Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
File: 3137302e38342e31322e302f32322d3234203d3e20323634393837.roa (raw, json)
Hash identifier: AyWdlPk7ptT1AUbWLXNObWGLJxWyMR/HMYNiC7P0ys4=
Subject key identifier: DC:E8:91:52:CE:A0:8B:6F:94:08:FF:CE:DB:44:DD:AF:45:8E:FA:D2
Certificate issuer: /CN=2085C2E26105617BC4502F8911A5BE52CC061122
Certificate serial: 3E35A972D239B00E1374E49CDB33A90A8E9653B7
Authority key identifier: 20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
Signing time: Mon 16 Jun 2025 20:03:02 +0000
ROA not before: Mon 16 Jun 2025 19:58:02 +0000
ROA not after: Mon 15 Jun 2026 20:03:02 +0000
asID: 264987
IP address blocks: 170.84.12.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:35:a9:72:d2:39:b0:0e:13:74:e4:9c:db:33:a9:0a:8e:96:53:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2085C2E26105617BC4502F8911A5BE52CC061122
Validity
Not Before: Jun 16 19:58:02 2025 GMT
Not After : Jun 15 20:03:02 2026 GMT
Subject: CN=DCE89152CEA08B6F9408FFCEDB44DDAF458EFAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:66:07:96:47:15:64:15:45:0b:1c:87:07:
d7:87:05:22:95:3a:f4:72:3c:8c:91:b7:db:ac:04:
8f:3b:35:30:e4:1d:54:b0:91:90:e1:30:b4:ea:f1:
a6:0b:53:19:31:68:96:90:09:8a:a1:b7:b3:9f:cc:
dc:8c:b9:d4:7d:d3:0f:4b:cb:29:69:a7:4b:bd:90:
d0:66:fa:e6:67:5c:04:79:88:53:b5:7f:13:43:6a:
82:d3:de:8c:8d:41:32:6d:d6:27:84:32:49:07:08:
0a:9b:32:4a:7f:02:80:af:df:e5:e8:b6:f2:1d:cf:
f0:60:19:c6:42:95:cf:32:6d:4b:b9:b1:69:29:6d:
92:a9:e1:bc:00:dc:5f:96:f0:1a:3c:09:94:4f:0a:
cd:09:53:61:ce:2b:4c:ae:e0:87:78:99:4e:91:a4:
92:03:e3:a9:e6:f7:67:a1:18:c3:6c:8c:74:bf:93:
25:a8:67:ca:c5:c5:cd:07:ba:80:9b:35:b1:db:56:
1c:12:4c:80:6c:e6:ce:b4:0d:79:39:c7:3d:00:88:
af:f6:06:50:5e:79:2e:66:36:dc:6c:a6:97:c0:30:
fd:0b:01:d5:8b:58:e7:87:a0:df:73:0b:3c:bd:04:
0b:dc:12:5d:60:66:c5:31:04:d7:48:89:7e:8f:8c:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E8:91:52:CE:A0:8B:6F:94:08:FF:CE:DB:44:DD:AF:45:8E:FA:D2
X509v3 Authority Key Identifier:
keyid:20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3137302e38342e31322e302f32322d3234203d3e20323634393837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.12.0/22
Signature Algorithm: sha256WithRSAEncryption
af:ff:cd:3c:71:e5:a1:d9:13:8f:0c:50:de:ff:7a:57:a7:56:
07:87:ed:b1:6e:4c:7f:a7:41:7b:9b:2b:68:11:82:77:2a:66:
ea:97:46:50:3c:65:4f:7e:43:7a:60:f3:3e:01:27:65:e7:59:
71:d8:c5:c4:e7:b1:c5:b0:63:1c:14:bb:f2:9d:30:01:9b:85:
c3:54:f1:f5:46:fb:6b:a5:ee:2c:a3:c1:33:1a:27:12:6a:4e:
ed:a3:03:92:f6:b0:f2:4c:2b:4b:d9:32:96:03:29:a5:06:75:
12:ef:c2:31:5c:f6:b5:88:71:27:1e:9a:b7:e3:13:9a:09:83:
bb:92:2a:bc:d8:ad:55:16:bd:76:77:25:64:84:b1:8b:f9:43:
1c:97:19:0d:75:22:ad:a9:a1:e5:06:58:32:b0:0d:02:4f:93:
81:ba:e8:46:51:7d:53:a4:09:e5:c3:73:36:d6:46:a8:ac:31:
c2:12:3a:48:cc:6d:1c:15:00:36:c3:ac:2f:8e:3c:e9:50:9d:
b0:97:b4:6b:31:6b:0f:10:4d:29:71:66:2c:02:f8:95:ca:7f:
1f:2a:f7:4a:54:5f:e5:fd:a9:ca:90:63:81:a2:52:d7:79:2d:
b2:3a:90:f2:32:b0:bc:65:eb:55:03:f8:7a:d6:2a:38:80:16:
84:eb:ee:3b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPjWpctI5sA4TdOSc2zOpCo6WU7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA4NUMyRTI2MTA1NjE3QkM0NTAyRjg5MTFBNUJFNTJD
QzA2MTEyMjAeFw0yNTA2MTYxOTU4MDJaFw0yNjA2MTUyMDAzMDJaMDMxMTAvBgNV
BAMTKERDRTg5MTUyQ0VBMDhCNkY5NDA4RkZDRURCNDREREFGNDU4RUZBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhWYHlkcVZBVFCxyHB9eHBSKV
OvRyPIyRt9usBI87NTDkHVSwkZDhMLTq8aYLUxkxaJaQCYqht7OfzNyMudR90w9L
yylpp0u9kNBm+uZnXAR5iFO1fxNDaoLT3oyNQTJt1ieEMkkHCAqbMkp/AoCv3+Xo
tvIdz/BgGcZClc8ybUu5sWkpbZKp4bwA3F+W8Bo8CZRPCs0JU2HOK0yu4Id4mU6R
pJID46nm92ehGMNsjHS/kyWoZ8rFxc0HuoCbNbHbVhwSTIBs5s60DXk5xz0AiK/2
BlBeeS5mNtxsppfAMP0LAdWLWOeHoN9zCzy9BAvcEl1gZsUxBNdIiX6PjDqzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3OiRUs6gi2+UCP/O20Tdr0WO+tIwHwYDVR0j
BBgwFoAUIIXC4mEFYXvEUC+JEaW+UswGESIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0dpRlpYSmFiVzY0dGZmWm1QcXFQSnpvVXR3RXd6TWVyTFo4WnNIdWJL
THQvMC8yMDg1QzJFMjYxMDU2MTdCQzQ1MDJGODkxMUE1QkU1MkNDMDYxMTIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwODVDMkUyNjEwNTYxN0JD
NDUwMkY4OTExQTVCRTUyQ0MwNjExMjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHaUZaWEphYlc2NHRmZlptUHFxUEp6b1V0d0V3ek1lckxaOFpzSHViS0x0LzAv
MzEzNzMwMmUzODM0MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlQMMA0GCSqGSIb3DQEBCwUAA4IBAQCv/808ceWh
2ROPDFDe/3pXp1YHh+2xbkx/p0F7mytoEYJ3Kmbql0ZQPGVPfkN6YPM+ASdl51lx
2MXE57HFsGMcFLvynTABm4XDVPH1Rvtrpe4so8EzGicSak7towOS9rDyTCtL2TKW
AymlBnUS78IxXPa1iHEnHpq34xOaCYO7kiq82K1VFr12dyVkhLGL+UMclxkNdSKt
qaHlBlgysA0CT5OBuuhGUX1TpAnlw3M21kaorDHCEjpIzG0cFQA2w6wvjjzpUJ2w
l7RrMWsPEE0pcWYsAviVyn8fKvdKVF/l/anKkGOBolLXeS2yOpDyMrC8ZetVA/h6
1io4gBaE6+47
-----END CERTIFICATE-----
Generated at Sat Jul 12 21:43:46 2025 by rpki-client