Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e34382e302f32312d3332203d3e20323634323136.roa
File: 3137372e38362e34382e302f32312d3332203d3e20323634323136.roa (raw, json)
Hash identifier: PbMy0AvhwEfbXy+dysNZfc79vOPKVgDVL2BZn+SO9m0=
Subject key identifier: 01:00:37:5C:5C:FE:51:DB:87:5E:AE:8A:BA:C9:F5:7C:5E:EA:49:A3
Certificate issuer: /CN=2270C9DA5A582596A97F8555336A391C5725828F
Certificate serial: 67D541F240EF4DBD7A98DD00DD3FAFA3EB2E88F4
Authority key identifier: 22:70:C9:DA:5A:58:25:96:A9:7F:85:55:33:6A:39:1C:57:25:82:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2270C9DA5A582596A97F8555336A391C5725828F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e34382e302f32312d3332203d3e20323634323136.roa
Signing time: Wed 19 Feb 2025 15:21:32 +0000
ROA not before: Wed 19 Feb 2025 15:16:32 +0000
ROA not after: Wed 18 Feb 2026 15:21:32 +0000
asID: 264216
IP address blocks: 177.86.48.0/21 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d5:41:f2:40:ef:4d:bd:7a:98:dd:00:dd:3f:af:a3:eb:2e:88:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2270C9DA5A582596A97F8555336A391C5725828F
Validity
Not Before: Feb 19 15:16:32 2025 GMT
Not After : Feb 18 15:21:32 2026 GMT
Subject: CN=0100375C5CFE51DB875EAE8ABAC9F57C5EEA49A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:ad:f4:7b:fb:91:b2:a2:55:82:72:4e:1b:
84:ac:0c:5b:9f:f1:8b:3e:4c:f3:73:49:b0:5a:e0:
02:e3:32:3e:af:b6:91:71:53:93:6b:99:df:60:88:
31:06:7a:ce:97:c3:f9:01:65:9b:9d:23:29:97:d4:
b1:a9:7f:cb:aa:6e:98:5c:3f:82:e4:83:d1:73:3b:
2a:ec:7b:ce:9e:c2:47:c1:75:17:4a:e2:0f:64:9e:
e8:1b:7a:4a:7f:7e:d8:08:8f:6e:73:5b:7c:32:09:
a5:54:06:8a:21:00:94:19:fd:d0:c3:d2:3c:c5:9f:
20:1a:ae:71:d5:9e:8f:7b:ec:51:1e:fc:40:01:87:
f8:b3:12:6f:a4:0b:e0:49:c8:c2:e2:36:27:92:69:
4a:e5:7b:0c:7b:12:f3:b7:ce:a7:54:fa:c7:f6:4d:
34:1e:68:1e:03:e7:40:2a:d8:67:37:05:76:fc:48:
64:63:48:66:c7:03:6f:ea:de:e6:35:7a:51:13:66:
8a:02:a9:ad:63:85:d2:f6:42:8e:ca:f4:73:a0:fa:
33:da:34:28:31:92:4d:f1:8c:63:40:74:f5:a2:e3:
2e:c3:28:1b:c7:0d:9b:5f:e6:af:57:b6:15:93:82:
cb:a4:3e:74:7a:70:4f:8f:66:68:18:6b:b5:ce:88:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:00:37:5C:5C:FE:51:DB:87:5E:AE:8A:BA:C9:F5:7C:5E:EA:49:A3
X509v3 Authority Key Identifier:
keyid:22:70:C9:DA:5A:58:25:96:A9:7F:85:55:33:6A:39:1C:57:25:82:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/2270C9DA5A582596A97F8555336A391C5725828F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2270C9DA5A582596A97F8555336A391C5725828F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/3137372e38362e34382e302f32312d3332203d3e20323634323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.86.48.0/21
Signature Algorithm: sha256WithRSAEncryption
31:7c:9b:70:05:1d:97:09:09:62:96:34:0e:b3:b5:99:8e:5c:
a7:12:80:4a:48:9c:07:7b:d9:f4:60:b8:97:73:63:16:33:5e:
b7:ed:10:21:05:91:93:17:54:bf:86:09:8d:7d:f3:74:80:41:
63:50:2f:4a:b2:c0:a9:87:66:ad:0d:b0:50:45:82:45:fe:cb:
41:e8:8a:e9:a1:38:20:96:80:0c:29:8e:81:dd:f8:3a:60:32:
e1:d9:83:d6:df:57:27:2d:9a:a4:83:c4:3f:31:62:eb:21:81:
7e:31:dd:74:c2:86:40:bd:c1:93:d5:9d:ac:fd:8e:d4:ff:d1:
ed:1f:d5:c2:1f:83:c7:2f:27:a4:9c:e9:21:91:08:e3:63:2b:
fd:ca:8d:dc:35:b1:30:70:ef:16:61:2f:73:a0:c3:40:a8:e2:
c5:e5:f3:2e:b8:b3:13:12:04:bf:fc:5d:64:13:cc:b3:2d:49:
1b:7b:24:dd:a4:ff:b5:22:f0:3e:b8:78:5e:2e:9d:5f:d9:9c:
a2:8b:0f:28:db:47:d8:87:f2:a4:11:70:f5:e3:0b:a3:94:21:
97:6d:e6:30:f2:00:e2:44:2c:4c:3e:de:ee:ee:f3:8a:f6:85:
b3:d6:92:91:a3:f7:67:37:ac:e4:f7:6a:e1:ed:ed:f5:50:65:
4f:33:a0:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ9VB8kDvTb16mN0A3T+vo+suiPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI3MEM5REE1QTU4MjU5NkE5N0Y4NTU1MzM2QTM5MUM1
NzI1ODI4RjAeFw0yNTAyMTkxNTE2MzJaFw0yNjAyMTgxNTIxMzJaMDMxMTAvBgNV
BAMTKDAxMDAzNzVDNUNGRTUxREI4NzVFQUU4QUJBQzlGNTdDNUVFQTQ5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpq30e/uRsqJVgnJOG4SsDFuf
8Ys+TPNzSbBa4ALjMj6vtpFxU5Nrmd9giDEGes6Xw/kBZZudIymX1LGpf8uqbphc
P4Lkg9FzOyrse86ewkfBdRdK4g9knugbekp/ftgIj25zW3wyCaVUBoohAJQZ/dDD
0jzFnyAarnHVno977FEe/EABh/izEm+kC+BJyMLiNieSaUrlewx7EvO3zqdU+sf2
TTQeaB4D50Aq2Gc3BXb8SGRjSGbHA2/q3uY1elETZooCqa1jhdL2Qo7K9HOg+jPa
NCgxkk3xjGNAdPWi4y7DKBvHDZtf5q9XthWTgsukPnR6cE+PZmgYa7XOiOt1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAQA3XFz+UduHXq6Kusn1fF7qSaMwHwYDVR0j
BBgwFoAUInDJ2lpYJZapf4VVM2o5HFclgo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJq
U1MvMC8yMjcwQzlEQTVBNTgyNTk2QTk3Rjg1NTUzMzZBMzkxQzU3MjU4MjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNzBDOURBNUE1ODI1OTZB
OTdGODU1NTMzNkEzOTFDNTcyNTgyOEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d3RWZ1dVRIZ1FjVXhpTVhFTldLd2pmWWpMcnpzeTVTWVBRYVdibnZyalNTLzAv
MzEzNzM3MmUzODM2MmUzNDM4MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzIzNjM0
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsVYwMA0GCSqGSIb3DQEBCwUAA4IBAQAxfJtwBR2X
CQliljQOs7WZjlynEoBKSJwHe9n0YLiXc2MWM1637RAhBZGTF1S/hgmNffN0gEFj
UC9KssCph2atDbBQRYJF/stB6IrpoTggloAMKY6B3fg6YDLh2YPW31cnLZqkg8Q/
MWLrIYF+Md10woZAvcGT1Z2s/Y7U/9HtH9XCH4PHLyeknOkhkQjjYyv9yo3cNbEw
cO8WYS9zoMNAqOLF5fMuuLMTEgS//F1kE8yzLUkbeyTdpP+1IvA+uHheLp1f2Zyi
iw8o20fYh/KkEXD14wujlCGXbeYw8gDiRCxMPt7u7vOK9oWz1pKRo/dnN6zk92rh
7e31UGVPM6Cx
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:58 2025 by rpki-client