Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3232203d3e20323632343630.roa
File: 3137372e35332e37322e302f32322d3232203d3e20323632343630.roa (raw, json)
Hash identifier: VuLvhdpTVMFLtQJitVh7RFoV5knHC3FlRHdXFRGBop0=
Subject key identifier: 42:FF:93:70:B6:41:DF:2F:7E:1B:E2:AD:38:08:C9:43:F1:91:C7:CC
Certificate issuer: /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial: 5F768EF019C386CA4B218AA81411597EA6FA178F
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3232203d3e20323632343630.roa
Signing time: Thu 26 Jun 2025 14:37:48 +0000
ROA not before: Thu 26 Jun 2025 14:32:48 +0000
ROA not after: Thu 25 Jun 2026 14:37:48 +0000
asID: 262460
IP address blocks: 177.53.72.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:76:8e:f0:19:c3:86:ca:4b:21:8a:a8:14:11:59:7e:a6:fa:17:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Validity
Not Before: Jun 26 14:32:48 2025 GMT
Not After : Jun 25 14:37:48 2026 GMT
Subject: CN=42FF9370B641DF2F7E1BE2AD3808C943F191C7CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:f0:35:72:82:d8:47:2f:81:b4:75:91:85:
9e:93:d1:89:ed:12:f0:22:f4:87:ef:be:91:5a:aa:
c7:a2:8e:f5:bd:37:ef:0e:85:a3:95:31:61:26:42:
81:01:61:46:f0:cf:c8:52:a1:b1:a8:73:96:7c:0c:
e9:f0:a6:fc:56:73:74:ed:f8:26:96:90:43:e5:99:
e2:29:15:c1:7b:83:10:c0:82:ac:7d:f0:a2:8d:35:
ac:69:d1:98:a2:ca:12:66:ec:d5:a0:38:67:a7:9c:
d3:ce:df:35:66:b2:a7:7c:c9:c6:91:c4:99:da:71:
19:b0:8f:66:48:45:b1:aa:e7:4a:b0:0a:d4:6b:a8:
68:91:ae:90:30:a3:e0:87:fe:2b:fa:c8:d2:93:86:
2b:36:8b:88:30:e5:0a:10:83:a6:a7:76:35:ea:c3:
67:e8:4b:e0:d7:21:81:ed:dc:bb:47:18:ec:f0:97:
63:10:97:dc:7b:67:fd:0b:d6:5f:ea:6f:40:fa:2b:
ef:bc:8a:bd:d3:49:d6:6a:fc:62:b9:47:ef:74:79:
5d:df:5c:9e:bb:77:74:fa:d4:e3:ab:81:c1:cb:75:
f5:aa:dd:99:78:49:99:1c:a1:7c:1f:02:b2:e9:64:
6d:e7:fe:11:0c:c5:17:19:45:a9:5f:84:cb:67:f0:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FF:93:70:B6:41:DF:2F:7E:1B:E2:AD:38:08:C9:43:F1:91:C7:CC
X509v3 Authority Key Identifier:
keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3137372e35332e37322e302f32322d3232203d3e20323632343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.53.72.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:8a:3b:9f:08:42:3b:b0:7f:47:80:be:14:22:4d:89:af:7b:
4c:a0:35:88:64:17:ea:32:3c:0f:94:3f:e8:2f:7e:bc:cd:28:
01:53:e5:3e:33:27:1e:1f:81:f4:13:38:53:51:f0:34:8a:54:
e6:c1:e5:f5:36:dd:39:5c:34:f7:34:ca:49:fb:76:09:99:49:
66:f1:f2:4c:8d:d8:44:3a:03:71:b3:92:9b:6a:14:31:6c:76:
b3:35:04:7e:93:d7:15:c7:2e:fd:54:4b:40:28:2f:d6:56:98:
5d:6e:04:e8:d8:fc:84:d0:54:9c:a1:0b:3d:93:3b:04:b0:04:
33:ba:81:fc:3c:27:21:97:ed:d7:97:34:56:09:c1:70:b0:fa:
c3:50:2d:1f:7e:2c:c2:60:cc:a0:b1:d1:63:c1:57:83:c3:c0:
d8:1a:44:9c:1f:77:a9:0c:ec:db:fb:12:7e:c1:3e:99:4b:27:
43:64:d3:fd:bb:6b:e4:72:6b:f5:c4:6a:98:0e:1c:b3:6f:95:
ea:63:cb:0f:e9:33:0d:bd:a0:c4:26:2a:66:82:88:96:5d:a0:
5b:3f:54:2e:c8:2f:be:be:5e:01:bf:3c:f6:af:81:9e:b5:41:
62:12:67:af:20:64:d0:d1:c0:dd:f3:91:fa:61:6d:fc:55:01:
e1:4b:6e:13
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX3aO8BnDhspLIYqoFBFZfqb6F48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY5MjY0QkVENDhBMkM1OUFCOTUwQjRBRjkyRjlERkRF
MjcyRjg2NDAeFw0yNTA2MjYxNDMyNDhaFw0yNjA2MjUxNDM3NDhaMDMxMTAvBgNV
BAMTKDQyRkY5MzcwQjY0MURGMkY3RTFCRTJBRDM4MDhDOTQzRjE5MUM3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjfA1coLYRy+BtHWRhZ6T0Ynt
EvAi9IfvvpFaqseijvW9N+8OhaOVMWEmQoEBYUbwz8hSobGoc5Z8DOnwpvxWc3Tt
+CaWkEPlmeIpFcF7gxDAgqx98KKNNaxp0ZiiyhJm7NWgOGennNPO3zVmsqd8ycaR
xJnacRmwj2ZIRbGq50qwCtRrqGiRrpAwo+CH/iv6yNKThis2i4gw5QoQg6andjXq
w2foS+DXIYHt3LtHGOzwl2MQl9x7Z/0L1l/qb0D6K++8ir3TSdZq/GK5R+90eV3f
XJ67d3T61OOrgcHLdfWq3Zl4SZkcoXwfArLpZG3n/hEMxRcZRalfhMtn8BN3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQv+TcLZB3y9+G+KtOAjJQ/GRx8wwHwYDVR0j
BBgwFoAUn5JkvtSKLFmrlQtK+S+d/eJy+GQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2N0R1V3MW5hWnhROXc4RERVcVlQZWhCWUZpMndIdDlqTGJ0R0tGaTRU
Wk4vMC85RjkyNjRCRUQ0OEEyQzU5QUI5NTBCNEFGOTJGOURGREUyNzJGODY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGOTI2NEJFRDQ4QTJDNTlB
Qjk1MEI0QUY5MkY5REZERTI3MkY4NjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djdEdVdzFuYVp4UTl3OEREVXFZUGVoQllGaTJ3SHQ5akxidEdLRmk0VFpOLzAv
MzEzNzM3MmUzNTMzMmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsTVIMA0GCSqGSIb3DQEBCwUAA4IBAQCqijufCEI7
sH9HgL4UIk2Jr3tMoDWIZBfqMjwPlD/oL368zSgBU+U+MyceH4H0EzhTUfA0ilTm
weX1Nt05XDT3NMpJ+3YJmUlm8fJMjdhEOgNxs5KbahQxbHazNQR+k9cVxy79VEtA
KC/WVphdbgTo2PyE0FScoQs9kzsEsAQzuoH8PCchl+3XlzRWCcFwsPrDUC0ffizC
YMygsdFjwVeDw8DYGkScH3epDOzb+xJ+wT6ZSydDZNP9u2vkcmv1xGqYDhyzb5Xq
Y8sP6TMNvaDEJipmgoiWXaBbP1QuyC++vl4Bvzz2r4GetUFiEmevIGTQ0cDd85H6
YW38VQHhS24T
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:34:57 2025 by rpki-client