Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa
File: 3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa (raw, json)
Hash identifier: oPlAFKdBOzvHicH7jSWtdL3T35vlcWGOJfLQ2OzOQRo=
Subject key identifier: 58:92:58:3A:48:3C:9A:7F:3F:F9:C3:75:11:F2:35:7D:F8:2F:D0:D2
Certificate issuer: /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
Certificate serial: 097E15F5E4A8E6669C6F7B336DB89A4F51786CE3
Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa
Signing time: Wed 08 Oct 2025 15:54:56 +0000
ROA not before: Wed 08 Oct 2025 15:49:56 +0000
ROA not after: Wed 07 Oct 2026 15:54:56 +0000
asID: 263911
IP address blocks: 138.204.174.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7e:15:f5:e4:a8:e6:66:9c:6f:7b:33:6d:b8:9a:4f:51:78:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
Validity
Not Before: Oct 8 15:49:56 2025 GMT
Not After : Oct 7 15:54:56 2026 GMT
Subject: CN=5892583A483C9A7F3FF9C37511F2357DF82FD0D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:d8:64:ca:a7:4b:4d:64:b6:07:36:db:d5:
a8:35:89:f2:f0:f5:56:14:0f:bb:e9:57:10:62:24:
af:28:44:cb:b5:6d:bb:d6:4e:83:8e:ed:d5:76:03:
b3:c3:c5:f9:b4:aa:a4:cf:fc:6b:44:15:8d:97:04:
3e:0a:47:51:b8:b0:b4:22:9a:5c:d9:9f:15:f8:43:
bc:16:51:bf:a8:2f:05:60:e8:fb:b2:51:6c:38:2b:
3b:a9:80:a3:81:cb:c6:11:e0:37:af:3c:f1:86:2a:
63:30:23:42:fd:d8:a7:fb:1d:1e:f8:23:b7:36:44:
2f:bf:96:15:5d:23:03:06:20:6d:5a:33:89:f0:b7:
48:9a:ca:b6:8c:2c:a4:ce:b0:55:6d:f0:09:fc:c0:
f2:71:0a:f0:b1:58:8a:f0:f7:d7:61:5a:1d:9a:73:
69:9d:ae:5b:5b:a3:30:34:5b:a0:3a:58:5f:dd:6f:
da:98:56:9e:de:91:23:fc:de:bf:be:90:18:54:96:
62:ef:68:bb:6d:05:d7:ed:8b:2f:64:58:8a:0b:0d:
2b:b4:2c:6e:1f:95:87:e7:8b:d5:ec:0b:e3:ac:c7:
e5:7c:4c:e5:fa:c2:42:ff:0d:1b:1b:3b:da:66:91:
94:c7:a8:aa:f5:c4:90:9d:73:6a:b9:d9:d7:df:cd:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:92:58:3A:48:3C:9A:7F:3F:F9:C3:75:11:F2:35:7D:F8:2F:D0:D2
X509v3 Authority Key Identifier:
keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.174.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:4f:fd:8b:ce:a5:51:48:03:2b:e2:af:ab:2e:f4:cb:73:e9:
8e:33:44:dc:a9:99:c5:a5:f8:8c:d3:8f:d5:bb:ae:72:5d:f6:
74:d3:fd:bc:c9:9b:cb:f9:f0:b0:c2:6a:16:9b:cf:2d:71:f9:
7d:14:89:dd:bb:1f:76:cf:c8:7e:85:d1:35:40:fe:b1:ac:f1:
5a:0d:55:a7:5a:00:13:9a:2c:cd:42:ca:25:a8:19:da:02:b8:
52:1c:34:1b:1f:ec:31:5c:67:4b:bc:5a:09:d5:fa:40:4a:d7:
d1:e5:b3:55:c9:ce:5d:74:20:de:ce:38:f1:b7:9b:09:93:f6:
3e:51:98:b9:a5:ad:1e:90:c0:67:e6:04:ff:09:01:1d:c4:02:
b1:55:74:2f:31:f8:90:3d:0c:79:8f:e0:71:16:58:2c:30:9d:
07:8d:d0:70:df:28:1e:b1:5b:9a:b0:69:3e:3d:8e:63:02:30:
99:d5:83:99:8c:a2:f6:cb:a9:ae:59:3e:0c:f0:0f:c8:da:e5:
8a:8c:69:c7:0b:92:36:aa:ef:17:c3:7d:0d:25:81:5f:7b:56:
4d:f7:4c:84:83:14:fd:63:a2:91:d2:39:8c:b4:66:d9:f3:82:
6e:af:19:98:08:7e:44:8f:bd:34:c8:e9:cc:aa:00:a6:f5:a3:
f5:d9:cb:dd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCX4V9eSo5macb3szbbiaT1F4bOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM3RkUwRDkwMTI1NUQ3MTIxMzI3RUZGQ0EwMUYwQjRE
MUUwQUM2MDAeFw0yNTEwMDgxNTQ5NTZaFw0yNjEwMDcxNTU0NTZaMDMxMTAvBgNV
BAMTKDU4OTI1ODNBNDgzQzlBN0YzRkY5QzM3NTExRjIzNTdERjgyRkQwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmdhkyqdLTWS2Bzbb1ag1ifLw
9VYUD7vpVxBiJK8oRMu1bbvWToOO7dV2A7PDxfm0qqTP/GtEFY2XBD4KR1G4sLQi
mlzZnxX4Q7wWUb+oLwVg6PuyUWw4KzupgKOBy8YR4DevPPGGKmMwI0L92Kf7HR74
I7c2RC+/lhVdIwMGIG1aM4nwt0iayraMLKTOsFVt8An8wPJxCvCxWIrw99dhWh2a
c2mdrltbozA0W6A6WF/db9qYVp7ekSP83r++kBhUlmLvaLttBdftiy9kWIoLDSu0
LG4flYfni9XsC+Osx+V8TOX6wkL/DRsbO9pmkZTHqKr1xJCdc2q52dffzTcrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWJJYOkg8mn8/+cN1EfI1ffgv0NIwHwYDVR0j
BBgwFoAUvH/g2QElXXEhMn7/ygHwtNHgrGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT
clgvMC9CQzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDN0ZFMEQ5MDEyNTVENzEy
MTMyN0VGRkNBMDFGMEI0RDFFMEFDNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvWFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrMrjANBgkqhkiG9w0BAQsFAAOCAQEAj0/9
i86lUUgDK+Kvqy70y3PpjjNE3KmZxaX4jNOP1buucl32dNP9vMmby/nwsMJqFpvP
LXH5fRSJ3bsfds/IfoXRNUD+sazxWg1Vp1oAE5oszULKJagZ2gK4Uhw0Gx/sMVxn
S7xaCdX6QErX0eWzVcnOXXQg3s448bebCZP2PlGYuaWtHpDAZ+YE/wkBHcQCsVV0
LzH4kD0MeY/gcRZYLDCdB43QcN8oHrFbmrBpPj2OYwIwmdWDmYyi9suprlk+DPAP
yNrlioxpxwuSNqrvF8N9DSWBX3tWTfdMhIMU/WOikdI5jLRm2fOCbq8ZmAh+RI+9
NMjpzKoApvWj9dnL3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:23:38 2025 by rpki-client