Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138392e302f32342d3234203d3e20323639343334.roa
File: 34352e3138362e3138392e302f32342d3234203d3e20323639343334.roa (raw, json)
Hash identifier: g8ca2UC2adhZHZ40cwuN9TOy7iNmBn8Bt27CYouQ7SI=
Subject key identifier: 64:01:C9:17:C4:26:2C:EC:5F:B4:5A:A3:AF:F3:17:C3:E7:9B:C2:30
Certificate issuer: /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial: 53136141378042D8D51565BEED8E98B365EB2D23
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138392e302f32342d3234203d3e20323639343334.roa
Signing time: Fri 20 Jun 2025 00:32:19 +0000
ROA not before: Fri 20 Jun 2025 00:27:19 +0000
ROA not after: Fri 19 Jun 2026 00:32:19 +0000
asID: 269434
IP address blocks: 45.186.189.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:13:61:41:37:80:42:d8:d5:15:65:be:ed:8e:98:b3:65:eb:2d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Validity
Not Before: Jun 20 00:27:19 2025 GMT
Not After : Jun 19 00:32:19 2026 GMT
Subject: CN=6401C917C4262CEC5FB45AA3AFF317C3E79BC230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8a:f1:29:68:03:ed:a1:44:72:81:ed:05:1b:
2b:20:b4:b1:79:05:0b:65:f9:04:be:6a:f1:40:cc:
fe:03:53:50:7a:43:28:67:0a:3e:d8:70:c0:a3:e3:
9d:7c:02:37:86:4f:61:91:87:b1:b8:08:35:8b:16:
62:94:ae:4e:f1:bb:0b:ec:90:2b:16:e5:05:5c:b4:
80:3e:cd:f7:6e:a2:4c:0d:e7:49:ed:a0:39:1a:6c:
c7:26:93:2c:27:bc:68:5d:95:7e:77:72:b7:ac:9a:
06:d2:2d:06:fa:96:69:d0:c0:56:0c:1a:60:39:6b:
a9:eb:55:61:80:a6:de:79:38:a5:a5:27:43:ee:d1:
60:b2:51:bb:c2:5e:7c:9d:2f:22:a8:ba:01:1a:34:
0e:ee:8c:e0:75:78:74:05:f6:d8:41:87:39:47:e3:
9c:24:2a:1a:f7:3f:f2:07:36:e7:86:3e:d2:8a:72:
fe:af:17:16:99:ff:d4:03:76:e1:71:36:3d:9c:84:
b7:52:d1:62:d5:3d:ea:80:db:32:3c:c6:75:59:80:
ea:e6:d0:05:0a:43:dd:14:04:ab:82:7d:2e:6e:a2:
81:2c:47:e5:5c:be:90:71:8c:56:35:b6:f2:a8:03:
9a:64:2e:35:e0:7d:8c:ff:f1:8d:5f:18:c4:21:66:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:C9:17:C4:26:2C:EC:5F:B4:5A:A3:AF:F3:17:C3:E7:9B:C2:30
X509v3 Authority Key Identifier:
keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3138392e302f32342d3234203d3e20323639343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1a:d0:5e:d0:53:12:d5:5c:93:08:66:f3:01:b6:a0:d5:23:
68:b1:75:01:8c:68:5d:66:44:ef:6e:dc:da:e6:14:f1:71:cb:
54:bb:4b:e1:3f:71:39:d1:57:11:f2:64:bc:d7:71:00:3c:20:
5f:3a:95:7e:0f:6f:11:6a:67:c7:11:36:aa:f2:a0:20:7c:67:
ed:0f:a3:f7:6b:43:87:8d:8f:1b:bd:47:52:a9:75:06:0c:6e:
be:d9:05:1c:15:8d:b4:31:3e:ca:e0:35:0d:d7:30:31:64:d3:
f9:49:24:43:3b:90:88:5a:22:fa:24:1a:c4:09:8a:e0:f6:13:
ad:9d:22:29:88:eb:c9:4a:8b:77:e7:0d:9a:d2:38:17:20:20:
2c:60:73:8d:53:26:5c:19:65:2c:60:5d:bb:bf:16:15:36:db:
e3:17:f0:ad:c5:28:f0:9f:e1:82:c4:94:19:a7:dd:21:1b:ff:
a8:96:b7:39:ed:3b:0c:c9:34:a8:13:33:41:0d:c8:94:9f:5d:
8c:ee:b6:be:41:36:11:14:cb:dd:f2:33:54:b8:40:86:41:fe:
58:b4:53:66:97:45:c9:0a:27:d0:bc:4d:c4:6c:8b:7c:3d:66:
0f:10:75:8a:7d:8b:c2:d2:2b:e4:91:20:f3:1c:17:bd:dc:07:
84:b9:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:24:56 2025 by rpki-client