Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: zuPAlgozA3y/dOq2n4YhKhvhkfwyZU5kYSvhmgGa9Nk=
Subject key identifier: DB:72:C1:A4:CF:EA:8D:E4:FA:43:4F:9A:4C:FB:77:05:D1:06:11:A3
Certificate issuer: /CN=0CA968287B9271A9974F582D45CD23848B33CFFD
Certificate serial: 0A88591574F7A4E44DEDD225DC9D4B57F4D61D09
Authority key identifier: 0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa
Signing time: Fri 13 Jun 2025 03:14:18 +0000
ROA not before: Fri 13 Jun 2025 03:09:18 +0000
ROA not after: Fri 12 Jun 2026 03:14:18 +0000
asID: 263584
IP address blocks: 177.129.141.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:88:59:15:74:f7:a4:e4:4d:ed:d2:25:dc:9d:4b:57:f4:d6:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA968287B9271A9974F582D45CD23848B33CFFD
Validity
Not Before: Jun 13 03:09:18 2025 GMT
Not After : Jun 12 03:14:18 2026 GMT
Subject: CN=DB72C1A4CFEA8DE4FA434F9A4CFB7705D10611A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:5e:dd:ed:8e:d4:c4:0a:01:98:27:72:bd:
9b:9d:ce:9e:f7:d7:26:26:74:db:4c:ec:4e:c8:cb:
46:da:6a:be:56:0a:9b:2d:9d:ff:07:a6:8c:a5:41:
68:59:85:04:91:6b:13:e4:a8:89:c3:bf:5d:46:90:
bb:eb:b0:d5:71:d2:3b:9c:5c:f4:a8:a2:cc:2e:e6:
01:ab:d0:93:f3:66:ac:39:ab:3a:58:c8:1b:fb:80:
60:cc:08:2e:2e:56:18:1a:f0:1f:3a:66:3a:5a:d3:
ca:6b:86:03:0a:cf:1b:7f:b1:f5:50:ba:7c:72:88:
4c:59:44:3f:99:6c:81:c2:17:6a:dd:ff:fe:9f:c3:
71:27:fa:bb:07:89:6e:7f:ee:11:a3:ee:41:03:ca:
d3:2f:66:34:67:56:1b:08:3e:c7:88:2b:42:e4:d1:
cb:e8:fc:06:ac:eb:0c:a6:97:1e:40:fb:83:c0:00:
dc:30:79:c3:db:f8:db:81:53:55:6c:fa:7a:b4:8e:
3b:04:03:ba:64:ea:f2:09:a3:14:d5:98:51:94:cd:
aa:43:56:8a:ae:1d:ac:33:47:b1:27:23:f4:75:ec:
c0:64:98:ff:ee:dc:13:52:0f:18:fb:23:8a:2c:f2:
40:9c:d8:92:ad:94:29:c3:01:8d:01:9f:7f:bc:f6:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:C1:A4:CF:EA:8D:E4:FA:43:4F:9A:4C:FB:77:05:D1:06:11:A3
X509v3 Authority Key Identifier:
keyid:0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/0CA968287B9271A9974F582D45CD23848B33CFFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:11:3e:71:17:d7:e0:05:40:30:d9:b0:c8:d1:53:0e:4f:55:
69:27:44:71:c7:47:1e:25:56:41:7c:3b:8d:d9:28:a8:bd:c6:
cd:79:5c:0a:05:ce:45:0d:a2:ee:d1:d1:8a:dd:11:43:73:78:
84:ce:7a:81:3d:af:7d:93:85:96:6a:09:75:8d:b8:22:1f:03:
0c:a3:2b:fb:f4:71:8d:1e:3a:95:7e:96:56:88:1e:94:5a:ba:
76:3c:13:82:84:2c:42:87:e8:b1:ac:49:0e:c1:27:0d:7d:4c:
91:73:6a:e3:10:cc:eb:db:80:20:98:66:08:71:f7:18:0c:cb:
35:cd:12:f9:71:c3:56:70:b5:20:86:01:72:ca:bd:46:e8:9d:
f7:e8:82:b7:52:d9:9a:3a:05:e5:8f:35:84:d5:88:37:ff:bd:
07:73:8c:e9:07:ee:cd:ca:99:ea:cb:1e:1e:99:02:7d:c6:79:
f1:3b:71:d9:14:13:b4:c2:c5:56:6d:13:ce:15:b9:08:73:4b:
9a:56:f9:b4:00:8c:7e:61:1a:15:b3:40:93:48:75:c7:7b:5d:
05:1c:26:54:9b:d9:da:f8:6f:38:83:94:06:85:f5:f9:f6:70:
f3:6e:4a:e4:f5:4d:f1:88:7e:3e:d3:8d:36:3b:a1:5b:29:2c:
1e:a5:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:37:21 2025 by rpki-client