Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa
File: 3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa (raw, json)
Hash identifier: chFvUqDC6tgC166zl+6J0kC2KwKIVKv+PeH7SmEsaY8=
Subject key identifier: 93:BC:C1:11:13:18:CE:7C:AA:1B:B3:37:0A:C3:7C:37:07:0F:27:B0
Certificate issuer: /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial: 595B397C0AE1EAC3555DF6037C9F6DBEB6252FAC
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa
Signing time: Mon 03 Mar 2025 12:19:53 +0000
ROA not before: Mon 03 Mar 2025 12:14:53 +0000
ROA not after: Mon 02 Mar 2026 12:19:53 +0000
asID: 264036
IP address blocks: 143.137.122.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5b:39:7c:0a:e1:ea:c3:55:5d:f6:03:7c:9f:6d:be:b6:25:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Validity
Not Before: Mar 3 12:14:53 2025 GMT
Not After : Mar 2 12:19:53 2026 GMT
Subject: CN=93BCC1111318CE7CAA1BB3370AC37C37070F27B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:d8:4b:89:6c:2d:9d:06:90:a8:b5:32:65:
04:b9:06:12:08:42:4f:b1:58:b1:52:a6:9b:3c:57:
0c:0f:27:2c:ef:b9:0b:f5:3c:ee:17:b6:12:9e:1c:
2d:76:41:25:1e:df:36:d5:8a:ca:89:8c:fb:7e:f4:
71:76:4e:f3:a7:21:87:16:77:52:e4:31:67:9b:68:
2f:2d:e8:f9:b0:9e:d3:6e:ee:7e:19:9d:54:5b:e7:
46:e8:3d:ea:31:34:bc:0a:21:27:2d:60:d6:c5:3a:
ea:e3:28:d3:cf:a2:f2:fe:a0:de:ba:d4:23:53:4d:
de:52:11:cf:1a:41:2f:83:71:a2:55:39:5a:d3:d7:
19:9e:71:2c:f6:49:69:7d:c3:9c:d9:4b:4a:3e:1e:
77:dd:ac:37:80:92:be:29:dc:00:22:82:ac:66:a5:
e1:78:23:7d:8a:35:c3:be:39:67:4d:a6:58:42:ac:
0c:97:c1:1a:9a:27:ec:71:09:ed:f9:ea:19:7e:cd:
e6:17:d9:e2:76:4a:9b:b9:6b:7c:0b:92:a3:69:46:
52:dc:a0:58:29:5c:d9:cf:57:9a:f2:b2:dc:0b:78:
15:fc:4c:e5:d4:ee:d4:fd:26:b5:32:08:07:1b:e3:
ce:2c:45:bf:c2:6d:c5:0c:de:ff:57:b8:ba:9d:96:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BC:C1:11:13:18:CE:7C:AA:1B:B3:37:0A:C3:7C:37:07:0F:27:B0
X509v3 Authority Key Identifier:
keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.122.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:62:8d:33:1e:20:92:58:08:5f:04:40:00:51:3e:cf:e1:52:
e1:57:b0:e9:56:98:b9:21:5d:2b:19:5a:5a:d2:46:1c:88:91:
0f:da:5f:9d:b9:b4:f7:a8:35:2f:c6:2f:3d:d3:9a:5a:3d:7b:
45:92:8e:e9:36:51:ad:c5:7f:71:9a:0c:95:22:ed:e9:c3:4a:
3c:3c:0c:e2:b3:3d:43:02:de:7e:ee:84:63:f6:87:fb:67:ac:
c5:15:72:24:dd:c9:5b:9c:59:5d:ec:63:7f:41:c2:75:1b:d1:
28:3a:6a:72:23:4e:83:70:a6:c8:ea:27:3e:d8:fc:35:95:07:
03:ad:0e:e9:52:f5:18:95:b5:1e:fb:87:b7:8b:cc:54:07:b0:
ed:49:8f:06:10:92:43:94:41:ed:b3:5c:31:84:7b:ae:79:e4:
d4:6d:23:44:07:f4:f1:47:d4:be:6e:d3:fa:c0:e7:dc:19:57:
bb:0a:54:cc:fb:a7:88:d1:32:6b:fc:3f:7d:a0:b7:d0:7f:6f:
1a:e1:15:42:ee:af:71:79:f0:85:19:d9:d3:5d:d2:65:b8:ad:
9f:2e:16:14:0d:08:30:98:4b:c4:00:2b:de:94:b1:ec:80:9e:
fc:e0:f4:51:20:58:c3:8a:33:84:cd:11:25:64:4e:66:7e:93:
80:14:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 22:34:24 2025 by rpki-client