5NzlFOEYzMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAO6hT6wSfVQ6EjD4VVs00RueW
TQt5S7cNUHG1w0ZC/GZ7BXXyENsym9owUXqky9i/WesR5HZwas/oLkzzwVlk/r1W
Liw5FAH6DbXBN8D0GN5wyQtyAQ/yu2e98yz4HFN82xuVbG4NA/tBmp7Pqxw+m8G8
BnpY3xm1YM8zUzdlKlvk7eEHDKwDkl8PgbsQS5uIoYU2wG7cqfWrIv2Ol9Hb8KcN
X9EIHTJHPVCEdGLyAfIp76DB/EcytE/wS3oU1bg1IqNea0pKe4I+I3ffAgayHVc0
9ICmnLaGkgsCrSD/MHE14hqsHqOv9+BOI88zoqixnYl42CmMgSM9EeaKdo0rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7UsN597Fg5gsxgKaCeZQeXno8xUwHwYDVR0j
BBgwFoAUtlJ8tqOxK5+ash3MsFC1kKjfW/4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Bb0NEeHQxdEFLWkQ2cVBVZ2NZNHQ2a3VUNVA0b05ZdU1CYmg5WkhtNERW
LzAvQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBBOERGNUJGRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNjUyN0NCNkEzQjEyQjlGOUFC
MjFEQ0NCMDUwQjU5MEE4REY1QkZFLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
b0NEeHQxdEFLWkQ2cVBVZ2NZNHQ2a3VUNVA0b05ZdU1CYmg5WkhtNERWLzAvMzEz
MzM4MmUzMTM4MzUyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
MzM4MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAoq5fDANBgkqhkiG9w0BAQsFAAOCAQEAY+wSYPP8
CWrEVYZIPF9qZk6etgduq7ezTbL++KAPKRU46LniXOS6Ci3k5+0WGONpUzIh2ex0
cTfAYgQOy/7nOY0T4zQS1wDcSMpQ8Nq0oiVSeoiml0dn5IR47cQ6oYSd80YRJsGp
WEsurTa2uC2nJZT8Iari1HC+m8WIuLY5/71max4pb4dz/sRx5LJQVhm06ZoApSKr
cdgqBjmfhMxmKRh2nonAZNQtVa985t62yu0va+cSyl4n2yOuUHOD4p1ton6UUJqR
RLPHJa239RaiOMfQzg0ise3A3/rES+1jgTUIgS23YLLVIhQmPe4Grgy/tuvY1PHm
XURizH3knhIWGA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 23:24:42 2025 by rpki-client