Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: bv75j3vuTzz73t+RatPWKeQH/FM7vCQzPpvBPhTNbDY=
Subject key identifier: B7:6B:30:C8:9A:62:F9:91:38:8C:FA:F8:50:58:12:D4:6D:CC:D8:CF
Certificate issuer: /CN=0CA968287B9271A9974F582D45CD23848B33CFFD
Certificate serial: 2F2A897F78B0E5187D0E64F437783771BE03C71A
Authority key identifier: 0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa
Signing time: Fri 13 Jun 2025 03:14:00 +0000
ROA not before: Fri 13 Jun 2025 03:09:00 +0000
ROA not after: Fri 12 Jun 2026 03:14:00 +0000
asID: 263584
IP address blocks: 177.129.137.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2a:89:7f:78:b0:e5:18:7d:0e:64:f4:37:78:37:71:be:03:c7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA968287B9271A9974F582D45CD23848B33CFFD
Validity
Not Before: Jun 13 03:09:00 2025 GMT
Not After : Jun 12 03:14:00 2026 GMT
Subject: CN=B76B30C89A62F991388CFAF8505812D46DCCD8CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:2d:71:7f:15:37:8f:5b:f8:52:2f:3b:94:
64:75:92:ec:0f:96:b2:25:24:62:6b:8b:06:ba:ce:
4f:48:4e:55:03:62:d7:7e:f5:13:55:01:11:d2:2e:
e7:f8:da:ec:8c:ba:3d:89:a9:02:72:18:58:17:5a:
63:62:19:16:9f:7d:b4:10:e9:ef:df:da:ab:8e:ce:
95:f3:8c:bd:9c:d4:d4:d0:05:76:d2:5e:f2:5f:a6:
28:93:53:d3:68:67:c2:37:4a:cd:6c:7f:19:6f:cf:
a4:62:89:16:5c:fa:81:7f:64:43:0e:3d:5c:09:50:
15:d5:ba:4c:d9:18:d0:0c:d2:6b:42:50:d3:ec:76:
94:e5:b2:90:ae:64:65:02:03:6b:f1:79:36:3c:7e:
c4:9a:ed:d2:d1:a8:f0:f9:ba:09:92:6d:6b:0d:0d:
e0:93:17:bc:7f:3f:23:1d:cb:bf:b1:cf:7c:36:7b:
f6:26:04:7b:e0:8e:e0:61:53:2d:f8:fe:f7:2e:d9:
8e:e8:d3:db:a4:4d:83:14:2e:cb:78:9b:85:ad:9d:
69:c6:e0:fc:3c:04:c8:71:8b:48:98:68:a4:eb:f7:
36:d6:cb:a7:11:2d:95:f9:35:d6:88:3e:a6:ac:10:
2b:1e:76:4f:e0:27:4f:55:1f:6e:5b:9b:d9:07:5c:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6B:30:C8:9A:62:F9:91:38:8C:FA:F8:50:58:12:D4:6D:CC:D8:CF
X509v3 Authority Key Identifier:
keyid:0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/0CA968287B9271A9974F582D45CD23848B33CFFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.137.0/24
Signature Algorithm: sha256WithRSAEncryption
71:43:9d:32:72:2f:3a:06:61:3e:40:8d:73:fb:ef:45:54:f0:
a9:4a:8d:6b:1e:8e:4c:3c:ef:bd:e3:17:02:ed:be:bf:76:6f:
f2:7f:ae:3d:5c:c4:15:8e:da:d8:fe:df:80:16:32:af:ba:aa:
13:86:39:4d:1a:a0:e6:17:7d:d2:3e:41:0a:02:20:90:f7:5b:
7b:e6:df:ee:b1:4c:75:71:ea:7f:05:85:84:33:ad:b3:b6:f9:
3e:9c:97:d0:0a:a0:80:4b:74:f0:e7:09:e9:45:8a:bb:af:f1:
4c:1c:cf:28:28:47:f9:34:d2:4b:e8:88:74:12:1f:50:3b:84:
b3:9e:23:9e:16:90:a7:0b:5a:a1:41:df:cc:9a:60:fe:ca:27:
89:bb:36:63:b6:38:6e:cf:80:ae:19:86:de:40:41:6b:fa:75:
56:61:e1:b7:18:4e:a6:68:d6:7a:5a:41:8a:62:25:c2:e8:74:
cc:ba:b3:42:bb:42:a1:fd:c1:f2:44:36:8c:8c:d7:6d:8b:eb:
28:97:0b:d0:bf:d7:96:2a:14:fc:ae:3e:b6:21:34:8d:c7:0e:
b5:ae:bf:80:88:47:9b:a4:63:25:fb:6d:56:d2:c9:e1:1a:62:
e0:a5:46:85:8c:f9:47:16:ec:65:ae:40:a0:bb:34:92:77:15:
64:2e:a2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:15:43 2025 by rpki-client