Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa
File: 34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa (raw, json)
Hash identifier: GXDRkN2Epg+Hcu2VZAygBAekqkWhpMrnqLcny8RKBSs=
Subject key identifier: B0:E3:F7:3F:E2:59:BB:12:5B:C3:35:44:26:BF:15:3B:B9:D2:DA:35
Certificate issuer: /CN=121D0F950B1047AFE8B6D6DAE8356086D8187EBE
Certificate serial: 04EFD94359DCDCB40DCBBD4F0BE72BA67AEE1057
Authority key identifier: 12:1D:0F:95:0B:10:47:AF:E8:B6:D6:DA:E8:35:60:86:D8:18:7E:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121D0F950B1047AFE8B6D6DAE8356086D8187EBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa
Signing time: Sat 04 Jul 2026 19:40:54 +0000
ROA not before: Sat 04 Jul 2026 19:35:54 +0000
ROA not after: Sat 03 Jul 2027 19:40:54 +0000
asID: 268518
IP address blocks: 45.162.128.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ef:d9:43:59:dc:dc:b4:0d:cb:bd:4f:0b:e7:2b:a6:7a:ee:10:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121D0F950B1047AFE8B6D6DAE8356086D8187EBE
Validity
Not Before: Jul 4 19:35:54 2026 GMT
Not After : Jul 3 19:40:54 2027 GMT
Subject: CN=B0E3F73FE259BB125BC3354426BF153BB9D2DA35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:61:07:04:63:cd:4f:d3:9a:57:b6:95:ba:
2b:bc:f6:74:d4:7d:2f:fd:5f:c2:02:7b:d0:b1:38:
da:f3:01:c3:59:91:8f:b8:5e:23:71:b9:91:28:73:
ef:dc:e3:05:3f:3d:1f:e4:56:36:59:91:5e:f5:c0:
ac:f3:a1:34:08:99:5c:32:c8:84:18:5e:91:93:98:
62:62:4d:c3:34:a2:3b:55:b2:2f:df:54:50:78:f1:
f0:6c:05:fb:69:b8:89:16:47:a8:20:98:6e:41:bb:
4e:7d:47:ba:ff:70:74:cd:f5:f2:2c:78:aa:cd:e4:
11:9a:0f:5d:36:ad:22:ed:86:9e:c6:c2:16:bf:76:
b0:9a:29:0e:dd:22:38:6c:e2:88:7d:1c:62:33:fa:
8c:f1:f5:95:59:7f:a2:51:6f:64:a1:55:93:54:ea:
22:64:f7:06:96:13:40:65:56:2a:7f:cb:69:8f:d1:
b2:fa:82:52:c4:da:00:07:48:66:a4:db:27:ef:ed:
1a:98:81:6c:f0:55:7d:40:85:21:7e:25:c0:6c:a3:
52:d3:12:a1:c4:86:ec:cb:fc:d3:7e:8d:15:80:ab:
7b:0d:8b:4e:de:af:1c:42:72:82:45:fa:b4:64:af:
1f:61:05:97:d1:d9:f9:e9:42:0e:3b:d8:ce:fc:67:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E3:F7:3F:E2:59:BB:12:5B:C3:35:44:26:BF:15:3B:B9:D2:DA:35
X509v3 Authority Key Identifier:
keyid:12:1D:0F:95:0B:10:47:AF:E8:B6:D6:DA:E8:35:60:86:D8:18:7E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/121D0F950B1047AFE8B6D6DAE8356086D8187EBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/121D0F950B1047AFE8B6D6DAE8356086D8187EBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.128.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:9a:8b:24:9d:3b:0b:a0:9e:fc:0a:98:99:4c:c7:e1:d4:70:
d5:03:ac:26:20:01:0a:2f:7e:60:f3:07:b7:16:bc:19:da:5f:
2c:51:13:67:6a:3f:4b:db:ea:4e:c5:21:c8:76:77:42:9a:99:
71:33:a4:56:79:70:7a:9a:76:6a:8f:6d:54:44:21:df:29:4b:
37:4b:4e:a5:76:35:17:73:bc:8c:5c:1a:9d:ca:61:d2:e6:29:
6f:7c:98:2a:b0:34:bc:99:e3:a8:af:9a:4d:8a:7e:d9:aa:df:
a8:66:84:b4:b3:38:11:cb:42:1c:e6:f9:e9:d9:61:e0:ff:2b:
c0:d1:5b:36:cf:1d:5f:0a:ac:87:18:dd:67:19:99:95:8e:19:
fc:35:b2:ab:4a:1c:8e:47:60:cc:94:28:f1:0e:f9:39:e8:67:
99:7f:98:82:a7:37:1f:9b:82:db:a7:10:0b:8f:f6:25:10:26:
82:d1:de:5b:75:07:82:8e:fd:0d:a6:6c:7e:8b:2d:fc:37:14:
37:4f:ed:c0:af:0a:0e:45:61:70:d2:ae:59:04:80:4a:f6:b8:
9d:18:af:61:3c:33:1e:83:e1:c0:26:97:18:44:40:ab:2d:15:
1f:be:1e:67:aa:e1:c4:a2:cd:3d:6f:9e:d8:03:d4:5b:1c:26:
3a:f1:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:28:50 2026 by rpki-client