Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa
File: 3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier: akSCKp8SsUrYcF+qebEjEWPIh4lrttT3OqJxyv5vkaM=
Subject key identifier: F7:7D:5A:DF:B8:A6:99:F7:DE:DA:11:86:EF:E9:51:51:C4:06:C1:2D
Certificate issuer: /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial: 0C761D2310DC58B58352F8487248C3D9DEFBDE41
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa
Signing time: Fri 07 Feb 2025 06:07:49 +0000
ROA not before: Fri 07 Feb 2025 06:02:49 +0000
ROA not after: Fri 06 Feb 2026 06:07:49 +0000
asID: 266178
IP address blocks: 138.97.147.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:76:1d:23:10:dc:58:b5:83:52:f8:48:72:48:c3:d9:de:fb:de:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Validity
Not Before: Feb 7 06:02:49 2025 GMT
Not After : Feb 6 06:07:49 2026 GMT
Subject: CN=F77D5ADFB8A699F7DEDA1186EFE95151C406C12D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:1d:8d:d8:2e:e8:c5:6c:99:86:6a:0a:f8:
0a:53:b3:54:56:84:56:8c:34:2f:f3:15:3c:9e:93:
20:01:a3:8b:92:e3:f6:04:7c:ac:79:e8:26:95:28:
f6:c6:76:ee:13:30:c7:db:69:dc:15:bc:d1:f2:a8:
ac:86:3a:09:0d:ed:37:48:6f:7a:b2:77:e9:c8:09:
a2:81:37:59:af:2b:5c:b9:e1:2f:f0:db:4f:7e:2c:
f2:b2:dc:40:ef:3d:53:d5:e2:c5:26:02:38:d8:f9:
00:4d:16:23:45:ca:27:09:4b:7a:3a:9a:cf:c2:2e:
70:7c:9e:1d:a0:49:40:d6:7a:13:70:8b:93:4b:57:
07:d6:67:0c:da:f1:97:2d:98:1d:bc:10:be:bf:22:
26:99:74:a1:75:8a:d7:f3:db:78:56:5f:c1:1d:f6:
95:d4:a5:bb:16:d4:b1:ae:47:e5:9a:b2:cf:32:98:
8c:2f:73:ed:af:30:85:dc:73:64:8a:b7:73:09:7a:
15:e6:30:d0:f2:fd:14:0c:c6:bd:83:e7:b2:3a:63:
b3:ac:01:7c:b6:48:af:bf:bc:27:76:3f:50:5b:6e:
ba:aa:01:38:2b:a8:d6:a1:90:b2:58:c8:0d:f9:60:
f1:31:39:4c:72:a4:1f:b9:31:be:f7:d6:73:e3:a4:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7D:5A:DF:B8:A6:99:F7:DE:DA:11:86:EF:E9:51:51:C4:06:C1:2D
X509v3 Authority Key Identifier:
keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.147.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:07:37:af:30:3e:51:80:11:10:cc:bf:96:3f:e9:06:c4:2a:
9a:9f:9f:31:54:7c:0e:ec:a2:1f:74:75:56:52:35:c6:e1:77:
e8:3a:ca:7d:a9:57:35:3c:0f:e9:1f:5d:06:4a:be:e2:e8:75:
0e:45:52:d5:7c:4c:a1:60:cf:7e:6d:29:e0:de:6a:38:7a:6d:
2b:95:a6:12:23:9f:29:70:40:35:aa:c7:8f:36:92:62:b4:ba:
fc:7a:56:c5:61:f0:47:a4:b1:06:79:bb:10:6a:6e:c9:be:ca:
7a:f5:a2:d3:07:ba:f7:50:a5:f0:01:2e:6d:89:06:9e:18:83:
4e:0c:de:f1:76:fc:9a:c8:55:ba:f1:94:36:91:3f:ea:32:e7:
55:a2:8e:a2:e4:c0:90:91:ed:c0:69:5c:87:0b:0f:16:e1:13:
b0:71:97:91:21:85:94:80:69:4b:e0:6c:40:bf:e5:da:8a:8a:
67:27:d1:44:5a:6f:d4:8c:dd:f0:17:61:db:3a:aa:0b:6b:25:
d7:73:39:31:e2:2a:a3:a5:ac:66:66:9d:22:73:31:73:12:b1:
97:c6:09:83:3f:69:c4:18:0a:ed:42:5e:bf:38:bf:a9:82:c9:
ce:c5:57:88:ba:88:81:ef:46:1a:5a:51:8c:9b:3d:38:e6:37:
e6:fd:d7:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDHYdIxDcWLWDUvhIckjD2d773kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJCMjNGQjBGMzhGN0NERTE3ODUyREM2MUJEMjM0RENF
QkMzQkI5MDAeFw0yNTAyMDcwNjAyNDlaFw0yNjAyMDYwNjA3NDlaMDMxMTAvBgNV
BAMTKEY3N0Q1QURGQjhBNjk5RjdERURBMTE4NkVGRTk1MTUxQzQwNkMxMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVx2N2C7oxWyZhmoK+ApTs1RW
hFaMNC/zFTyekyABo4uS4/YEfKx56CaVKPbGdu4TMMfbadwVvNHyqKyGOgkN7TdI
b3qyd+nICaKBN1mvK1y54S/w209+LPKy3EDvPVPV4sUmAjjY+QBNFiNFyicJS3o6
ms/CLnB8nh2gSUDWehNwi5NLVwfWZwza8ZctmB28EL6/IiaZdKF1itfz23hWX8Ed
9pXUpbsW1LGuR+Wass8ymIwvc+2vMIXcc2SKt3MJehXmMNDy/RQMxr2D57I6Y7Os
AXy2SK+/vCd2P1BbbrqqATgrqNahkLJYyA35YPExOUxypB+5Mb731nPjpEWvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU931a37immffe2hGG7+lRUcQGwS0wHwYDVR0j
BBgwFoAUi7I/sPOPfN4XhS3GG9I03OvDu5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFFQ2VOYTZKRnJRTk55U1pndVNpODJTejExNGdBNWpSeFFZTTJQb3Ix
cVEvMS84QkIyM0ZCMEYzOEY3Q0RFMTc4NTJEQzYxQkQyMzREQ0VCQzNCQjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQjIzRkIwRjM4RjdDREUx
Nzg1MkRDNjFCRDIzNERDRUJDM0JCOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxRUNlTmE2SkZyUU5OeVNaZ3VTaTgyU3oxMTRnQTVqUnhRWU0yUG9yMXFRLzEv
MzEzMzM4MmUzOTM3MmUzMTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYZMwDQYJKoZIhvcNAQELBQADggEBAKcHN68w
PlGAERDMv5Y/6QbEKpqfnzFUfA7soh90dVZSNcbhd+g6yn2pVzU8D+kfXQZKvuLo
dQ5FUtV8TKFgz35tKeDeajh6bSuVphIjnylwQDWqx482kmK0uvx6VsVh8EeksQZ5
uxBqbsm+ynr1otMHuvdQpfABLm2JBp4Yg04M3vF2/JrIVbrxlDaRP+oy51WijqLk
wJCR7cBpXIcLDxbhE7Bxl5EhhZSAaUvgbEC/5dqKimcn0URab9SM3fAXYds6qgtr
JddzOTHiKqOlrGZmnSJzMXMSsZfGCYM/acQYCu1CXr84v6mCyc7FV4i6iIHvRhpa
UYybPTjmN+b91xk=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:51 2025 by rpki-client