Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
File: 3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier: 8JEbBp/4k/zUURyh1o6yVz5UfXeLQPTet9D3JNYt+zk=
Subject key identifier: D5:01:4E:CB:BB:A8:B1:38:24:5A:30:05:6F:35:99:E4:0D:17:16:4E
Certificate issuer: /CN=0CA968287B9271A9974F582D45CD23848B33CFFD
Certificate serial: 47F5A7BA7FB5A0B33718D3193FF5A1657F957EE9
Authority key identifier: 0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
Signing time: Fri 13 Jun 2025 03:14:35 +0000
ROA not before: Fri 13 Jun 2025 03:09:35 +0000
ROA not after: Fri 12 Jun 2026 03:14:35 +0000
asID: 263584
IP address blocks: 177.129.143.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f5:a7:ba:7f:b5:a0:b3:37:18:d3:19:3f:f5:a1:65:7f:95:7e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA968287B9271A9974F582D45CD23848B33CFFD
Validity
Not Before: Jun 13 03:09:35 2025 GMT
Not After : Jun 12 03:14:35 2026 GMT
Subject: CN=D5014ECBBBA8B138245A30056F3599E40D17164E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:1b:87:41:94:fc:81:81:b8:bc:2f:7c:9d:
4b:ca:02:95:e1:9f:bc:62:64:9e:24:73:d7:66:a7:
ad:2f:35:86:e3:ba:0b:ee:a5:fe:8f:30:f0:56:b1:
5b:17:c1:45:58:7c:e5:b4:52:02:86:30:62:39:6f:
d9:5a:2b:7d:28:6e:e3:77:bd:03:ea:85:a3:bb:54:
1d:35:7e:4c:b4:a7:d9:c8:60:81:8c:dc:2b:d7:42:
88:3b:f5:b0:c5:b6:21:d2:99:f7:a3:4d:2d:38:39:
f2:1c:2a:1a:d5:77:4e:92:6f:3b:5f:1c:6a:9f:fd:
fe:a1:ba:2f:80:ae:54:37:ea:af:a3:3d:15:6e:e0:
0a:0b:1d:1d:6e:64:93:2a:86:96:bb:90:8a:2a:0e:
c2:84:02:87:04:85:82:4a:df:ee:57:ad:ca:cf:68:
8c:ac:2a:3d:88:cf:77:a6:c8:bb:5b:b3:47:c4:fb:
f3:b3:bb:7d:47:5f:62:e0:34:e2:b2:cd:75:fd:96:
38:fa:f5:2d:84:86:f8:15:48:03:b2:ba:4e:78:de:
b4:6a:32:4b:5d:fe:de:d4:4e:80:38:57:83:d0:38:
78:36:39:92:96:29:bc:19:d4:d2:09:4e:fd:6a:e4:
0e:c6:28:7d:1e:d0:d8:1e:b4:75:eb:52:0b:29:62:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:01:4E:CB:BB:A8:B1:38:24:5A:30:05:6F:35:99:E4:0D:17:16:4E
X509v3 Authority Key Identifier:
keyid:0C:A9:68:28:7B:92:71:A9:97:4F:58:2D:45:CD:23:84:8B:33:CF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/0CA968287B9271A9974F582D45CD23848B33CFFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA968287B9271A9974F582D45CD23848B33CFFD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.143.0/24
Signature Algorithm: sha256WithRSAEncryption
36:61:07:18:02:be:d3:af:13:3b:6e:7e:9a:6c:a7:36:a9:05:
ef:ec:85:18:ff:d1:79:d9:c4:6d:d1:96:e1:68:63:76:d4:ee:
0c:19:8a:96:b4:53:26:4d:c8:9d:60:7f:d0:36:28:1c:ef:99:
d0:30:73:49:6b:fb:58:74:2b:a6:7c:50:9a:a1:11:51:bf:1c:
60:a7:c8:0f:20:72:34:c7:f1:52:f2:06:b5:73:ee:e9:0c:35:
f0:a8:78:10:62:c5:4a:8d:45:3a:53:70:72:48:1a:41:7a:e3:
09:28:79:ce:77:48:a4:af:c1:9d:5b:3a:48:e9:0d:a6:33:cc:
9d:1f:57:0a:4e:d4:2a:ed:b5:ed:ee:22:55:fa:32:0f:78:a6:
59:1d:30:9e:56:e8:68:b6:02:61:51:24:9c:75:26:30:a7:75:
03:0c:be:5d:dc:a0:81:5e:95:38:4c:7e:5c:98:50:7a:64:1d:
32:33:f0:ed:40:8c:55:55:01:29:43:1d:5c:11:96:04:59:6e:
6e:4b:1b:18:e8:3d:f9:0a:c6:20:6b:70:8e:fa:2f:dc:f2:ab:
8b:5c:ac:6d:3e:d3:a2:f3:8f:b3:70:c2:79:0e:e6:73:92:95:
6e:a8:8a:08:33:89:53:63:1c:50:06:0c:86:4d:d4:0f:90:ef:
f6:35:02:f0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR/Wnun+1oLM3GNMZP/WhZX+VfukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENBOTY4Mjg3QjkyNzFBOTk3NEY1ODJENDVDRDIzODQ4
QjMzQ0ZGRDAeFw0yNTA2MTMwMzA5MzVaFw0yNjA2MTIwMzE0MzVaMDMxMTAvBgNV
BAMTKEQ1MDE0RUNCQkJBOEIxMzgyNDVBMzAwNTZGMzU5OUU0MEQxNzE2NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIIBuHQZT8gYG4vC98nUvKApXh
n7xiZJ4kc9dmp60vNYbjugvupf6PMPBWsVsXwUVYfOW0UgKGMGI5b9laK30obuN3
vQPqhaO7VB01fky0p9nIYIGM3CvXQog79bDFtiHSmfejTS04OfIcKhrVd06Sbztf
HGqf/f6hui+ArlQ36q+jPRVu4AoLHR1uZJMqhpa7kIoqDsKEAocEhYJK3+5XrcrP
aIysKj2Iz3emyLtbs0fE+/Ozu31HX2LgNOKyzXX9ljj69S2EhvgVSAOyuk543rRq
Mktd/t7UToA4V4PQOHg2OZKWKbwZ1NIJTv1q5A7GKH0e0NgetHXrUgspYhMlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1QFOy7uosTgkWjAFbzWZ5A0XFk4wHwYDVR0j
BBgwFoAUDKloKHuScamXT1gtRc0jhIszz/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC8wQ0E5NjgyODdCOTI3MUE5OTc0RjU4MkQ0NUNEMjM4NDhCMzNDRkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDQTk2ODI4N0I5MjcxQTk5
NzRGNTgyRDQ1Q0QyMzg0OEIzM0NGRkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBjzANBgkqhkiG9w0BAQsFAAOCAQEANmEH
GAK+068TO25+mmynNqkF7+yFGP/RednEbdGW4WhjdtTuDBmKlrRTJk3InWB/0DYo
HO+Z0DBzSWv7WHQrpnxQmqERUb8cYKfIDyByNMfxUvIGtXPu6Qw18Kh4EGLFSo1F
OlNwckgaQXrjCSh5zndIpK/BnVs6SOkNpjPMnR9XCk7UKu217e4iVfoyD3imWR0w
nlboaLYCYVEknHUmMKd1Awy+XdyggV6VOEx+XJhQemQdMjPw7UCMVVUBKUMdXBGW
BFlubksbGOg9+QrGIGtwjvov3PKri1ysbT7TovOPs3DCeQ7mc5KVbqiKCDOJU2Mc
UAYMhk3UD5Dv9jUC8A==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:43:46 2025 by rpki-client