Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3232203d3e20323639343334.roa
File: 34352e3138362e3138382e302f32322d3232203d3e20323639343334.roa (raw, json)
Hash identifier: brikL2kACJ/jjqPuUDv5kL7LQdctyn0fGXNVrOQUDDg=
Subject key identifier: 46:DD:75:FC:4C:90:46:A7:13:E0:F9:24:67:1E:62:6E:04:E3:30:54
Certificate issuer: /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial: 0B224872F47CD0B8B7BEB3059693DF576E4FE084
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3232203d3e20323639343334.roa
Signing time: Fri 20 Jun 2025 00:32:19 +0000
ROA not before: Fri 20 Jun 2025 00:27:19 +0000
ROA not after: Fri 19 Jun 2026 00:32:19 +0000
asID: 269434
IP address blocks: 45.186.188.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:22:48:72:f4:7c:d0:b8:b7:be:b3:05:96:93:df:57:6e:4f:e0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Validity
Not Before: Jun 20 00:27:19 2025 GMT
Not After : Jun 19 00:32:19 2026 GMT
Subject: CN=46DD75FC4C9046A713E0F924671E626E04E33054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:f4:3f:31:6c:4d:85:7e:ed:54:67:61:9c:
a2:64:71:80:ac:29:b7:81:ae:65:04:1f:b0:3b:73:
fe:34:ca:29:28:ac:6c:27:f4:76:b3:60:58:66:85:
1c:23:ba:22:73:32:18:3c:61:2f:3b:f9:fd:9f:4d:
51:56:d2:50:48:d0:24:b1:09:8a:ee:cd:f2:dd:69:
42:00:eb:b1:56:13:e5:f5:b9:2d:dc:90:85:6d:48:
b4:96:08:0b:42:98:4d:25:4a:b8:13:aa:52:98:e4:
03:ad:72:24:15:4a:13:d9:5e:5d:cb:6f:82:51:94:
8a:6b:82:d6:3f:e3:52:e0:f8:8e:ef:e3:a5:a2:9b:
f8:3c:d9:3d:55:ad:3a:61:5a:5b:a3:85:2b:a9:87:
48:b4:67:4e:ea:c8:4a:84:65:a1:8d:3f:e7:56:ea:
0b:7c:da:d0:9b:c9:62:35:e9:90:f7:ee:29:6b:eb:
58:8c:21:a0:7a:d1:6e:3e:9c:50:cf:11:21:9f:92:
d8:30:98:83:79:03:af:e5:4c:a2:f5:1a:d2:da:7d:
ed:55:b1:b5:71:7d:16:f1:4f:54:70:38:27:d9:76:
52:98:39:31:b9:df:16:36:cf:fb:82:26:81:9a:8e:
bc:0b:cb:19:0f:8d:e8:04:68:34:05:2d:d5:2f:5f:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DD:75:FC:4C:90:46:A7:13:E0:F9:24:67:1E:62:6E:04:E3:30:54
X509v3 Authority Key Identifier:
keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32322d3232203d3e20323639343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.188.0/22
Signature Algorithm: sha256WithRSAEncryption
db:d4:87:be:20:c9:3a:d3:fb:ec:47:6d:2a:83:8b:84:6a:f6:
ad:29:5c:a3:b8:b6:29:f4:b0:c2:e2:cb:3e:9f:24:08:5d:62:
c8:fd:54:d5:2c:ac:4e:5a:e0:a1:63:2e:41:58:19:b0:d4:ff:
d7:0f:13:ef:d4:54:3e:ef:00:2c:a7:ee:f8:7c:6d:36:ed:95:
b0:c2:86:95:94:3a:e8:86:41:80:96:b2:16:be:f8:17:5d:05:
53:c2:4a:43:d6:01:9f:aa:eb:11:67:35:b5:c2:3a:ec:81:a4:
b6:cc:8e:6a:43:5d:81:fb:ff:15:f9:f3:b0:42:a4:aa:72:73:
29:16:c0:be:dd:b6:a5:4e:e8:64:ee:90:06:d4:70:44:f6:99:
a4:b2:f4:b6:e8:0a:42:65:3a:bc:51:c3:bf:06:c2:55:ad:8b:
66:74:95:08:63:c2:64:46:57:3d:f2:fa:44:7e:74:96:e0:50:
95:b9:7b:d0:f8:61:50:6d:6d:2c:87:29:90:c8:fc:4d:0e:f0:
0a:55:f2:af:a9:b7:78:3b:a7:99:2e:6a:57:f2:35:8c:f4:4f:
01:08:5e:51:35:50:b5:c1:5f:ff:e2:12:45:11:28:d5:d3:90:
d9:b7:e0:09:de:4d:32:df:d1:dd:f5:68:41:4a:87:c6:c2:8a:
93:ff:d8:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCyJIcvR80Li3vrMFlpPfV25P4IQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNBRDkxOUZDQ0EwMEJDMzgzRDZENjM5OEI5NkIxRDc3
QUFGQjQ3NjAeFw0yNTA2MjAwMDI3MTlaFw0yNjA2MTkwMDMyMTlaMDMxMTAvBgNV
BAMTKDQ2REQ3NUZDNEM5MDQ2QTcxM0UwRjkyNDY3MUU2MjZFMDRFMzMwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhmfQ/MWxNhX7tVGdhnKJkcYCs
KbeBrmUEH7A7c/40yikorGwn9HazYFhmhRwjuiJzMhg8YS87+f2fTVFW0lBI0CSx
CYruzfLdaUIA67FWE+X1uS3ckIVtSLSWCAtCmE0lSrgTqlKY5AOtciQVShPZXl3L
b4JRlIprgtY/41Lg+I7v46Wim/g82T1VrTphWlujhSuph0i0Z07qyEqEZaGNP+dW
6gt82tCbyWI16ZD37ilr61iMIaB60W4+nFDPESGfktgwmIN5A6/lTKL1GtLafe1V
sbVxfRbxT1RwOCfZdlKYOTG53xY2z/uCJoGajrwLyxkPjegEaDQFLdUvX6DJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURt11/EyQRqcT4PkkZx5ibgTjMFQwHwYDVR0j
BBgwFoAU862Rn8ygC8OD1tY5i5ax13qvtHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkx2aWtLSEE0b2J4Nmluc1RQalBUVUxieWVvcUhobWg0OHVaZGhIaDJK
OHcvMC9GM0FEOTE5RkNDQTAwQkMzODNENkQ2Mzk4Qjk2QjFENzdBQUZCNDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQUQ5MTlGQ0NBMDBCQzM4
M0Q2RDYzOThCOTZCMUQ3N0FBRkI0NzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMdmlrS0hBNG9ieDZpbnNUUGpQVFVMYnllb3FIaG1oNDh1WmRoSGgySjh3LzAv
MzQzNTJlMzEzODM2MmUzMTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIturwwDQYJKoZIhvcNAQELBQADggEBANvUh74g
yTrT++xHbSqDi4Rq9q0pXKO4tin0sMLiyz6fJAhdYsj9VNUsrE5a4KFjLkFYGbDU
/9cPE+/UVD7vACyn7vh8bTbtlbDChpWUOuiGQYCWsha++BddBVPCSkPWAZ+q6xFn
NbXCOuyBpLbMjmpDXYH7/xX587BCpKpycykWwL7dtqVO6GTukAbUcET2maSy9Lbo
CkJlOrxRw78GwlWti2Z0lQhjwmRGVz3y+kR+dJbgUJW5e9D4YVBtbSyHKZDI/E0O
8ApV8q+pt3g7p5kualfyNYz0TwEIXlE1ULXBX//iEkURKNXTkNm34AneTTLf0d31
aEFKh8bCipP/2Ow=
-----END CERTIFICATE-----
Generated at Thu Jul 3 17:08:23 2025 by rpki-client