Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33382e302f32332d3233203d3e20323636313532.roa
File: 34352e362e33382e302f32332d3233203d3e20323636313532.roa (raw, json)
Hash identifier: V16XIPKih8fpU21CyBZUZcAx1ORd2hRHiW4/uu6VBPg=
Subject key identifier: C8:C6:D3:6B:4D:19:3F:D2:8D:1B:8B:72:76:C0:B4:1D:C3:BB:56:9A
Certificate issuer: /CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
Certificate serial: 6E3AF601756984E602A3B6BF1251FC8C26BA921A
Authority key identifier: 0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33382e302f32332d3233203d3e20323636313532.roa
Signing time: Mon 08 Sep 2025 11:42:18 +0000
ROA not before: Mon 08 Sep 2025 11:37:18 +0000
ROA not after: Mon 07 Sep 2026 11:42:18 +0000
asID: 266152
IP address blocks: 45.6.38.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3a:f6:01:75:69:84:e6:02:a3:b6:bf:12:51:fc:8c:26:ba:92:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D1F0EF9B6879F5981F0279711EDA3C940B65CC9
Validity
Not Before: Sep 8 11:37:18 2025 GMT
Not After : Sep 7 11:42:18 2026 GMT
Subject: CN=C8C6D36B4D193FD28D1B8B7276C0B41DC3BB569A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:2b:41:4b:d7:2d:63:ad:ad:be:6b:2e:44:
da:61:58:93:24:4b:7c:24:22:da:be:1f:14:5e:d9:
6e:da:fa:29:c3:30:ee:26:4a:fe:e6:5d:d1:7a:57:
df:c3:bf:80:85:cb:08:48:24:a0:cf:57:7b:6c:27:
49:54:56:e3:e7:19:59:ba:f3:85:97:36:b8:20:79:
05:90:8b:f3:43:8c:2c:36:6f:14:b0:52:ce:04:c1:
0b:25:e5:85:0f:11:b0:c6:68:47:ab:eb:9c:db:38:
4e:b8:db:08:d8:ca:4b:87:0f:ce:fe:cd:24:87:2b:
77:b7:42:60:6d:2c:95:47:08:2f:57:fa:12:46:d6:
7d:80:6a:3c:c2:9f:16:69:85:ca:df:f9:03:3c:ab:
f2:a3:54:b6:df:f9:01:3c:08:c2:f5:2a:0d:fa:f0:
a3:99:84:a7:63:42:27:45:77:80:c2:9c:3b:0c:50:
00:72:2d:4b:8b:09:35:5d:ff:8d:1f:6e:5c:fb:d5:
0e:34:aa:cd:92:12:91:c0:99:52:35:8c:35:a1:90:
70:c8:4e:8a:54:7a:2f:14:60:cd:29:8b:23:ab:b3:
d3:cd:b6:55:d4:de:ae:04:6c:e0:e8:2a:a5:91:f7:
7c:7b:bf:e9:67:94:32:39:40:71:9e:65:20:f8:38:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C6:D3:6B:4D:19:3F:D2:8D:1B:8B:72:76:C0:B4:1D:C3:BB:56:9A
X509v3 Authority Key Identifier:
keyid:0D:1F:0E:F9:B6:87:9F:59:81:F0:27:97:11:ED:A3:C9:40:B6:5C:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F0EF9B6879F5981F0279711EDA3C940B65CC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/2/34352e362e33382e302f32332d3233203d3e20323636313532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.38.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:bc:b5:01:86:e5:ef:49:e3:7a:5c:61:4e:d8:7a:8b:6c:73:
17:0e:27:07:94:52:1d:11:c5:95:80:9c:83:6b:2a:6b:b9:80:
7b:be:53:d0:93:e9:87:96:20:35:7e:00:21:19:8e:a1:53:1b:
6a:83:b9:e9:67:cd:c0:22:f6:6b:da:62:71:a6:75:9c:46:2f:
62:29:28:95:56:df:0a:48:23:2d:8a:aa:8f:44:b6:0a:df:3d:
9c:2e:48:9c:4c:9e:da:f3:ba:de:95:b0:3f:75:e8:2f:f6:7c:
96:1e:be:e2:58:8a:5b:31:d3:22:1e:d3:76:64:11:6d:37:db:
5e:2e:08:85:61:54:fe:16:3b:e9:42:1b:ed:65:1a:71:9c:50:
23:63:1e:e5:04:3d:22:5e:94:f8:06:3e:04:96:6a:e1:7d:87:
55:ae:e8:c6:87:3a:c6:e4:34:3b:40:17:e2:6c:48:7b:b1:80:
aa:01:b3:c7:2d:bf:85:ba:9d:b7:c1:52:bb:93:91:31:49:e6:
fd:68:a5:98:63:51:25:31:0c:c5:eb:ad:cd:2b:0a:e5:9a:08:
b1:e4:f8:d9:9b:ef:88:ac:a0:40:0b:c3:18:c9:28:d0:75:e1:
ef:d3:ae:54:b8:e0:cb:d2:b4:4a:47:ae:0e:e9:6e:26:20:04:
72:cc:19:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:36:35 2025 by rpki-client