Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32342d3234203d3e20323639343334.roa
File: 34352e3138362e3138382e302f32342d3234203d3e20323639343334.roa (raw, json)
Hash identifier: IZUaUslJVMjrY52kI00d0oyzvVeofSy/Fk9BOovKXAo=
Subject key identifier: 49:6B:CC:7D:19:1D:FC:7A:8D:2D:E4:88:66:CE:7D:C1:34:88:5D:36
Certificate issuer: /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial: 2664F13189D8DB7AFD04E9A6409A9FD44DB597BD
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32342d3234203d3e20323639343334.roa
Signing time: Fri 20 Jun 2025 00:32:19 +0000
ROA not before: Fri 20 Jun 2025 00:27:19 +0000
ROA not after: Fri 19 Jun 2026 00:32:19 +0000
asID: 269434
IP address blocks: 45.186.188.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:64:f1:31:89:d8:db:7a:fd:04:e9:a6:40:9a:9f:d4:4d:b5:97:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Validity
Not Before: Jun 20 00:27:19 2025 GMT
Not After : Jun 19 00:32:19 2026 GMT
Subject: CN=496BCC7D191DFC7A8D2DE48866CE7DC134885D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:e3:51:ca:5d:57:7d:62:00:f0:e9:ce:9b:
84:fc:29:d8:a2:36:70:23:a0:65:05:19:4e:73:d5:
95:1c:5f:b1:95:3f:83:a2:b3:6b:0c:b1:c9:f1:54:
21:2d:b7:9c:62:c3:92:5d:3a:a2:36:2b:d7:16:fa:
95:6f:d8:c4:7b:a9:ca:1a:e1:e1:d8:f3:26:ad:4c:
7f:18:d5:ba:c7:ac:7a:83:82:04:79:80:df:6e:34:
91:00:28:ca:76:d2:32:3e:f5:80:58:0f:35:07:f4:
b7:9b:54:d4:6f:27:93:45:20:24:f5:1a:f2:79:95:
b3:81:67:0f:6f:6e:dd:aa:55:d1:2e:3a:6a:1f:80:
84:21:75:a4:e7:74:8f:85:d8:e3:16:86:d4:e0:5e:
d8:bd:be:95:8c:7a:69:73:8f:4f:5e:85:6d:54:8a:
c9:fe:a1:45:e2:68:d3:45:e7:57:76:1c:62:34:b1:
04:d2:74:a6:29:70:9c:12:05:3f:12:9c:a8:dd:6b:
7f:0d:b7:ed:08:dd:76:a6:1f:3b:91:ca:87:d6:b6:
d7:54:67:70:f6:9b:69:c7:4a:d9:d3:ee:4b:3d:05:
c6:b5:03:3b:40:67:0a:ea:b9:6c:2b:cd:05:a8:72:
a2:dd:78:da:db:f8:46:b1:f1:11:c7:43:eb:36:ac:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6B:CC:7D:19:1D:FC:7A:8D:2D:E4:88:66:CE:7D:C1:34:88:5D:36
X509v3 Authority Key Identifier:
keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138382e302f32342d3234203d3e20323639343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:81:43:46:65:97:37:28:ac:65:d1:09:cc:cc:e7:22:c8:70:
da:de:31:28:82:6b:29:e3:aa:c2:13:d9:2e:8c:e8:8a:3e:76:
ba:4a:0c:6f:00:c1:0b:4f:a4:ce:22:1b:6e:d7:27:86:7f:a2:
8f:1a:e5:7e:5e:0d:5f:93:93:c9:e1:3a:54:10:d3:7b:c2:56:
36:27:61:a7:ed:00:c2:5b:8d:77:c4:95:d8:21:15:95:05:29:
3a:bf:30:48:c3:b8:80:cc:e3:a3:cc:eb:56:02:02:54:ad:46:
78:40:ba:e0:4b:60:31:72:b1:1f:eb:76:bb:d9:c3:c8:e8:da:
b0:5f:0f:1d:b1:b1:61:ce:69:bc:e4:b0:75:88:fc:9d:c7:7d:
5e:4c:79:a3:93:8a:73:18:5a:e1:58:64:d2:99:17:e6:0a:99:
18:2d:b7:3b:3f:20:72:89:2b:cc:ba:f5:cf:46:df:36:1c:46:
75:bc:10:43:71:65:1b:03:39:17:1b:61:65:12:2f:a5:e1:f1:
b5:29:91:8e:7d:d1:fc:4a:76:50:25:f7:58:e9:23:3a:8c:5c:
78:4d:98:64:e8:32:1b:38:8d:ce:b4:b2:8e:c2:c6:fd:fa:6f:
53:e8:48:fe:bb:e1:46:21:02:94:a4:10:50:4a:c5:4d:08:e1:
d0:61:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:18:05 2025 by rpki-client