Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa
File: 34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa (raw, json)
Hash identifier: SR+iKMHfimEi6IWEPgrGJUY5z/UMNN1jyiagjTPEHvY=
Subject key identifier: BE:89:DC:77:0B:82:06:8B:34:95:BD:18:AC:D5:93:87:53:64:61:BC
Certificate issuer: /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial: 09223C529A632BAB3E038FE7CD6B8022D02879B5
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa
Signing time: Tue 22 Jul 2025 20:54:40 +0000
ROA not before: Tue 22 Jul 2025 20:49:40 +0000
ROA not after: Tue 21 Jul 2026 20:54:40 +0000
asID: 263427
IP address blocks: 45.162.240.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:22:3c:52:9a:63:2b:ab:3e:03:8f:e7:cd:6b:80:22:d0:28:79:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Validity
Not Before: Jul 22 20:49:40 2025 GMT
Not After : Jul 21 20:54:40 2026 GMT
Subject: CN=BE89DC770B82068B3495BD18ACD59387536461BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:07:63:58:76:ac:16:5c:09:15:84:6b:c9:
60:f8:6e:3a:60:b9:5d:e8:43:9b:a5:8d:53:eb:5a:
e8:64:c6:77:f7:d6:b1:4f:b8:66:37:f4:71:83:be:
19:ec:ee:9a:ef:3d:6c:c7:2f:72:5a:ce:b0:1f:73:
c3:5f:4b:c8:ab:1d:96:5d:42:c5:a9:af:2a:ad:a9:
f9:04:93:1a:53:9a:38:5c:6c:0b:93:e9:86:c1:71:
af:7e:bb:0a:7f:00:64:59:e0:99:1c:96:76:60:59:
66:cc:74:15:e4:08:fd:73:72:73:9c:3e:59:cb:5e:
21:be:5e:38:95:8c:32:87:d6:3b:2b:f1:1a:f9:d3:
19:88:df:85:3c:0e:f3:c6:7e:b3:c7:f8:ee:ec:e0:
03:77:91:75:f8:94:6c:1a:df:01:ae:aa:ec:b4:69:
db:70:17:14:53:46:ea:66:63:94:ca:77:0b:06:50:
33:db:61:22:ab:8d:cc:04:89:88:91:3e:3a:27:c4:
f0:22:31:bf:d8:7e:c0:47:12:ca:65:de:b3:4d:65:
e3:51:56:e4:33:c2:3b:b4:8e:b9:97:97:65:5c:67:
21:2a:dd:9b:aa:93:58:b8:a3:41:5b:2b:00:dc:e0:
6e:c9:2b:57:90:ec:9b:26:73:91:29:c1:23:39:32:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:DC:77:0B:82:06:8B:34:95:BD:18:AC:D5:93:87:53:64:61:BC
X509v3 Authority Key Identifier:
keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3232203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:fd:fb:36:22:c2:ee:28:64:ac:0f:d6:91:81:f6:e3:dd:64:
87:11:74:3b:87:81:31:ac:68:7e:b4:4e:49:d5:c3:ef:88:de:
90:ae:a9:f3:e9:a9:e6:fd:0b:ef:86:b1:3f:b2:18:79:74:03:
ff:bc:0f:d3:73:23:34:ce:1c:d1:a0:68:16:94:a5:db:ce:ec:
3a:b5:c0:53:f0:fe:46:58:5d:f9:39:f5:c0:9f:9c:bf:d1:3d:
67:71:72:e2:25:7b:30:8a:bc:49:68:d1:8b:50:e6:b0:8c:3b:
d0:22:6c:ff:7e:68:13:a5:a9:74:13:d7:79:fb:5b:55:13:32:
9f:f1:98:be:75:35:b8:ba:0b:b0:19:7b:e9:a9:c7:c2:1d:43:
92:bd:ef:39:1a:fd:cb:fa:8c:43:36:0f:99:39:22:f5:85:c4:
dd:47:c7:4e:32:4d:c4:c7:15:6d:09:c2:30:b4:7e:69:4b:24:
d7:25:44:50:20:85:9a:be:93:ff:e4:63:74:32:a8:4f:0b:19:
92:fd:38:fd:e9:1a:04:0d:86:70:27:c2:6d:df:1c:65:86:bf:
18:b2:09:7a:d6:8f:4f:00:c2:c0:ab:68:2a:14:3e:36:12:f3:
48:5e:87:2c:17:a9:44:e7:f2:12:14:32:66:2f:a9:36:a4:d9:
5e:6e:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:15:23 2025 by rpki-client