Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e342e32302e302f32322d3234203d3e20323632343539.roa
File: 34352e342e32302e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier: Ws/ep9nB5+aP5mx1f8+MUDwD9JVywnsa593M6llvdA0=
Subject key identifier: 56:0F:25:BE:B7:2B:07:03:B2:CF:40:7E:B1:EE:BA:08:E1:11:23:2F
Certificate issuer: /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial: 7447BB01B40FB06E5C2E3FEE639E794E2C13F587
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e342e32302e302f32322d3234203d3e20323632343539.roa
Signing time: Thu 06 Mar 2025 03:04:08 +0000
ROA not before: Thu 06 Mar 2025 02:59:08 +0000
ROA not after: Thu 05 Mar 2026 03:04:08 +0000
asID: 262459
IP address blocks: 45.4.20.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:47:bb:01:b4:0f:b0:6e:5c:2e:3f:ee:63:9e:79:4e:2c:13:f5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Validity
Not Before: Mar 6 02:59:08 2025 GMT
Not After : Mar 5 03:04:08 2026 GMT
Subject: CN=560F25BEB72B0703B2CF407EB1EEBA08E111232F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:f4:37:a3:d9:97:45:bf:4d:00:ca:a7:77:
51:2e:9c:0c:d0:c5:36:3b:79:f8:cd:3c:e6:cc:51:
48:9f:1a:d2:a3:fb:e2:d7:76:50:da:4b:74:c7:3b:
86:4a:72:29:66:cd:ef:4b:84:3c:a1:d4:6b:9a:77:
91:83:67:31:08:ac:4a:88:9e:7e:3c:bb:9c:11:b4:
d4:b9:db:9f:17:44:ab:4a:1a:db:ce:57:6b:ea:a2:
a2:56:05:38:4f:25:37:38:a3:7a:84:6e:c5:f5:b1:
d3:66:64:4b:cd:4b:4f:35:bf:f4:f3:18:65:b5:88:
c4:b5:f8:c9:a6:7e:85:4c:1b:65:3f:aa:2b:9c:9d:
72:e6:8d:74:1c:78:50:fe:ed:2d:55:e0:f7:59:0d:
ed:c2:1d:73:7d:da:cc:1c:d3:f3:d7:be:71:1c:c3:
af:96:88:05:b5:e4:e8:ef:f2:cc:0b:b8:eb:80:bf:
ab:3a:a1:c1:eb:6d:4b:d0:2f:c5:87:a7:3a:7e:76:
4c:9f:f7:f8:e1:c2:ae:82:c5:02:c0:5a:d3:73:cd:
a1:69:26:c0:8c:02:2a:05:6a:14:8a:cf:ba:33:5a:
49:7a:66:6d:35:2f:a2:a0:30:56:11:f3:a7:75:df:
90:fd:9b:a2:df:6c:b7:42:d7:71:44:21:69:6f:c7:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:25:BE:B7:2B:07:03:B2:CF:40:7E:B1:EE:BA:08:E1:11:23:2F
X509v3 Authority Key Identifier:
keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/34352e342e32302e302f32322d3234203d3e20323632343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.20.0/22
Signature Algorithm: sha256WithRSAEncryption
85:b0:6f:21:c5:c1:ea:3b:39:11:7a:7d:64:9f:65:1d:92:02:
72:37:44:85:10:b0:34:eb:84:a5:f5:eb:0a:da:c2:b2:d3:57:
19:38:cf:7c:08:9d:11:d0:05:f5:11:7d:ab:2c:ab:0a:28:bb:
49:6f:24:ba:60:67:72:f8:49:54:27:c4:7b:6d:8a:d0:2e:3f:
c4:52:f2:cc:07:7f:a6:6d:a1:49:8d:91:d2:fe:89:df:1d:f9:
d4:f1:f0:9e:f6:cc:1b:6e:8b:f3:2f:56:31:48:84:99:ad:36:
50:aa:6e:ed:ff:7d:58:41:b0:fc:f6:0c:08:ff:c5:8a:d0:9b:
76:f3:0c:80:32:14:78:c1:07:4f:eb:e1:90:e0:a7:38:f8:51:
a1:7b:52:4d:b6:7b:bb:f5:2e:ad:8f:4f:0a:84:3c:34:5c:5f:
af:d1:61:49:f2:c3:7c:da:b0:11:d2:f2:85:02:91:5b:c5:1f:
61:04:50:50:01:ab:3c:b0:be:0d:da:e5:91:3d:52:5d:e0:46:
32:31:95:04:c1:b1:54:63:44:f7:12:00:75:0d:ef:be:8d:46:
38:2a:e1:1e:72:81:b2:01:85:02:99:46:61:02:47:fe:8c:b1:
38:a4:17:5c:ad:00:1a:a1:18:a3:a7:8e:b1:c1:2f:72:a4:90:
e7:93:d4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:32:01 2025 by rpki-client