Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e37312e302f32342d3234203d3e20323637323232.roa
File: 34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier: uFzjyJPTQCmSwhW7HJ86POCK4QcKTF3sb1TVogNfEdw=
Subject key identifier: ED:5F:4D:B4:64:9B:D4:EC:CA:B2:CD:4A:53:17:42:C8:5D:DE:50:9F
Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial: 7BF408105C9B56895C23D09436A434F1DF3537D9
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e37312e302f32342d3234203d3e20323637323232.roa
Signing time: Thu 06 Mar 2025 09:21:53 +0000
ROA not before: Thu 06 Mar 2025 09:16:53 +0000
ROA not after: Thu 05 Mar 2026 09:21:53 +0000
asID: 267222
IP address blocks: 45.229.71.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f4:08:10:5c:9b:56:89:5c:23:d0:94:36:a4:34:f1:df:35:37:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Validity
Not Before: Mar 6 09:16:53 2025 GMT
Not After : Mar 5 09:21:53 2026 GMT
Subject: CN=ED5F4DB4649BD4ECCAB2CD4A531742C85DDE509F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:75:8c:dd:cd:16:37:4f:25:1b:fc:54:7b:
54:6a:d7:41:10:47:d7:aa:53:03:b1:0a:f0:ed:98:
46:04:71:50:ce:3f:22:63:e9:8c:05:9c:a0:70:ad:
a9:56:20:33:5e:dc:7b:0c:2a:25:24:8a:46:a2:51:
eb:53:a5:94:e6:b0:cd:6f:b8:2e:81:b5:33:0e:7e:
d6:ab:af:f9:f9:94:08:fa:fc:c3:2a:ff:15:23:8a:
ed:23:3b:fe:c5:ce:a3:0c:9d:1f:b5:30:00:58:ae:
d4:b2:e2:76:80:90:52:a1:df:fd:71:3f:62:7e:2c:
38:e3:83:9e:30:46:9b:0f:75:39:b3:43:47:d7:00:
41:50:36:65:b1:ef:ee:72:70:40:2a:1d:b7:a5:d9:
ee:74:e7:dc:7d:aa:b5:8c:94:47:d4:a6:72:b6:ca:
2b:79:eb:77:90:45:ed:89:32:39:9c:02:a2:f5:b0:
d7:ee:8c:90:41:7b:22:30:84:21:ac:b9:6c:6f:09:
01:2f:76:b9:b1:9d:ef:ef:4e:00:66:01:e0:ef:b7:
fa:cf:aa:74:59:b0:f5:ce:b1:e5:4c:bc:ef:84:9e:
8a:10:a2:32:14:4e:69:b8:48:5c:0f:b3:bf:73:3d:
ec:f6:74:b3:90:df:72:a8:68:12:a1:e9:fb:f0:a6:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5F:4D:B4:64:9B:D4:EC:CA:B2:CD:4A:53:17:42:C8:5D:DE:50:9F
X509v3 Authority Key Identifier:
keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e37312e302f32342d3234203d3e20323637323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d3:bc:6e:2d:2c:a6:73:b7:52:c1:cc:20:41:e1:4a:a2:e5:
70:12:55:92:4f:bd:e4:6d:ae:1f:96:ed:97:72:ff:b1:14:3a:
a1:12:52:ee:b1:32:28:07:f7:7d:6a:85:e2:42:d3:d2:96:a6:
85:cc:4e:c2:14:ef:19:aa:71:aa:ec:b4:09:43:d5:c0:b9:c7:
e4:5d:59:f1:d2:ca:9a:e0:45:af:90:b0:3e:22:3b:05:8f:50:
81:9a:cb:50:85:10:d9:88:e9:e1:53:8e:16:20:22:f2:88:8c:
05:7a:c2:88:f6:4b:cd:3b:9c:17:d3:26:a2:23:bc:5e:42:af:
69:96:a0:dc:4e:9b:80:5b:65:92:4f:a0:0b:d0:dc:c6:e8:2d:
bd:40:b0:b4:3c:9f:c8:f2:64:68:63:e2:df:c6:ea:1b:fa:d3:
a8:88:e2:6a:39:38:9a:83:83:dd:6f:2a:ac:4e:28:d7:82:a4:
4a:33:79:f0:ad:d5:c5:b0:76:21:cf:2a:8c:39:93:6b:61:fb:
e0:95:19:2b:8e:ab:f0:87:07:5b:46:9c:b9:9f:79:e3:5e:e5:
f3:02:c7:f4:a1:c7:04:e4:0d:4f:91:73:fb:6b:45:ca:2e:3d:
a5:75:c8:73:b2:48:51:10:d6:d2:08:2b:a8:b6:ca:31:91:82:
36:b2:16:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe/QIEFybVolcI9CUNqQ08d81N9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMzQkQ0Njk0ODQ1QkE2NUNBNEFFMUJGNjIyQTFDNTk5
Q0I1M0Y3MjAeFw0yNTAzMDYwOTE2NTNaFw0yNjAzMDUwOTIxNTNaMDMxMTAvBgNV
BAMTKEVENUY0REI0NjQ5QkQ0RUNDQUIyQ0Q0QTUzMTc0MkM4NURERTUwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndXWM3c0WN08lG/xUe1Rq10EQ
R9eqUwOxCvDtmEYEcVDOPyJj6YwFnKBwralWIDNe3HsMKiUkikaiUetTpZTmsM1v
uC6BtTMOftarr/n5lAj6/MMq/xUjiu0jO/7FzqMMnR+1MABYrtSy4naAkFKh3/1x
P2J+LDjjg54wRpsPdTmzQ0fXAEFQNmWx7+5ycEAqHbel2e5059x9qrWMlEfUpnK2
yit563eQRe2JMjmcAqL1sNfujJBBeyIwhCGsuWxvCQEvdrmxne/vTgBmAeDvt/rP
qnRZsPXOseVMvO+EnooQojIUTmm4SFwPs79zPez2dLOQ33KoaBKh6fvwpvULAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7V9NtGSb1OzKss1KUxdCyF3eUJ8wHwYDVR0j
BBgwFoAUQzvUaUhFumXKSuG/YiocWZy1P3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o
a2UvMS80MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JENDY5NDg0NUJBNjVD
QTRBRTFCRjYyMkExQzU5OUNCNTNGNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlM3FUUFpwRGNibW9admhteGZCd1kzc2RSdnR2NlZzS1R5NDR5eVFNaGtlLzEv
MzQzNTJlMzIzMjM5MmUzNzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeVHMA0GCSqGSIb3DQEBCwUAA4IBAQBb07xuLSym
c7dSwcwgQeFKouVwElWST73kba4flu2Xcv+xFDqhElLusTIoB/d9aoXiQtPSlqaF
zE7CFO8ZqnGq7LQJQ9XAucfkXVnx0sqa4EWvkLA+IjsFj1CBmstQhRDZiOnhU44W
ICLyiIwFesKI9kvNO5wX0yaiI7xeQq9plqDcTpuAW2WST6AL0NzG6C29QLC0PJ/I
8mRoY+Lfxuob+tOoiOJqOTiag4PdbyqsTijXgqRKM3nwrdXFsHYhzyqMOZNrYfvg
lRkrjqvwhwdbRpy5n3njXuXzAsf0occE5A1PkXP7a0XKLj2ldchzskhRENbSCCuo
tsoxkYI2sha4
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:21:21 2025 by rpki-client