Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
File: 3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa (raw, json)
Hash identifier: eCvDvjHAPcVRCquAP6C81vPpMjpAs5CCA8EmIMyMBaU=
Subject key identifier: 6D:6A:00:89:DF:60:55:5A:CE:61:D6:10:ED:96:3D:15:07:CD:8E:53
Certificate issuer: /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial: 7F92EE694D14FCE6E799E8B6B9ADC74381604959
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
Signing time: Tue 27 May 2025 20:34:47 +0000
ROA not before: Tue 27 May 2025 20:29:47 +0000
ROA not after: Tue 26 May 2026 20:34:47 +0000
asID: 263920
IP address blocks: 138.185.240.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:92:ee:69:4d:14:fc:e6:e7:99:e8:b6:b9:ad:c7:43:81:60:49:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Validity
Not Before: May 27 20:29:47 2025 GMT
Not After : May 26 20:34:47 2026 GMT
Subject: CN=6D6A0089DF60555ACE61D610ED963D1507CD8E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:90:46:c9:c9:d3:7b:b5:9e:d3:1b:24:1d:6c:
5d:60:d7:c8:30:2c:62:bd:0d:3c:ac:3b:18:78:c1:
20:f1:61:b3:a3:1b:57:18:55:61:5e:8e:f1:19:e5:
f8:70:88:08:1a:bf:1e:05:1a:d7:37:46:de:57:40:
49:d8:c2:90:86:12:4c:96:15:99:52:9f:f0:64:3d:
62:be:b9:f4:1c:60:cf:42:43:ad:d5:0d:18:09:db:
49:82:b8:f2:e4:19:21:d6:0d:98:d3:70:11:57:47:
c4:14:bd:a0:0f:6c:74:44:82:90:24:91:68:78:2f:
7e:3a:bf:c3:d5:ab:d2:e4:d2:ee:85:5b:81:33:be:
2c:68:0f:b5:a2:a4:68:b0:9c:40:5b:88:39:e9:7c:
98:f0:f4:79:d8:8c:01:24:31:38:fe:6d:8e:6c:94:
f8:78:da:04:31:38:36:c4:11:5c:18:44:1a:ea:b6:
a7:27:b8:cb:99:a4:61:ed:00:5a:6a:5e:9e:f8:01:
e3:7c:3f:85:56:c7:b9:08:9d:20:59:a7:bc:21:3a:
ea:12:e0:77:16:a1:b8:09:62:2f:99:d6:e7:a3:95:
71:52:66:24:fe:a1:33:7b:8c:5b:63:8a:56:e8:89:
8c:b2:aa:1c:f5:d7:db:7a:06:2d:21:81:f5:e7:25:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:00:89:DF:60:55:5A:CE:61:D6:10:ED:96:3D:15:07:CD:8E:53
X509v3 Authority Key Identifier:
keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.240.0/22
Signature Algorithm: sha256WithRSAEncryption
77:9c:3c:84:b1:e0:18:3f:e9:1c:42:6c:bf:53:d5:14:3f:7f:
eb:89:33:86:9e:61:92:ea:10:ce:44:46:e5:45:68:03:44:eb:
ce:fb:79:71:76:c4:5e:9d:a0:18:fb:06:77:17:95:80:73:6f:
96:b3:ca:3c:85:ca:dd:01:d2:df:57:8d:02:84:79:27:f1:98:
f7:99:4d:0a:58:77:23:84:f7:da:f2:a7:9c:7f:73:77:08:f9:
cd:97:9c:e9:e6:27:d1:e6:0a:a7:b2:38:ba:46:69:ae:cc:17:
6f:35:0f:cf:a1:8d:c2:06:6f:47:02:af:af:54:54:ed:51:b6:
d2:10:cd:c8:5b:98:b5:9e:d0:74:1c:64:a1:a0:44:f6:68:26:
28:a5:b4:9d:78:3f:ce:be:8b:74:ec:ac:36:c5:08:c6:31:e4:
f7:d1:da:72:2e:22:b9:64:91:3d:94:7b:24:06:dc:56:ca:a2:
54:8f:c1:b8:c5:08:77:26:71:74:c7:f1:35:c0:a0:d5:87:a0:
49:8d:1d:0b:bb:ee:c6:2c:a3:0b:24:9b:e2:a5:68:f1:fb:9f:
e7:8b:9e:c7:0b:81:a6:8b:35:8c:7b:c7:e8:bd:81:9a:9d:6a:
70:9f:fe:49:f1:32:69:e9:6f:50:fa:79:ef:6a:01:a4:8f:a0:
86:5d:60:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUf5LuaU0U/Obnmei2ua3HQ4FgSVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg3RkNBOTQzRTk4Qjg4MDZBNjA2RjVCMEY4QkU3Mjk0
QzREOTNBMzAeFw0yNTA1MjcyMDI5NDdaFw0yNjA1MjYyMDM0NDdaMDMxMTAvBgNV
BAMTKDZENkEwMDg5REY2MDU1NUFDRTYxRDYxMEVEOTYzRDE1MDdDRDhFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkEbJydN7tZ7TGyQdbF1g18gw
LGK9DTysOxh4wSDxYbOjG1cYVWFejvEZ5fhwiAgavx4FGtc3Rt5XQEnYwpCGEkyW
FZlSn/BkPWK+ufQcYM9CQ63VDRgJ20mCuPLkGSHWDZjTcBFXR8QUvaAPbHREgpAk
kWh4L346v8PVq9Lk0u6FW4EzvixoD7WipGiwnEBbiDnpfJjw9HnYjAEkMTj+bY5s
lPh42gQxODbEEVwYRBrqtqcnuMuZpGHtAFpqXp74AeN8P4VWx7kInSBZp7whOuoS
4HcWobgJYi+Z1uejlXFSZiT+oTN7jFtjilboiYyyqhz119t6Bi0hgfXnJUqpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbWoAid9gVVrOYdYQ7ZY9FQfNjlMwHwYDVR0j
BBgwFoAU2H/KlD6YuIBqYG9bD4vnKUxNk6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9EODdGQ0E5NDNFOThCODgwNkE2MDZGNUIwRjhCRTcyOTRDNEQ5M0EzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4N0ZDQTk0M0U5OEI4ODA2
QTYwNkY1QjBGOEJFNzI5NEM0RDkzQTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq58DANBgkqhkiG9w0BAQsFAAOCAQEAd5w8
hLHgGD/pHEJsv1PVFD9/64kzhp5hkuoQzkRG5UVoA0Trzvt5cXbEXp2gGPsGdxeV
gHNvlrPKPIXK3QHS31eNAoR5J/GY95lNClh3I4T32vKnnH9zdwj5zZec6eYn0eYK
p7I4ukZprswXbzUPz6GNwgZvRwKvr1RU7VG20hDNyFuYtZ7QdBxkoaBE9mgmKKW0
nXg/zr6LdOysNsUIxjHk99Haci4iuWSRPZR7JAbcVsqiVI/BuMUIdyZxdMfxNcCg
1YegSY0dC7vuxiyjCySb4qVo8fuf54uexwuBpos1jHvH6L2Bmp1qcJ/+SfEyaelv
UPp572oBpI+ghl1gpA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:05:26 2025 by rpki-client