Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31372e302f32342d3234203d3e20323638303837.roa
File: 34352e3136392e31372e302f32342d3234203d3e20323638303837.roa (raw, json)
Hash identifier: ble/6ujdkYtn4KoPnOPcGWlQo9Lcdov+Pa7U0QdKD1s=
Subject key identifier: F0:38:8D:3A:52:0C:97:A9:1B:B1:25:83:13:73:A9:4D:3D:C1:1E:2C
Certificate issuer: /CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Certificate serial: 4A8C424BAE7F9402B039F531B380159C20F4485C
Authority key identifier: 45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31372e302f32342d3234203d3e20323638303837.roa
Signing time: Tue 18 Mar 2025 14:38:43 +0000
ROA not before: Tue 18 Mar 2025 14:33:43 +0000
ROA not after: Tue 17 Mar 2026 14:38:43 +0000
asID: 268087
IP address blocks: 45.169.17.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8c:42:4b:ae:7f:94:02:b0:39:f5:31:b3:80:15:9c:20:f4:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Validity
Not Before: Mar 18 14:33:43 2025 GMT
Not After : Mar 17 14:38:43 2026 GMT
Subject: CN=F0388D3A520C97A91BB125831373A94D3DC11E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:18:49:f3:c6:56:68:61:ba:3a:f7:77:ff:
e5:cf:12:bc:e8:87:7a:a9:cb:c5:38:cc:0c:1b:b0:
10:8f:a5:a2:30:66:e5:0f:3d:f0:41:45:58:72:1a:
f5:b1:d3:0c:90:a7:b3:8e:bf:c0:78:a6:ec:50:c3:
43:02:ba:b2:63:9d:e6:15:63:54:78:2b:78:03:c4:
cc:cd:30:83:12:a0:e5:97:e1:57:f2:72:b6:e4:60:
99:b1:0f:b0:98:ab:a1:a7:f2:31:ae:9d:ee:04:a0:
a8:76:6e:31:ad:17:ca:85:b2:92:35:3c:87:1c:74:
c6:fe:57:6b:23:bf:ee:2e:44:a7:b6:f3:1c:b6:ac:
ee:f4:53:71:ad:21:1d:9c:76:27:eb:f2:66:39:71:
26:26:d8:2e:14:52:ca:4e:60:52:35:52:bd:6b:10:
41:c0:6e:e5:2c:ff:53:11:a2:77:3c:e4:01:de:01:
8c:01:e2:f7:af:84:3f:c9:a5:e2:fa:ee:fc:da:db:
02:87:a4:ff:d3:e1:28:78:17:04:04:24:eb:87:fd:
66:74:67:36:de:d8:50:aa:1d:e7:ca:2f:25:f6:67:
64:4b:ce:bf:e1:94:83:f5:a9:28:e7:0c:a4:46:ad:
f4:32:97:d5:4c:23:94:1d:53:67:07:ee:38:76:39:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:8D:3A:52:0C:97:A9:1B:B1:25:83:13:73:A9:4D:3D:C1:1E:2C
X509v3 Authority Key Identifier:
keyid:45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31372e302f32342d3234203d3e20323638303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.17.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3e:97:f4:6c:84:c4:96:2e:2b:6c:90:00:40:45:40:04:77:
d5:a4:d5:e8:8f:d9:2d:97:bf:00:9b:10:65:52:b0:03:44:d7:
eb:ff:a8:2c:82:d9:4a:e4:44:38:a8:6c:d0:e8:47:9d:f2:5e:
7d:4d:9c:95:9b:e5:11:e7:33:28:47:81:b8:33:86:2a:fa:f3:
7a:5f:3b:4b:cf:21:f8:c0:cf:99:0e:ae:a7:16:fc:ef:21:ac:
43:b7:fb:17:ca:5a:99:2e:84:ef:1a:a3:53:34:99:f9:75:4c:
44:37:cd:35:c4:37:41:6b:ea:6c:22:6e:4e:3d:2c:c8:4d:ee:
93:e2:5a:d6:c9:05:3e:d4:dd:fd:46:b2:29:7d:3b:25:c8:b8:
9c:e1:6f:c9:f9:59:7f:16:cb:bc:43:53:9c:d7:62:8e:e6:eb:
bd:3d:00:14:4e:e5:a7:57:b8:ea:50:aa:9e:20:30:b7:81:21:
d9:71:c4:a3:64:8b:58:b3:24:db:48:79:b2:75:7a:05:fb:93:
35:98:33:46:22:05:da:2d:45:b0:47:32:20:0d:fe:1f:78:24:
c8:3a:8f:d2:ec:5f:ce:ce:33:09:f9:fc:67:6e:1b:d7:dc:5e:
cb:c6:33:83:bc:33:c8:ac:79:6f:e8:05:60:55:f0:3d:56:ef:
7b:2b:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:43:46 2025 by rpki-client