Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
File: 3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa (raw, json)
Hash identifier: isZsv5SLy6qI3HVl3VZ53/pr4AHR1jWz6l8eoST0O40=
Subject key identifier: 36:CF:39:97:51:3E:0B:BB:A3:F0:47:5F:AF:2E:86:D4:55:66:FA:32
Certificate issuer: /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial: 3C57ABAABB476779380AC305D50C008F609AADC9
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access: rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
Signing time: Mon 07 Apr 2025 18:12:35 +0000
ROA not before: Mon 07 Apr 2025 18:07:35 +0000
ROA not after: Mon 06 Apr 2026 18:12:35 +0000
asID: 262391
IP address blocks: 177.131.112.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:57:ab:aa:bb:47:67:79:38:0a:c3:05:d5:0c:00:8f:60:9a:ad:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Validity
Not Before: Apr 7 18:07:35 2025 GMT
Not After : Apr 6 18:12:35 2026 GMT
Subject: CN=36CF3997513E0BBBA3F0475FAF2E86D45566FA32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:e8:6f:5c:d3:32:0a:71:fa:60:30:2b:24:
f0:be:7a:d0:5d:25:03:50:2b:8f:6a:49:47:3d:a9:
c7:04:b8:12:b5:6a:bf:dd:ed:85:f6:10:29:07:81:
05:9b:78:d6:12:06:bc:d6:4a:f5:a1:3f:ea:93:07:
39:63:4a:c1:5f:d8:6d:89:bc:fc:35:2f:d2:54:03:
f9:5e:24:ef:5c:92:5e:ee:a0:44:30:18:a4:b2:c3:
b5:90:38:4e:ee:de:23:6e:09:3e:e2:a2:3b:a5:3d:
1e:20:bf:1d:18:ac:eb:c3:74:35:0e:89:55:65:8b:
40:6a:45:4d:49:ec:a2:d0:48:43:f3:0f:5a:3c:6a:
77:e1:5e:1f:22:48:c9:47:b9:a2:df:23:47:d6:aa:
56:93:e4:4b:84:93:5b:83:db:bd:ef:a1:57:84:97:
a4:e2:7a:bd:d1:25:ba:5c:ed:63:17:4e:d4:70:c9:
5f:2a:a8:28:a3:ce:99:df:3c:26:e7:32:e2:64:88:
5e:29:59:ea:3b:05:b9:c8:17:9a:35:f1:9f:fd:20:
3f:e6:40:5f:57:1a:b7:61:07:8e:4a:dc:a1:a5:77:
b8:9a:4f:0e:12:4e:24:72:fa:9d:09:7f:b9:53:2f:
25:7b:c6:ae:04:a4:64:4f:b3:97:28:7f:39:14:17:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:39:97:51:3E:0B:BB:A3:F0:47:5F:AF:2E:86:D4:55:66:FA:32
X509v3 Authority Key Identifier:
keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.131.112.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:72:b3:c6:dd:f3:9c:f8:a4:be:06:c8:5f:d3:59:b5:d0:05:
b1:d4:33:e8:df:11:f3:30:13:7c:44:f0:53:03:7d:30:5b:ff:
61:5c:31:96:c7:a7:06:e1:13:14:df:71:78:6f:e2:88:8a:58:
3d:ba:1c:91:4c:00:b1:85:f4:d1:5a:c4:e2:4f:e1:51:20:d9:
36:be:ba:0d:8c:19:b6:f2:16:8d:12:0f:97:fc:6c:59:b2:06:
fb:8d:fa:15:63:56:33:02:c5:97:e8:a4:c2:df:63:d9:81:0b:
59:ee:d2:0e:5e:82:7d:06:69:d0:c1:6e:5e:06:d8:02:b0:87:
c6:ba:b8:46:e4:2b:c3:78:22:f7:82:17:b0:47:9b:74:ca:7a:
ae:5d:9a:75:70:1d:eb:19:f1:3d:8e:b8:4f:ec:45:af:5e:8c:
de:06:c3:0f:a2:92:e5:e3:df:21:04:01:cf:04:84:13:ce:4c:
54:4b:77:ce:75:71:c8:0a:4e:53:fe:44:8c:61:bb:36:63:50:
73:94:12:d7:33:28:60:9b:b3:ec:b8:b5:8a:fc:2f:d7:73:41:
7e:03:90:3e:96:a8:45:f9:70:e2:dc:d3:93:b5:3c:bd:a9:05:
34:a4:74:49:99:56:f6:83:1f:bc:6a:28:5a:61:69:40:7f:8c:
56:c8:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:06:23 2025 by rpki-client