Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa
File: 3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa (raw, json)
Hash identifier: ensNjliPVGcPGmarcWganrVlOlX9e+0kbEhHckxdCrs=
Subject key identifier: 9D:55:35:7D:E4:A1:46:00:6D:27:E1:31:AE:C8:8B:AA:CB:62:63:AF
Certificate issuer: /CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
Certificate serial: 0552A7A78846942E1B02D3CD9EDE7F9504CBCF3B
Authority key identifier: A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa
Signing time: Tue 10 Dec 2024 22:06:37 +0000
ROA not before: Tue 10 Dec 2024 22:01:37 +0000
ROA not after: Tue 09 Dec 2025 22:06:37 +0000
asID: 263584
IP address blocks: 177.129.136.0/21 maxlen: 21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:52:a7:a7:88:46:94:2e:1b:02:d3:cd:9e:de:7f:95:04:cb:cf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
Validity
Not Before: Dec 10 22:01:37 2024 GMT
Not After : Dec 9 22:06:37 2025 GMT
Subject: CN=9D55357DE4A146006D27E131AEC88BAACB6263AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:22:bf:73:cf:f7:bc:3c:b8:34:78:9f:56:
3a:24:69:75:54:a8:25:ce:50:e4:5a:74:da:d4:18:
84:84:2d:96:29:4c:ba:b0:4b:11:5c:54:26:8d:3f:
b0:bf:bb:0b:1a:fe:b5:04:e9:43:ee:1b:9d:04:51:
05:7f:6a:b9:df:e2:73:13:ea:9c:8b:34:3c:02:10:
0e:f7:65:dd:c4:b5:ea:58:2f:4e:84:d9:a2:ed:06:
c3:f3:66:71:d3:3c:14:26:9b:4f:05:80:3a:4b:c1:
53:4e:aa:0e:f1:52:15:a5:51:2d:7e:24:13:76:e9:
00:c7:ac:b0:de:b1:3f:20:73:47:ed:24:e0:38:42:
1e:70:8c:65:93:4d:9c:54:75:b6:5b:4d:98:6d:b6:
6f:0a:be:21:76:e4:8d:41:77:a0:06:08:ac:6d:46:
c5:0d:3a:0c:23:f2:54:88:21:03:86:e7:86:54:1c:
52:dd:fe:21:a6:dd:40:08:f3:34:b7:66:86:48:c4:
be:1e:3d:a5:cc:fc:55:35:2e:75:72:a3:76:56:28:
cb:e8:96:fe:97:b8:32:2c:51:33:fa:ad:e3:f3:43:
ae:81:6d:ed:98:b5:af:1b:98:27:e6:48:fc:0e:41:
96:80:36:43:cb:6d:ed:41:49:66:14:7b:aa:5a:03:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:55:35:7D:E4:A1:46:00:6D:27:E1:31:AE:C8:8B:AA:CB:62:63:AF
X509v3 Authority Key Identifier:
keyid:A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.136.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:09:55:91:71:11:bc:70:a2:f6:f8:21:f1:07:06:28:72:e0:
27:27:8c:60:48:7f:73:9d:5c:45:8b:f4:80:f0:01:db:7f:e2:
c3:6d:ef:14:f9:16:ef:1f:05:a3:4e:80:08:27:3b:70:15:22:
2c:d0:af:3e:a2:2f:fa:cc:e9:0d:e1:10:3e:a6:89:5e:d6:3e:
a2:15:97:e9:e9:d1:c0:98:a0:17:e8:81:8d:c0:fb:4e:84:67:
ff:15:80:a7:dc:91:d1:44:1b:5e:60:0f:6f:bb:64:ac:bd:a5:
2b:8f:c4:a2:d4:1e:e2:fa:3d:3e:a3:a2:aa:6f:46:e6:91:4b:
90:28:e4:fa:3b:31:2b:76:8e:0f:66:88:1b:c9:0c:f8:f6:03:
d1:52:33:d6:2c:32:bc:f2:ca:ad:c7:13:89:9b:58:82:9c:a7:
24:7a:24:9c:82:9f:05:3a:9d:4d:9b:db:38:ce:1d:c3:7e:71:
80:9f:5b:66:b6:24:5c:5f:49:34:90:27:7f:63:0a:33:5f:33:
10:d1:76:a1:5d:5f:12:41:8b:20:ac:b8:be:13:bb:ab:c0:fd:
89:ec:f4:5a:49:c7:58:0d:ca:62:ab:c5:c8:0f:67:f1:3c:1e:
42:57:09:ef:26:07:0f:52:e6:ee:82:85:85:19:c3:58:f6:93:
0d:4c:be:f4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBVKnp4hGlC4bAtPNnt5/lQTLzzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdDRjZBRDk1N0ZEOTZBNDI0RkY4M0Y2NzVBQ0FGQzdF
RUU3RUY4QjAeFw0yNDEyMTAyMjAxMzdaFw0yNTEyMDkyMjA2MzdaMDMxMTAvBgNV
BAMTKDlENTUzNTdERTRBMTQ2MDA2RDI3RTEzMUFFQzg4QkFBQ0I2MjYzQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnyK/c8/3vDy4NHifVjokaXVU
qCXOUORadNrUGISELZYpTLqwSxFcVCaNP7C/uwsa/rUE6UPuG50EUQV/arnf4nMT
6pyLNDwCEA73Zd3EtepYL06E2aLtBsPzZnHTPBQmm08FgDpLwVNOqg7xUhWlUS1+
JBN26QDHrLDesT8gc0ftJOA4Qh5wjGWTTZxUdbZbTZhttm8KviF25I1Bd6AGCKxt
RsUNOgwj8lSIIQOG54ZUHFLd/iGm3UAI8zS3ZoZIxL4ePaXM/FU1LnVyo3ZWKMvo
lv6XuDIsUTP6rePzQ66Bbe2Yta8bmCfmSPwOQZaANkPLbe1BSWYUe6paA5UjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnVU1feShRgBtJ+ExrsiLqstiY68wHwYDVR0j
BBgwFoAUp89q2Vf9lqQk/4P2dayvx+7n74swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC9BN0NGNkFEOTU3RkQ5NkE0MjRGRjgzRjY3NUFDQUZDN0VFRTdFRjhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3Q0Y2QUQ5NTdGRDk2QTQy
NEZGODNGNjc1QUNBRkM3RUVFN0VGOEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzMzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMzM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7GBiDANBgkqhkiG9w0BAQsFAAOCAQEAjglV
kXERvHCi9vgh8QcGKHLgJyeMYEh/c51cRYv0gPAB23/iw23vFPkW7x8Fo06ACCc7
cBUiLNCvPqIv+szpDeEQPqaJXtY+ohWX6enRwJigF+iBjcD7ToRn/xWAp9yR0UQb
XmAPb7tkrL2lK4/EotQe4vo9PqOiqm9G5pFLkCjk+jsxK3aOD2aIG8kM+PYD0VIz
1iwyvPLKrccTiZtYgpynJHoknIKfBTqdTZvbOM4dw35xgJ9bZrYkXF9JNJAnf2MK
M18zENF2oV1fEkGLIKy4vhO7q8D9iez0WknHWA3KYqvFyA9n8TweQlcJ7yYHD1Lm
7oKFhRnDWPaTDUy+9A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:48:48 2025 by rpki-client