Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa
File: 34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier: 6rb4EcevTNqEk6gWtgyWFJOeaCPx95xlVQdg6pg/pPo=
Subject key identifier: 6A:14:2F:66:64:DE:E8:B1:47:B4:CB:C0:A2:78:A9:66:71:DB:80:CF
Certificate issuer: /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial: 5A7421D0632B1E137194AF68C13576699A988E1F
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa
Signing time: Tue 22 Jul 2025 20:54:41 +0000
ROA not before: Tue 22 Jul 2025 20:49:41 +0000
ROA not after: Tue 21 Jul 2026 20:54:41 +0000
asID: 263427
IP address blocks: 45.162.242.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:74:21:d0:63:2b:1e:13:71:94:af:68:c1:35:76:69:9a:98:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Validity
Not Before: Jul 22 20:49:41 2025 GMT
Not After : Jul 21 20:54:41 2026 GMT
Subject: CN=6A142F6664DEE8B147B4CBC0A278A96671DB80CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:22:24:97:e9:ae:d0:1d:3e:30:5f:b4:c9:
6d:72:91:4b:6f:b7:2a:b1:89:15:70:e8:2a:b8:21:
80:49:cf:46:a9:10:1f:73:31:b2:b0:7b:18:d5:99:
2d:7d:60:0a:0c:01:78:d0:b4:f8:af:fb:d6:96:02:
a4:cf:38:01:16:c9:ec:3f:e5:8a:10:86:75:ef:eb:
78:b6:27:26:b0:db:dc:2f:27:88:2e:03:ef:43:2b:
e6:b5:9a:76:5c:ad:a8:5f:5e:60:8b:1e:4c:e5:55:
e0:31:66:73:73:ef:61:b6:41:8f:84:56:b2:5b:de:
53:ec:b7:d0:3e:bc:12:9f:5d:e1:ff:d2:b7:6d:8e:
54:3c:7b:1d:8e:f7:da:f1:f1:6e:85:d7:47:24:5b:
56:e3:15:b6:e6:6b:4b:44:c8:aa:ac:8d:12:0c:dd:
86:df:fc:79:ab:44:15:35:d6:af:ed:2a:e7:e8:f7:
ca:b7:31:b4:ad:db:76:5c:0c:80:13:c4:3b:a7:19:
f1:2b:14:8b:fe:b6:7d:8c:31:60:37:06:e8:dd:77:
4f:d1:0a:37:a5:c3:fb:f4:5f:89:5f:13:ae:98:19:
05:b5:7d:f7:94:d3:eb:e7:86:71:6d:17:a3:39:20:
7a:f8:bd:c6:81:53:ae:99:ea:f1:87:25:a4:e1:03:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:2F:66:64:DE:E8:B1:47:B4:CB:C0:A2:78:A9:66:71:DB:80:CF
X509v3 Authority Key Identifier:
keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234322e302f32342d3234203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.242.0/24
Signature Algorithm: sha256WithRSAEncryption
86:1d:cf:0f:6c:68:98:ed:25:79:34:bc:17:f2:44:81:15:62:
73:00:c3:cb:94:7f:ea:d3:79:34:6a:96:77:26:91:f4:96:e6:
58:14:85:f8:c7:ac:0c:5d:84:05:da:cc:37:e5:c1:d3:51:f1:
62:e0:6a:9e:ab:16:6e:05:f6:c9:7a:f3:bd:fc:0b:97:da:a1:
30:fb:6d:77:ac:b3:7f:e5:7a:3a:1c:cf:57:66:53:03:bd:aa:
a2:4f:ca:dc:0a:a1:36:47:40:eb:d0:80:d7:13:82:e3:cf:aa:
51:0c:16:6a:32:7f:2f:e4:54:96:17:3a:31:4a:cc:95:59:bf:
42:40:fe:ff:72:3a:73:f7:15:b7:23:36:42:a3:07:ac:5d:41:
59:44:a8:5f:d4:e2:fa:62:43:b6:95:d2:b5:3e:a5:f5:14:0f:
61:0b:a0:9f:a7:d9:ac:a0:d4:2f:95:b8:f4:19:c7:a1:84:e7:
ff:9d:cf:c3:e2:83:74:fe:51:e5:3a:45:ba:c8:93:98:f9:2d:
c3:ec:c6:cc:70:e2:7a:2a:0f:28:20:fe:f6:9c:13:ae:fd:f0:
e6:6f:a9:1c:f5:2b:2e:2a:f8:23:fa:cf:d6:ca:af:6b:69:55:
1b:c4:d9:a8:1b:60:b5:37:ad:56:8c:62:e8:c9:55:b6:71:16:
5c:de:2a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:03:58 2025 by rpki-client