Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/3230302e34392e32382e302f32322d3332203d3e203532383730.roa
File: 3230302e34392e32382e302f32322d3332203d3e203532383730.roa (raw, json)
Hash identifier: O+1HNFhG1Cd3FtUTy0ngT8uY3N9BxGYD6OHmY6/dXZ4=
Subject key identifier: 37:70:BE:D2:81:60:40:DC:3E:D0:89:B5:ED:B4:CE:5B:5F:60:79:72
Certificate issuer: /CN=2F8C4EECD957464FDCE83518985B0C91CC92EBC4
Certificate serial: 1F239414A70D7CAAFD841F9734FA52E11F60BE99
Authority key identifier: 2F:8C:4E:EC:D9:57:46:4F:DC:E8:35:18:98:5B:0C:91:CC:92:EB:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F8C4EECD957464FDCE83518985B0C91CC92EBC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/3230302e34392e32382e302f32322d3332203d3e203532383730.roa
Signing time: Fri 20 Jun 2025 16:35:50 +0000
ROA not before: Fri 20 Jun 2025 16:30:50 +0000
ROA not after: Fri 19 Jun 2026 16:35:50 +0000
asID: 52870
IP address blocks: 200.49.28.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:23:94:14:a7:0d:7c:aa:fd:84:1f:97:34:fa:52:e1:1f:60:be:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F8C4EECD957464FDCE83518985B0C91CC92EBC4
Validity
Not Before: Jun 20 16:30:50 2025 GMT
Not After : Jun 19 16:35:50 2026 GMT
Subject: CN=3770BED2816040DC3ED089B5EDB4CE5B5F607972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:ac:c7:2d:2f:ad:1f:aa:a5:a1:a7:38:c8:
b3:f4:c5:ff:df:f1:14:76:99:8a:ea:3d:07:ac:f8:
99:b1:86:fc:55:00:bc:2d:cf:82:3b:55:8b:c0:e6:
66:28:27:1d:e1:7f:21:3a:df:1f:c7:f8:15:10:38:
46:53:08:cf:89:62:d3:12:bf:99:11:2f:0e:7a:02:
86:f9:8c:d2:d5:d9:68:73:e6:1a:e0:ef:33:95:53:
ea:20:31:c9:e7:f4:27:0d:62:8d:99:9a:95:88:63:
20:36:15:c1:ee:4c:c4:bf:7e:bc:84:a5:5c:2e:8d:
50:1d:9a:81:f1:fd:b0:32:2e:8d:fa:75:38:4b:2d:
b0:cb:f9:be:04:a6:d2:88:8c:8b:6e:c0:db:b4:5c:
06:89:35:c9:5b:3e:47:c9:d5:f8:52:bc:94:9a:d3:
04:28:55:8e:73:5c:ed:ba:cb:b2:37:fb:a5:f4:66:
6a:d4:00:23:f5:08:a4:79:63:7d:c0:ac:f5:f3:4f:
ef:76:81:51:39:7b:8b:1a:a5:50:b5:77:04:2d:30:
1c:79:ec:ff:0c:70:67:64:13:ca:da:e5:be:1a:d9:
fb:fc:2b:e7:72:59:de:c9:1b:5f:81:11:e5:f3:37:
b1:1a:ab:ff:2f:5e:34:4c:8b:07:9b:b2:51:48:1b:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:70:BE:D2:81:60:40:DC:3E:D0:89:B5:ED:B4:CE:5B:5F:60:79:72
X509v3 Authority Key Identifier:
keyid:2F:8C:4E:EC:D9:57:46:4F:DC:E8:35:18:98:5B:0C:91:CC:92:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/2F8C4EECD957464FDCE83518985B0C91CC92EBC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F8C4EECD957464FDCE83518985B0C91CC92EBC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/3230302e34392e32382e302f32322d3332203d3e203532383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.49.28.0/22
Signature Algorithm: sha256WithRSAEncryption
44:51:bf:fc:80:eb:aa:7a:db:6e:d3:75:9e:de:4d:99:a7:5a:
be:5d:90:08:c4:7b:cd:d6:a7:e1:e7:f9:f2:d5:29:8b:b5:c6:
bf:b1:00:9d:ef:cf:59:92:31:2a:8e:b7:e7:01:98:fb:dc:22:
ba:76:22:82:8f:63:42:f6:12:13:65:75:5d:f7:60:ee:2b:b0:
3e:8a:88:13:88:da:c2:9d:80:dc:ed:84:51:7c:ea:f4:81:2f:
d4:7f:7c:88:5d:2d:fe:1b:29:79:c3:44:b2:da:cd:1f:15:f9:
e4:e2:d8:b3:ea:66:91:7e:10:c3:06:ad:96:0d:ea:17:c4:64:
5d:02:ab:cd:a1:06:f6:5a:d1:95:fa:4d:1b:e1:5c:0e:17:87:
ab:a0:9e:90:e9:0c:ef:58:db:dc:34:61:2b:3a:50:3a:7b:d2:
47:a9:29:35:22:58:7f:d6:f3:39:d2:e9:6d:0d:c3:c9:66:c3:
22:3b:0e:9b:11:75:7b:61:a4:02:c9:aa:98:b9:7e:29:58:13:
4c:80:25:51:a6:45:dd:37:c7:52:35:f8:c7:30:bd:39:2b:e7:
e1:88:a2:5f:2e:4d:05:f1:42:83:b4:ec:f6:5c:1b:f8:e5:2a:
a1:8a:4c:b4:5a:95:e4:f0:1b:3c:e9:69:94:c8:2e:d8:81:99:
99:bf:81:45
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHyOUFKcNfKr9hB+XNPpS4R9gvpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY4QzRFRUNEOTU3NDY0RkRDRTgzNTE4OTg1QjBDOTFD
QzkyRUJDNDAeFw0yNTA2MjAxNjMwNTBaFw0yNjA2MTkxNjM1NTBaMDMxMTAvBgNV
BAMTKDM3NzBCRUQyODE2MDQwREMzRUQwODlCNUVEQjRDRTVCNUY2MDc5NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgm6zHLS+tH6qloac4yLP0xf/f
8RR2mYrqPQes+JmxhvxVALwtz4I7VYvA5mYoJx3hfyE63x/H+BUQOEZTCM+JYtMS
v5kRLw56Aob5jNLV2Whz5hrg7zOVU+ogMcnn9CcNYo2ZmpWIYyA2FcHuTMS/fryE
pVwujVAdmoHx/bAyLo36dThLLbDL+b4EptKIjItuwNu0XAaJNclbPkfJ1fhSvJSa
0wQoVY5zXO26y7I3+6X0ZmrUACP1CKR5Y33ArPXzT+92gVE5e4sapVC1dwQtMBx5
7P8McGdkE8ra5b4a2fv8K+dyWd7JG1+BEeXzN7Eaq/8vXjRMiwebslFIG9+tAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUN3C+0oFgQNw+0Im17bTOW19geXIwHwYDVR0j
BBgwFoAUL4xO7NlXRk/c6DUYmFsMkcyS68QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzdyd0dBeXhja1NZaDdIZVM3SEtNdmpXSGtXUDNFUmRROTFOZHh5ZnB4
ZjQvMC8yRjhDNEVFQ0Q5NTc0NjRGRENFODM1MTg5ODVCMEM5MUNDOTJFQkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGOEM0RUVDRDk1NzQ2NEZE
Q0U4MzUxODk4NUIwQzkxQ0M5MkVCQzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3cndHQXl4Y2tTWWg3SGVTN0hLTXZqV0hrV1AzRVJkUTkxTmR4eWZweGY0LzAv
MzIzMDMwMmUzNDM5MmUzMjM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzMjM4
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsgxHDANBgkqhkiG9w0BAQsFAAOCAQEARFG//IDrqnrb
btN1nt5Nmadavl2QCMR7zdan4ef58tUpi7XGv7EAne/PWZIxKo635wGY+9wiunYi
go9jQvYSE2V1Xfdg7iuwPoqIE4jawp2A3O2EUXzq9IEv1H98iF0t/hspecNEstrN
HxX55OLYs+pmkX4Qwwatlg3qF8RkXQKrzaEG9lrRlfpNG+FcDheHq6CekOkM71jb
3DRhKzpQOnvSR6kpNSJYf9bzOdLpbQ3DyWbDIjsOmxF1e2GkAsmqmLl+KVgTTIAl
UaZF3TfHUjX4xzC9OSvn4YiiXy5NBfFCg7Ts9lwb+OUqoYpMtFqV5PAbPOlplMgu
2IGZmb+BRQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:33:29 2025 by rpki-client