Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32322d3232203d3e203532373231.roa
File: 3137372e38342e3130382e302f32322d3232203d3e203532373231.roa (raw, json)
Hash identifier: Asz8Y1LAmHNb/RrBb0xLQBMWJay5FKsFCksxEcg3IHo=
Subject key identifier: 0C:5F:66:7D:87:E2:D6:DB:25:06:80:46:AF:5C:44:22:7B:C2:20:77
Certificate issuer: /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial: 35292BDAC1DABD7E504F821897A63B48744BB827
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32322d3232203d3e203532373231.roa
Signing time: Fri 25 Apr 2025 14:50:38 +0000
ROA not before: Fri 25 Apr 2025 14:45:38 +0000
ROA not after: Fri 24 Apr 2026 14:50:38 +0000
asID: 52721
IP address blocks: 177.84.108.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:29:2b:da:c1:da:bd:7e:50:4f:82:18:97:a6:3b:48:74:4b:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Validity
Not Before: Apr 25 14:45:38 2025 GMT
Not After : Apr 24 14:50:38 2026 GMT
Subject: CN=0C5F667D87E2D6DB25068046AF5C44227BC22077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:cc:65:58:46:de:db:e5:ec:9e:c4:e4:35:
e4:b2:d1:40:b6:75:21:74:70:07:4d:1e:62:95:38:
0e:aa:f6:89:b3:8d:96:55:af:bf:64:7e:69:96:6e:
03:e1:1d:21:b9:56:36:92:bd:be:a1:a0:a0:73:e3:
46:83:56:b1:77:6e:4f:75:d3:05:db:cd:31:b8:6c:
f9:3e:3e:c1:dc:20:07:64:15:53:21:96:7a:ae:67:
e7:64:d8:f2:c2:b1:f1:17:f6:f7:68:fe:a3:06:23:
c9:c3:2a:25:c2:7e:2f:e4:5f:43:ee:ec:c8:e9:ed:
56:f6:5d:51:12:f2:72:1d:4b:ed:0b:3f:0e:d8:54:
e4:3c:33:a0:d7:73:b0:0f:0a:00:38:aa:94:46:19:
de:51:65:6d:51:b2:25:30:6f:35:8d:2b:3e:d8:69:
dd:e5:a4:b6:f4:6a:c8:ee:8c:ca:92:9c:9e:67:d1:
be:12:ed:6a:c7:8f:e5:d4:5d:dc:07:b0:4a:51:65:
e2:e8:0c:5b:71:ab:5f:2a:8d:fb:9c:d9:d6:73:a8:
1c:5d:89:b3:4a:65:8c:fb:a7:63:ba:4f:03:48:b0:
bd:01:dd:4f:0b:19:9f:08:a8:c0:0d:68:60:67:c5:
3c:58:a1:c8:f6:2c:c1:16:1b:ca:58:71:63:c8:7d:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5F:66:7D:87:E2:D6:DB:25:06:80:46:AF:5C:44:22:7B:C2:20:77
X509v3 Authority Key Identifier:
keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137372e38342e3130382e302f32322d3232203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.84.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:36:42:94:97:39:cf:ae:84:36:00:b9:ed:1b:08:cc:9a:b1:
73:f0:18:5b:64:ac:91:c5:5e:0b:fe:4d:ce:4d:72:b8:ae:47:
2d:e6:58:50:d9:13:e2:a9:1a:f1:22:eb:d0:81:dc:45:78:ae:
81:4b:24:f2:43:eb:d6:04:c3:b4:f5:16:90:6f:c5:71:7c:e8:
9e:ec:2e:50:a8:2f:78:aa:c1:75:1a:a3:87:d9:0a:21:35:4a:
05:4d:cb:fe:e1:c9:72:ac:99:27:b9:63:1d:42:63:15:e1:af:
73:34:fb:1c:b4:fc:80:7c:ff:2f:64:63:b9:58:f7:33:3e:4e:
52:d6:27:75:c4:6f:e8:b4:1b:17:3c:ad:1f:cd:80:2f:7c:92:
c3:2c:6b:66:3d:3a:c3:9d:fa:23:20:08:2b:31:5e:0b:d7:b2:
ca:db:e1:b5:1c:6a:a2:45:31:79:3a:ee:2b:af:90:c0:68:29:
79:8d:c7:4a:70:ce:39:0a:8e:d2:19:40:d6:fb:c8:6a:68:bc:
ff:68:ec:a5:c3:f3:da:b2:ac:5e:a1:4c:a2:9d:6b:09:2c:95:
6c:45:f3:95:ad:88:ae:07:f4:01:26:47:80:c1:e3:c5:b7:d7:
d1:40:69:54:8c:04:28:06:15:d3:18:92:4f:a0:ed:a3:e7:ad:
37:50:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:29 2025 by rpki-client