Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: 07RvHju/Zrd2EPsSp7/QErBzxKvGC+OQzNho01XD5J8=
Subject key identifier: 30:30:AC:58:C2:57:13:36:83:60:F5:FA:6C:3B:95:45:40:C8:C6:8D
Certificate issuer: /CN=0CA968287B9271A9974F582D45CD23848B33CFFD
Certificate serial: 442BEF672405A12CFF1564B40905E168B813DA8D
Authority key identifier: 0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
Signing time: Fri 13 Jun 2025 03:14:05 +0000
ROA not before: Fri 13 Jun 2025 03:09:05 +0000
ROA not after: Fri 12 Jun 2026 03:14:05 +0000
asID: 263584
IP address blocks: 177.129.138.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2b:ef:67:24:05:a1:2c:ff:15:64:b4:09:05:e1:68:b8:13:da:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA968287B9271A9974F582D45CD23848B33CFFD
Validity
Not Before: Jun 13 03:09:05 2025 GMT
Not After : Jun 12 03:14:05 2026 GMT
Subject: CN=3030AC58C25713368360F5FA6C3B954540C8C68D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:08:c5:07:f0:3a:0f:f6:cf:1b:d6:9e:00:
f2:b9:e2:aa:d0:77:b4:71:a2:2f:6b:1e:50:04:9f:
fa:98:cb:e2:e3:29:4c:bb:84:66:90:83:d8:13:aa:
f8:ce:d1:4c:2d:6f:94:0a:da:91:65:33:70:3f:39:
06:f9:62:b9:8f:e6:c7:94:20:20:6c:22:3d:c7:e7:
cb:ad:5b:ef:cb:33:3d:a3:cd:af:46:16:64:d7:03:
1c:1f:17:1a:46:fc:46:c7:04:22:8f:44:52:8c:c2:
17:4e:2c:33:fd:87:4c:53:e3:49:62:b6:69:e1:8c:
67:52:5a:45:7c:4a:2c:28:ed:60:7d:c7:3b:a8:99:
3e:1e:58:83:b1:81:2c:07:29:0d:be:a4:11:01:25:
35:23:be:61:fa:67:a7:ca:0d:5e:92:b0:1f:dc:3f:
a4:2a:5e:e5:7d:21:8e:be:6b:20:26:48:4b:11:f1:
e9:60:f2:13:c1:bb:df:85:14:8e:68:b7:d4:f7:f9:
0a:79:a9:9e:7e:34:07:61:d0:18:73:80:ca:7f:8a:
1c:9f:97:18:aa:b6:69:4e:f4:5b:71:f3:a7:2a:d6:
1a:74:06:0e:64:a0:13:f3:aa:ff:4d:1a:95:94:5e:
ea:d0:ab:10:4a:0c:d2:ac:9b:69:a0:f6:ed:a2:e0:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:30:AC:58:C2:57:13:36:83:60:F5:FA:6C:3B:95:45:40:C8:C6:8D
X509v3 Authority Key Identifier:
keyid:0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/0CA968287B9271A9974F582D45CD23848B33CFFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.138.0/24
Signature Algorithm: sha256WithRSAEncryption
76:30:8e:f9:95:15:74:22:8d:de:c2:c3:30:99:16:20:47:81:
1f:ef:01:dd:96:05:32:62:de:03:28:b7:9a:47:cf:b5:94:0a:
3a:7b:48:eb:68:9a:e2:5c:13:ae:54:3b:48:c3:17:66:df:6d:
8b:e1:4d:5c:06:43:55:40:a3:9d:ab:f2:2c:40:37:7e:bd:e7:
44:f8:4b:9a:55:35:8e:d1:55:6d:60:f2:21:d9:50:92:76:f5:
0e:9d:aa:55:7b:aa:f8:8f:99:05:58:05:fb:bf:be:e1:40:f7:
65:e7:68:f9:5c:ac:2e:b6:b2:7a:58:2a:15:c9:01:e9:b4:1a:
f9:6b:e7:6b:1d:56:0f:6e:bb:ed:90:1c:20:34:a9:a2:e7:68:
7c:55:38:e6:ad:fa:88:79:99:cf:fe:96:72:e8:b1:8c:78:70:
ac:f9:29:84:e4:c2:b6:b2:e1:f2:4e:24:91:50:70:02:b9:0a:
30:34:67:8a:b5:13:64:50:90:b3:67:5f:79:62:e6:79:bf:b6:
f4:86:48:d7:2a:2f:bc:13:99:4b:ac:f4:13:05:0a:94:93:18:
44:58:a6:db:cd:e7:0a:af:0d:cb:72:ea:56:93:fc:e0:f3:3a:
83:b4:59:6e:e3:05:e8:0a:1e:fe:d9:14:d4:ce:df:fe:2f:ff:
bd:94:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:30:07 2025 by rpki-client