Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3138362e39322e302f32342d3234203d3e20323638313833.roa
File: 34352e3138362e39322e302f32342d3234203d3e20323638313833.roa (raw, json)
Hash identifier: d/SIiWYDTCdfpDzkwCwhavyT5CFLWN+IbJsBkxLqR0c=
Subject key identifier: 68:3E:FA:85:78:9F:E1:64:7C:57:C2:F4:D1:3B:DF:CF:C6:AF:1F:D2
Certificate issuer: /CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
Certificate serial: 3E788382B78523C327D4C476CE659869549538A7
Authority key identifier: 43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3138362e39322e302f32342d3234203d3e20323638313833.roa
Signing time: Fri 23 May 2025 18:48:27 +0000
ROA not before: Fri 23 May 2025 18:43:27 +0000
ROA not after: Fri 22 May 2026 18:48:27 +0000
asID: 268183
IP address blocks: 45.186.92.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:78:83:82:b7:85:23:c3:27:d4:c4:76:ce:65:98:69:54:95:38:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430FB5BDF465EB5283536F57FCCA377B820BED2A
Validity
Not Before: May 23 18:43:27 2025 GMT
Not After : May 22 18:48:27 2026 GMT
Subject: CN=683EFA85789FE1647C57C2F4D13BDFCFC6AF1FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:53:df:5f:c3:11:ff:5a:61:5a:41:9b:0a:
ce:70:d7:11:9d:77:41:78:16:10:d0:1b:6a:f0:83:
d8:0f:95:c8:07:7b:06:3f:9c:4b:00:4c:2b:ef:5f:
2e:75:d9:93:36:fb:19:8a:85:0d:20:8f:98:fa:d8:
1b:86:b9:2b:50:2e:92:46:37:fb:37:f4:94:3e:47:
06:9a:04:e7:82:1e:57:d4:f6:71:17:af:b2:94:47:
3b:06:a2:a2:ae:35:53:e7:67:e3:7a:ca:b8:11:34:
40:9e:ca:6c:e1:62:ea:22:d9:2b:dc:19:b2:bf:48:
5f:cc:05:31:54:99:04:aa:ac:d7:6f:c5:ab:d3:2b:
48:e6:8c:2b:06:84:ad:b9:70:f1:63:fb:01:ea:ea:
db:f7:ad:9f:13:06:9e:28:4f:74:b5:c5:3d:64:ff:
b4:3c:1d:d5:90:7c:14:d7:67:65:48:ae:aa:87:1b:
ce:3e:25:56:0d:74:61:ee:3a:59:a5:6e:1e:0c:30:
37:68:53:36:95:69:91:6b:15:7a:4a:85:3c:b0:36:
08:1b:51:24:ec:f9:9f:f8:b4:80:6b:ab:55:1d:3b:
98:47:82:07:0c:e1:eb:38:b8:fa:59:46:e5:45:05:
c1:2c:98:6c:f6:b2:6c:02:28:f3:79:38:54:e5:9b:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3E:FA:85:78:9F:E1:64:7C:57:C2:F4:D1:3B:DF:CF:C6:AF:1F:D2
X509v3 Authority Key Identifier:
keyid:43:0F:B5:BD:F4:65:EB:52:83:53:6F:57:FC:CA:37:7B:82:0B:ED:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/430FB5BDF465EB5283536F57FCCA377B820BED2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430FB5BDF465EB5283536F57FCCA377B820BED2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dAd9bfQhYstzpGHSVvBRBARgqgCB33Zhs5ScrGw4Kaj/0/34352e3138362e39322e302f32342d3234203d3e20323638313833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.92.0/24
Signature Algorithm: sha256WithRSAEncryption
02:5f:bd:e3:a5:d8:f1:a8:85:fb:b5:f1:97:a7:08:7c:9b:e9:
9f:9e:94:02:a9:b5:a4:18:b1:29:77:56:ae:1b:5d:48:f6:ab:
31:eb:c4:c2:34:46:19:e1:5f:fc:d9:17:82:c8:0c:e4:41:90:
e4:d9:68:2b:2e:94:e3:37:0b:a4:a1:e5:f1:10:5d:71:9e:92:
2b:bb:d8:31:f4:22:a7:c6:03:74:4f:37:cd:6b:a5:40:14:a7:
1d:ad:8d:28:71:8b:44:69:17:80:b8:8a:f8:c5:f4:96:3b:88:
47:fb:b0:01:c3:35:ae:df:49:d1:03:30:3c:52:07:b5:d7:c6:
20:1e:dc:ed:34:ba:81:9b:06:ac:cb:fb:14:4b:4d:41:32:00:
60:44:cb:f0:19:b2:6e:bb:6f:c1:ca:ac:7f:21:b1:b1:85:d0:
69:29:9e:ec:ca:56:67:10:22:cc:51:9e:45:d0:ab:72:d3:65:
6b:1e:f7:61:b9:d1:84:e1:a3:e3:09:48:00:79:28:7d:88:00:
f6:3e:07:27:da:c6:78:95:0b:f1:d2:71:c8:df:5f:ba:df:75:
9c:d8:85:4b:64:f2:58:1e:3e:33:98:32:5e:3e:59:8c:1a:37:
ee:20:de:f9:23:26:40:b9:49:c0:a9:4d:8a:58:3a:c0:5e:9f:
be:14:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:03 2025 by rpki-client