Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
File: 34352e36352e3133302e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier: Y5K1r5CF+tQf/1gLx3G7GXhfmEu4UGA0sI9DzjM2ZSw=
Subject key identifier: B8:84:8D:7E:F5:07:7F:6A:AC:94:81:D2:6E:B7:79:8C:42:6F:14:23
Certificate issuer: /CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
Certificate serial: 70A2E844896757A4029343A03F19E54012FEA70D
Authority key identifier: 26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
Signing time: Mon 31 Mar 2025 18:49:50 +0000
ROA not before: Mon 31 Mar 2025 18:44:50 +0000
ROA not after: Mon 30 Mar 2026 18:49:50 +0000
asID: 266528
IP address blocks: 45.65.130.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a2:e8:44:89:67:57:a4:02:93:43:a0:3f:19:e5:40:12:fe:a7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
Validity
Not Before: Mar 31 18:44:50 2025 GMT
Not After : Mar 30 18:49:50 2026 GMT
Subject: CN=B8848D7EF5077F6AAC9481D26EB7798C426F1423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:2d:0a:1d:5d:04:5e:88:a6:ba:4e:aa:a9:
ff:f4:0c:03:fd:8d:1d:9b:67:ed:b6:c8:18:dd:6f:
e0:47:37:0b:04:63:12:6c:02:d7:47:97:dd:55:d6:
89:a3:0e:a5:74:22:da:d5:e1:46:ab:2e:f8:9d:0c:
b0:e8:80:05:2f:1c:ff:ca:10:b8:9f:16:19:2e:7b:
ba:8d:c8:cf:c7:86:e7:cc:8c:cb:19:30:c6:ba:1e:
17:37:c8:ec:a0:54:7a:55:38:f6:1a:5b:85:da:92:
ee:a2:ea:71:0c:6e:9c:12:25:eb:50:37:3a:41:04:
df:a2:d5:73:d8:a1:dc:8f:17:1c:b8:a7:1b:46:c2:
20:15:c7:1b:86:39:63:e4:90:c5:32:90:ba:6f:45:
fa:2d:ee:49:f8:ca:b4:1a:22:91:d5:7c:e9:91:b2:
c8:2b:e1:d6:85:cb:4e:ec:65:ab:cd:83:d7:13:1a:
29:53:4a:0b:7c:be:6e:2f:52:a8:2e:b5:5b:21:c4:
40:d8:66:d1:f1:8a:ee:25:d4:eb:ea:65:07:91:a1:
2c:a4:10:8b:24:5e:d9:44:5d:01:c7:49:d1:88:61:
ce:c0:5f:37:44:8a:58:0c:8f:3a:6b:c6:a8:41:d6:
3a:9e:0b:7b:16:c6:f4:34:63:ab:fc:0e:00:3f:33:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:8D:7E:F5:07:7F:6A:AC:94:81:D2:6E:B7:79:8C:42:6F:14:23
X509v3 Authority Key Identifier:
keyid:26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.130.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4a:04:e7:38:93:f9:5b:93:e9:11:45:19:6b:ae:7d:f5:7a:
f9:2e:87:52:a7:0e:f2:78:e1:12:63:6e:1e:d1:fb:02:b8:49:
31:3d:63:8f:18:df:8f:fe:22:9b:67:93:95:1c:9a:1e:b5:5d:
7d:e9:9f:62:d2:92:76:64:d5:62:7f:67:8f:e9:4a:af:d4:06:
f1:0c:4d:a7:00:17:66:67:03:ee:22:e0:f9:76:ee:fc:30:ae:
d5:b4:a1:ab:24:da:9e:e9:f6:72:c6:6a:3f:41:7c:c0:eb:70:
c1:2a:70:91:e8:c9:ee:d6:40:e6:7d:bf:2a:cb:6d:a1:9a:c3:
b9:d4:d7:90:41:bb:e5:cb:18:c3:b5:7d:c5:29:5e:97:d9:3f:
d5:42:2b:24:7a:9a:6b:e9:e3:7e:48:d6:39:3f:7e:14:28:ab:
bd:c9:7f:d2:35:7f:a8:0e:92:f2:0b:ef:ed:19:a3:6d:2a:e1:
57:d9:ad:ee:c4:f5:d2:5c:ba:0d:64:74:c5:0e:61:21:ac:c7:
91:96:bb:d6:2f:da:17:bb:fe:f7:cb:ab:75:6e:38:fd:ed:2c:
43:fc:62:79:6c:f7:e2:d6:ed:54:c4:ec:4a:5e:08:94:d1:54:
95:c1:63:0c:ef:3e:64:3b:9c:94:92:73:51:e7:a8:da:1a:48:
01:58:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:55:56 2025 by rpki-client