Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa
File: 3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa (raw, json)
Hash identifier: DJQU2mWlmq5Vx8nWAjVJeWEOlQfkc6VoxdX0A8xfcQ0=
Subject key identifier: 2C:EC:68:9B:6F:67:05:13:B1:79:7E:DB:2D:6D:E3:7D:C3:78:00:57
Certificate issuer: /CN=4D839483977D78702BA754AB330D5B6AE6DB3FF1
Certificate serial: 71B7493B47696589B141EE47FD26E02C36487A78
Authority key identifier: 4D:83:94:83:97:7D:78:70:2B:A7:54:AB:33:0D:5B:6A:E6:DB:3F:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D839483977D78702BA754AB330D5B6AE6DB3FF1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa
Signing time: Mon 16 Jun 2025 18:21:42 +0000
ROA not before: Mon 16 Jun 2025 18:16:42 +0000
ROA not after: Mon 15 Jun 2026 18:21:42 +0000
asID: 262351
IP address blocks: 177.125.192.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b7:49:3b:47:69:65:89:b1:41:ee:47:fd:26:e0:2c:36:48:7a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D839483977D78702BA754AB330D5B6AE6DB3FF1
Validity
Not Before: Jun 16 18:16:42 2025 GMT
Not After : Jun 15 18:21:42 2026 GMT
Subject: CN=2CEC689B6F670513B1797EDB2D6DE37DC3780057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:94:a8:11:05:ce:0f:d9:31:a7:3c:64:58:
bd:c0:fd:bb:45:be:bf:31:32:5b:22:4a:f6:89:13:
de:35:57:67:2c:0c:fb:65:17:7d:bb:01:49:2e:4e:
14:8d:bb:c2:01:f1:23:84:77:1c:07:1f:29:58:74:
3a:b4:ab:4b:7a:68:8e:ec:e6:b8:c1:81:54:37:e9:
b8:6d:0d:4c:fa:4c:97:2c:0a:68:5d:7f:a7:21:7b:
eb:a8:67:66:69:11:9d:dd:37:82:ba:17:df:f3:58:
a7:e5:9e:83:d1:62:9e:34:c1:f2:13:14:74:3f:9b:
4c:c4:02:de:ff:08:f6:d4:c7:8c:f4:f5:36:63:99:
9e:e4:2c:00:40:01:1c:4c:36:fe:67:c0:b1:b6:61:
e8:84:76:e2:89:c0:67:30:e9:2c:24:08:87:b7:2f:
fe:b3:05:66:76:b0:7b:1d:d7:4a:dd:4b:ed:c1:db:
8c:b1:06:da:9b:48:27:dd:72:11:73:ce:a9:ac:25:
0d:6c:3e:28:b1:3f:84:38:d4:62:f9:cb:b9:ed:6b:
d5:83:86:7f:d7:1f:34:46:a7:b1:f4:c4:f2:90:8e:
12:d6:22:3d:31:5a:f2:48:be:de:04:96:78:0b:6c:
8a:ce:6d:78:3c:d2:14:32:23:3b:3e:82:ac:5a:95:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:68:9B:6F:67:05:13:B1:79:7E:DB:2D:6D:E3:7D:C3:78:00:57
X509v3 Authority Key Identifier:
keyid:4D:83:94:83:97:7D:78:70:2B:A7:54:AB:33:0D:5B:6A:E6:DB:3F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/4D839483977D78702BA754AB330D5B6AE6DB3FF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D839483977D78702BA754AB330D5B6AE6DB3FF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/3137372e3132352e3139322e302f32322d3234203d3e20323632333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.125.192.0/22
Signature Algorithm: sha256WithRSAEncryption
11:0f:c9:36:6e:c8:26:30:05:ec:f4:cd:bc:99:49:18:11:79:
d4:1f:45:14:fd:33:8a:50:53:1a:75:48:0d:4c:a4:f9:8b:ee:
20:b0:fb:29:24:71:93:cf:ad:41:d4:3a:ab:80:8d:45:0f:c8:
6b:d7:bf:40:ec:25:ba:f9:87:d1:21:d7:b2:62:6c:89:06:12:
9c:02:86:20:94:fe:ae:e7:91:0b:fd:91:e7:5c:40:f9:cc:38:
26:f3:02:97:ae:7f:26:48:04:e4:83:77:f9:f6:b1:f6:7e:40:
d6:99:a3:b9:b3:44:97:99:25:ab:80:6b:e9:c5:75:43:14:f7:
0a:1e:3e:f4:80:07:fa:94:ce:a1:ad:46:e1:95:f1:dd:4b:19:
20:b0:da:19:ef:b5:2f:a9:27:92:ab:49:07:8b:84:34:03:de:
2e:d0:5a:4f:ab:f7:52:fc:42:56:21:75:1d:6c:45:a3:e2:5e:
77:2f:a8:16:0a:89:88:92:dc:10:05:7d:18:13:42:b3:39:62:
36:54:34:2d:ad:4e:41:b5:22:41:c7:67:fc:3e:94:e8:da:5b:
0c:88:15:6e:e6:0b:cc:05:88:e9:b4:f4:77:0d:20:d4:0b:2d:
9f:b2:e5:38:f7:33:12:17:fb:ea:d6:cf:d0:ee:d8:c1:cf:21:
ec:20:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:52:40 2025 by rpki-client