Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa
File: 3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier: tQ9BE7myZWTRJBmbkn0TzJRLKgNbGTDntpPgIeG1AmI=
Subject key identifier: B0:99:EC:AE:21:38:CD:81:CE:E2:A4:64:3A:37:31:D0:36:57:50:51
Certificate issuer: /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
Certificate serial: 23E8EF8A0A72B3AE1273BFCCF4E928BADB89DBA0
Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa
Signing time: Wed 08 Oct 2025 15:54:56 +0000
ROA not before: Wed 08 Oct 2025 15:49:56 +0000
ROA not after: Wed 07 Oct 2026 15:54:56 +0000
asID: 263911
IP address blocks: 138.204.174.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e8:ef:8a:0a:72:b3:ae:12:73:bf:cc:f4:e9:28:ba:db:89:db:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
Validity
Not Before: Oct 8 15:49:56 2025 GMT
Not After : Oct 7 15:54:56 2026 GMT
Subject: CN=B099ECAE2138CD81CEE2A4643A3731D036575051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:29:9a:9b:d4:9a:61:93:32:26:e2:45:8e:
a4:44:a8:3b:26:d9:4f:7e:36:0e:53:f0:29:10:cf:
46:7b:fb:9b:bb:bd:e5:6d:74:60:06:4a:af:7f:76:
f6:d8:c4:bd:d4:99:a4:ee:8a:e0:02:c7:18:e0:ed:
c8:77:65:3e:47:1b:32:01:98:fe:77:bd:05:59:1e:
71:7e:b5:60:02:38:ab:b3:fe:d2:fc:f7:64:37:58:
79:0b:45:fc:57:ce:89:91:87:bc:ec:df:05:da:bc:
9b:f3:5f:f4:a5:a0:bb:5d:5a:59:bd:59:d9:af:63:
6d:a3:15:04:44:5e:78:b4:80:a4:aa:25:f4:61:4e:
62:f5:c8:5a:6f:58:d9:2c:53:c7:e6:4d:fe:44:b6:
41:cf:d6:1b:f4:a3:30:20:94:59:3f:9e:e5:04:6a:
32:89:79:8e:65:4f:a3:da:85:d9:1a:1f:cd:42:c2:
42:e0:58:d2:24:ee:50:e3:47:12:f6:e2:15:b7:80:
76:de:8c:0f:31:f5:bd:cd:1d:f6:d6:a9:da:bf:3a:
e6:ff:bc:26:17:b8:49:00:fa:90:50:5d:b0:69:54:
da:43:96:3f:6b:15:2a:29:7a:d5:2e:5e:d0:95:d1:
78:9b:6e:de:de:6f:aa:c6:e7:f4:5c:8d:61:d1:c6:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:99:EC:AE:21:38:CD:81:CE:E2:A4:64:3A:37:31:D0:36:57:50:51
X509v3 Authority Key Identifier:
keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.174.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2f:d4:7b:1d:15:8a:d5:8d:cb:7e:86:56:1b:1d:c5:84:ee:
d8:65:55:25:ad:19:04:c1:48:1f:f6:30:01:6b:1a:3e:0f:49:
78:5d:0e:70:e2:ae:50:38:fa:7a:83:fb:c6:7d:b2:a3:de:c2:
e6:cf:a6:ca:14:31:80:b3:8a:5c:37:66:cd:85:ba:3f:28:0c:
ba:5b:5f:62:3c:6b:9b:9c:3e:b6:47:64:75:b2:61:79:42:d8:
1a:46:b1:22:7e:66:4c:d2:80:3f:08:ef:de:10:9d:88:53:7a:
c1:6f:7d:68:30:2c:e2:59:06:0e:68:35:3b:15:29:10:7a:a2:
ce:ae:1f:c1:8d:b4:c1:2f:72:7c:a9:88:6b:4d:c2:19:e9:2b:
18:b8:2d:d1:8e:74:9b:a2:b2:99:9e:e8:64:3d:03:6f:d9:4d:
bb:59:af:a8:a2:fe:c8:4f:e6:c5:9a:f3:92:31:99:b4:21:6b:
41:62:b4:6e:df:49:c7:18:13:8e:d4:eb:e5:27:7a:f9:cb:fc:
3c:c7:a9:71:a8:5a:e4:35:08:ca:ef:d4:80:23:2c:89:08:ed:
16:7a:9b:a5:40:a7:a4:50:fe:7e:07:43:69:7c:49:e0:c7:f8:
7e:cf:46:c7:95:19:be:8b:ef:bc:b5:b9:a2:4e:45:7a:a5:4f:
5c:70:97:24
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUI+jvigpys64Sc7/M9OkoutuJ26AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM3RkUwRDkwMTI1NUQ3MTIxMzI3RUZGQ0EwMUYwQjRE
MUUwQUM2MDAeFw0yNTEwMDgxNTQ5NTZaFw0yNjEwMDcxNTU0NTZaMDMxMTAvBgNV
BAMTKEIwOTlFQ0FFMjEzOENEODFDRUUyQTQ2NDNBMzczMUQwMzY1NzUwNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoimam9SaYZMyJuJFjqREqDsm
2U9+Ng5T8CkQz0Z7+5u7veVtdGAGSq9/dvbYxL3UmaTuiuACxxjg7ch3ZT5HGzIB
mP53vQVZHnF+tWACOKuz/tL892Q3WHkLRfxXzomRh7zs3wXavJvzX/SloLtdWlm9
WdmvY22jFQREXni0gKSqJfRhTmL1yFpvWNksU8fmTf5EtkHP1hv0ozAglFk/nuUE
ajKJeY5lT6PahdkaH81CwkLgWNIk7lDjRxL24hW3gHbejA8x9b3NHfbWqdq/Oub/
vCYXuEkA+pBQXbBpVNpDlj9rFSopetUuXtCV0Xibbt7eb6rG5/RcjWHRxl6RAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsJnsriE4zYHO4qRkOjcx0DZXUFEwHwYDVR0j
BBgwFoAUvH/g2QElXXEhMn7/ygHwtNHgrGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT
clgvMC9CQzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDN0ZFMEQ5MDEyNTVENzEy
MTMyN0VGRkNBMDFGMEI0RDFFMEFDNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvWFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMrjANBgkqhkiG9w0BAQsFAAOCAQEAJS/U
ex0VitWNy36GVhsdxYTu2GVVJa0ZBMFIH/YwAWsaPg9JeF0OcOKuUDj6eoP7xn2y
o97C5s+myhQxgLOKXDdmzYW6PygMultfYjxrm5w+tkdkdbJheULYGkaxIn5mTNKA
Pwjv3hCdiFN6wW99aDAs4lkGDmg1OxUpEHqizq4fwY20wS9yfKmIa03CGekrGLgt
0Y50m6KymZ7oZD0Db9lNu1mvqKL+yE/mxZrzkjGZtCFrQWK0bt9JxxgTjtTr5Sd6
+cv8PMepcaha5DUIyu/UgCMsiQjtFnqbpUCnpFD+fgdDaXxJ4Mf4fs9Gx5UZvovv
vLW5ok5FeqVPXHCXJA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:49:59 2025 by rpki-client