Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32312d3234203d3e20323633303437.roa
File: 3137372e3132392e3230382e302f32312d3234203d3e20323633303437.roa (raw, json)
Hash identifier: Emd8k7A9Xse7/jr6PuUOCbsQghReKm8DSzwT/IxG0Ks=
Subject key identifier: 49:9D:5F:44:6F:F0:0E:3A:66:D3:76:5C:72:C9:71:4A:59:EA:AA:34
Certificate issuer: /CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Certificate serial: 5C4F515B725580159AA78C476430BE224411684D
Authority key identifier: 99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32312d3234203d3e20323633303437.roa
Signing time: Fri 24 Oct 2025 16:24:46 +0000
ROA not before: Fri 24 Oct 2025 16:19:46 +0000
ROA not after: Fri 23 Oct 2026 16:24:46 +0000
asID: 263047
IP address blocks: 177.129.208.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:4f:51:5b:72:55:80:15:9a:a7:8c:47:64:30:be:22:44:11:68:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Validity
Not Before: Oct 24 16:19:46 2025 GMT
Not After : Oct 23 16:24:46 2026 GMT
Subject: CN=499D5F446FF00E3A66D3765C72C9714A59EAAA34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:a6:73:08:fe:fa:95:78:5d:11:31:3d:48:
0e:e1:dd:45:c1:44:f0:b9:3e:bd:78:20:c1:da:00:
2c:84:97:b2:81:9a:bc:16:32:5c:89:ec:12:72:47:
ca:28:ec:f1:fc:ea:ca:10:f0:c8:0d:2b:26:92:99:
9c:d7:9a:98:d4:d4:bb:64:ba:65:eb:d1:50:98:d2:
2f:45:f2:10:8b:a6:88:08:bd:ed:7f:ab:cc:ff:c6:
dc:b7:1f:e6:7c:b7:2f:81:c9:76:33:03:74:aa:fd:
65:c2:84:3a:f0:ec:9a:9f:d4:f8:b5:69:41:e4:73:
34:dc:1c:90:94:f9:9c:d2:b3:c1:33:ab:a6:26:7d:
1c:9e:c5:6b:c4:15:84:31:25:cb:e4:40:ad:bb:67:
42:15:e6:2e:0d:6e:86:02:73:8e:01:e0:cc:3b:08:
4f:80:1c:3a:f1:bb:05:03:e4:23:a1:c5:9f:0c:ed:
d9:91:6c:b8:c5:c0:41:01:ef:12:a5:70:56:5e:fe:
20:1c:a2:50:fc:a6:85:5d:22:27:51:b2:08:40:ed:
db:ce:ba:61:66:c7:ec:57:a0:b0:ed:7b:43:62:e1:
4c:46:e7:90:92:3e:1a:97:21:1f:c7:6e:f1:d3:dd:
69:d6:c6:36:36:ee:3a:5a:43:c4:4c:16:d9:46:86:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:5F:44:6F:F0:0E:3A:66:D3:76:5C:72:C9:71:4A:59:EA:AA:34
X509v3 Authority Key Identifier:
keyid:99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/3137372e3132392e3230382e302f32312d3234203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.208.0/21
Signature Algorithm: sha256WithRSAEncryption
66:24:67:3c:f3:d8:3e:33:75:f0:da:e4:26:79:9d:73:14:24:
68:f6:ce:73:9f:b2:46:f2:24:39:fb:f4:b1:30:d2:84:7c:a0:
bf:7e:f7:d1:6e:6b:3d:2b:d3:10:e9:19:19:da:74:39:92:e5:
bd:22:63:f1:6c:4b:c9:23:d7:54:a0:06:c7:c6:72:2c:34:12:
eb:26:0f:de:38:ec:ec:d0:68:88:48:2f:fb:ca:08:5b:79:20:
1c:df:a7:06:52:63:a0:25:02:a3:1e:71:7f:2d:82:8e:04:28:
ac:2a:6c:c5:af:63:f3:f4:7d:f7:f4:31:b5:0d:ac:ec:0d:f0:
b2:b7:31:c0:7d:89:4e:fe:f3:8c:ef:34:b4:4f:66:3d:d6:39:
9f:f3:7c:0b:cb:54:06:fe:2c:3e:b2:ca:4a:82:3f:4e:09:80:
55:30:0f:41:9f:8a:3b:be:9d:92:b4:4b:84:e7:97:0c:eb:9d:
23:82:60:c7:11:84:1f:6a:c5:23:24:4e:76:ae:55:98:fc:b7:
7e:13:a4:e5:ee:a1:b9:49:79:4d:0b:85:8c:9f:0e:d3:ce:05:
a3:f4:aa:d9:69:9e:aa:08:b2:7f:ef:8f:14:ce:60:4f:c1:1f:
a8:a0:ff:58:b0:17:42:98:83:63:15:70:78:0a:5c:fa:52:d9:
40:a5:2d:43
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXE9RW3JVgBWap4xHZDC+IkQRaE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkzQUUxMzJEQzg4NEFDMzQ4MzQ3Rjc4M0E5QkE0QjFE
QTVDRjgzMjAeFw0yNTEwMjQxNjE5NDZaFw0yNjEwMjMxNjI0NDZaMDMxMTAvBgNV
BAMTKDQ5OUQ1RjQ0NkZGMDBFM0E2NkQzNzY1QzcyQzk3MTRBNTlFQUFBMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb8qZzCP76lXhdETE9SA7h3UXB
RPC5Pr14IMHaACyEl7KBmrwWMlyJ7BJyR8oo7PH86soQ8MgNKyaSmZzXmpjU1Ltk
umXr0VCY0i9F8hCLpogIve1/q8z/xty3H+Z8ty+ByXYzA3Sq/WXChDrw7Jqf1Pi1
aUHkczTcHJCU+ZzSs8Ezq6YmfRyexWvEFYQxJcvkQK27Z0IV5i4NboYCc44B4Mw7
CE+AHDrxuwUD5COhxZ8M7dmRbLjFwEEB7xKlcFZe/iAcolD8poVdIidRsghA7dvO
umFmx+xXoLDte0Ni4UxG55CSPhqXIR/HbvHT3WnWxjY27jpaQ8RMFtlGhiotAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSZ1fRG/wDjpm03ZccslxSlnqqjQwHwYDVR0j
BBgwFoAUmTrhMtyISsNINH94Opuksdpc+DIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlnYjc5RGhZMW95QW1zSFkzUXdpa2tuUUVCV2pDMUpXd3R0THhCRVM2
enUvMC85OTNBRTEzMkRDODg0QUMzNDgzNDdGNzgzQTlCQTRCMURBNUNGODMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5M0FFMTMyREM4ODRBQzM0
ODM0N0Y3ODNBOUJBNEIxREE1Q0Y4MzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5Z2I3OURoWTFveUFtc0hZM1F3aWtrblFFQldqQzFKV3d0dEx4QkVTNnp1LzAv
MzEzNzM3MmUzMTMyMzkyZTMyMzAzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7GB0DANBgkqhkiG9w0BAQsFAAOCAQEAZiRn
PPPYPjN18NrkJnmdcxQkaPbOc5+yRvIkOfv0sTDShHygv3730W5rPSvTEOkZGdp0
OZLlvSJj8WxLySPXVKAGx8ZyLDQS6yYP3jjs7NBoiEgv+8oIW3kgHN+nBlJjoCUC
ox5xfy2CjgQorCpsxa9j8/R99/QxtQ2s7A3wsrcxwH2JTv7zjO80tE9mPdY5n/N8
C8tUBv4sPrLKSoI/TgmAVTAPQZ+KO76dkrRLhOeXDOudI4JgxxGEH2rFIyROdq5V
mPy3fhOk5e6huUl5TQuFjJ8O084Fo/Sq2Wmeqgiyf++PFM5gT8EfqKD/WLAXQpiD
YxVweApc+lLZQKUtQw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 07:56:28 2025 by rpki-client