Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/34352e3136332e33322e302f32322d3332203d3e20323638353934.roa
File: 34352e3136332e33322e302f32322d3332203d3e20323638353934.roa (raw, json)
Hash identifier: 5mdpYMSk8aBkXo+URu8nhlR4ncIAhOJoDvBvw57oGg4=
Subject key identifier: 06:1C:FD:34:62:E0:A0:96:5A:98:D0:9F:1E:57:27:F7:93:55:34:14
Certificate issuer: /CN=FF748D018F29A13A92FABAAC30F3690B3B43CCA1
Certificate serial: 3CBC6A9A56B747F859BE9CB41D9C46ADF6147556
Authority key identifier: FF:74:8D:01:8F:29:A1:3A:92:FA:BA:AC:30:F3:69:0B:3B:43:CC:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/34352e3136332e33322e302f32322d3332203d3e20323638353934.roa
Signing time: Thu 21 Aug 2025 01:17:36 +0000
ROA not before: Thu 21 Aug 2025 01:12:36 +0000
ROA not after: Thu 20 Aug 2026 01:17:36 +0000
asID: 268594
IP address blocks: 45.163.32.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bc:6a:9a:56:b7:47:f8:59:be:9c:b4:1d:9c:46:ad:f6:14:75:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF748D018F29A13A92FABAAC30F3690B3B43CCA1
Validity
Not Before: Aug 21 01:12:36 2025 GMT
Not After : Aug 20 01:17:36 2026 GMT
Subject: CN=061CFD3462E0A0965A98D09F1E5727F793553414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:c0:68:37:4a:ed:90:f9:9b:13:2a:2f:24:
27:9d:42:55:c2:10:81:ac:54:92:73:dd:63:2b:90:
37:ab:9c:bc:fa:fd:db:97:46:11:2d:18:0a:a9:32:
22:8a:32:1f:79:8c:96:22:ba:70:cc:50:7d:65:b9:
e5:7c:ab:49:d5:71:3a:47:d3:40:f8:fb:6b:99:8a:
2c:ce:ab:ad:4d:ce:ed:8c:e2:d6:8b:8f:70:da:6a:
16:c2:3e:f6:d2:95:8d:1a:54:6c:b3:40:44:6b:97:
d1:5a:6b:67:1c:7d:ac:c5:c2:31:3f:da:0c:ed:75:
3d:7e:4d:20:0e:dd:ee:e8:68:1b:7a:4b:4c:fa:2a:
5c:62:2c:e5:e0:86:e8:4f:01:61:1d:04:50:b7:c3:
b8:9c:e3:11:5a:42:95:93:29:14:0d:db:bd:3c:b2:
61:de:fc:12:16:4e:75:bb:ac:50:af:19:64:12:20:
9f:47:07:4a:18:1c:73:fc:3f:e0:c8:d4:d2:ab:43:
9a:ca:f4:03:98:5a:1d:19:e8:6e:e1:14:ce:ec:99:
14:f8:32:b6:cd:6b:77:e0:4a:be:c2:0e:62:fa:37:
69:b2:55:c8:99:95:a4:76:5f:46:b9:43:6c:36:ed:
f3:d1:bf:07:65:73:59:f4:72:65:42:b9:10:6f:57:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:FD:34:62:E0:A0:96:5A:98:D0:9F:1E:57:27:F7:93:55:34:14
X509v3 Authority Key Identifier:
keyid:FF:74:8D:01:8F:29:A1:3A:92:FA:BA:AC:30:F3:69:0B:3B:43:CC:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF748D018F29A13A92FABAAC30F3690B3B43CCA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsfUf7aETP5ra1e7esic51oHm1tfaKL7L5npiriwpPr/0/34352e3136332e33322e302f32322d3332203d3e20323638353934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.32.0/22
Signature Algorithm: sha256WithRSAEncryption
93:1b:b8:a9:7c:66:1e:0b:af:34:9a:63:7e:34:14:6e:38:78:
3d:23:43:56:53:c4:35:c9:42:58:e7:b8:21:2e:51:b0:75:53:
bb:e2:d1:68:45:3c:d9:c8:42:1f:2d:7e:2d:66:9a:53:ef:41:
07:5c:c0:33:f1:1f:54:bc:1f:1e:1e:f8:6c:47:91:a7:26:82:
07:21:d3:8a:6b:02:b3:1e:b5:ae:b6:df:ae:8d:11:e4:7e:be:
23:13:ae:43:2e:a1:fb:6c:fc:b7:7b:69:ed:15:05:87:38:c5:
08:23:75:8a:58:20:d7:a1:53:fe:f6:f4:23:24:52:9a:f5:40:
99:f1:6d:36:7d:cf:1e:84:5d:b8:0e:24:99:4a:81:0e:a5:86:
30:ca:e2:3a:5d:89:72:44:98:3b:35:d1:af:39:b3:60:bd:50:
c2:3b:cd:2c:ea:b0:09:76:e1:47:05:d0:e2:bb:0d:58:2d:25:
e5:88:36:c4:57:a8:7d:57:d9:3c:df:69:65:19:e5:13:23:ef:
a0:ea:d8:17:e5:ea:7b:46:ed:0e:59:a1:bf:0c:c2:f4:c8:e2:
d0:0d:d1:77:6c:9a:14:ec:4d:00:19:93:3e:f0:f1:36:89:62:
73:f0:7e:a2:ac:8f:6e:28:0b:28:68:cd:08:41:23:62:75:9d:
57:0e:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:51 2025 by rpki-client