Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
File: 34352e36352e3133312e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier: PaAf6dbPKpSc1oNUTLWDquOzA8hHyoSm8cfYfORzNgQ=
Subject key identifier: E1:DB:10:DD:C8:01:68:91:5C:DE:EB:8C:3B:EB:C4:50:0F:FA:1F:07
Certificate issuer: /CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
Certificate serial: 0C5685CBEC23592BFF4183D6E5A8688860BC83D9
Authority key identifier: 26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
Signing time: Mon 31 Mar 2025 18:49:50 +0000
ROA not before: Mon 31 Mar 2025 18:44:50 +0000
ROA not after: Mon 30 Mar 2026 18:49:50 +0000
asID: 266528
IP address blocks: 45.65.131.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:56:85:cb:ec:23:59:2b:ff:41:83:d6:e5:a8:68:88:60:bc:83:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669B4301998575E7EE1A3CE026868BDAD6FD14B
Validity
Not Before: Mar 31 18:44:50 2025 GMT
Not After : Mar 30 18:49:50 2026 GMT
Subject: CN=E1DB10DDC80168915CDEEB8C3BEBC4500FFA1F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:d1:e3:8c:cf:74:8b:73:f8:e5:0d:d0:47:
0f:ef:72:d4:f7:38:52:74:97:56:2e:4c:1a:6d:be:
6c:d4:82:2d:4b:e4:a1:6d:dc:3b:7a:21:82:19:96:
d2:1b:f4:23:ca:bb:1a:79:ce:c1:a8:d6:ab:76:f2:
d7:9e:26:b3:9a:a6:7a:b1:2a:5d:b1:87:35:87:0d:
22:4a:3e:ff:c6:d8:6b:c6:b2:2e:c5:ed:87:2f:dc:
5a:c3:3b:f9:65:52:35:af:6f:08:50:e8:8b:08:03:
51:8f:e9:dd:27:94:60:a2:0a:24:92:82:3b:6a:be:
62:cb:b9:f1:e2:89:cc:f2:a9:8b:15:9b:eb:33:24:
6a:71:94:d7:e5:0c:ed:91:a8:1c:3b:ab:cd:cb:1f:
30:89:55:dc:e7:fa:f5:f5:0b:b9:41:8e:04:77:9a:
62:f1:1f:47:45:28:39:51:55:be:b3:5b:27:5a:c7:
a9:5e:12:b6:6e:77:af:f4:38:fd:c1:fc:74:06:10:
e7:85:30:17:d4:91:6d:ce:25:bd:fa:fd:2d:b6:90:
a6:f5:8d:64:55:0a:e0:3f:79:61:18:e8:3d:02:77:
df:08:e4:8d:3c:7d:2b:50:1a:c6:2f:15:eb:66:dc:
5c:9e:7c:d9:6f:f8:cd:57:b3:1c:0f:32:8c:0e:17:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:10:DD:C8:01:68:91:5C:DE:EB:8C:3B:EB:C4:50:0F:FA:1F:07
X509v3 Authority Key Identifier:
keyid:26:69:B4:30:19:98:57:5E:7E:E1:A3:CE:02:68:68:BD:AD:6F:D1:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/2669B4301998575E7EE1A3CE026868BDAD6FD14B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2669B4301998575E7EE1A3CE026868BDAD6FD14B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ee:7b:ac:a7:ee:73:6e:54:55:76:07:cf:69:ce:c7:df:2a:
9f:d4:c5:4b:de:fe:84:01:c2:39:0e:66:ed:06:0b:c7:3e:c0:
8b:a6:1b:32:ce:84:b0:13:b1:63:3d:51:fd:ba:49:dd:82:29:
ae:c4:9e:1d:50:00:4c:ec:1b:25:50:cb:3f:2a:05:21:cc:9d:
21:2b:32:5d:ff:f3:6e:ae:7e:32:6d:45:21:38:68:89:f8:3d:
16:97:73:66:38:52:ea:35:f2:76:8a:f2:af:f4:06:73:2d:29:
60:e5:f0:eb:e9:31:f6:74:01:5d:7f:0a:13:fe:c5:66:75:49:
75:d4:06:2c:57:7d:51:25:23:78:63:1b:06:a4:4e:a8:4d:95:
b3:a3:38:0f:d8:92:de:ce:40:b8:f6:92:de:56:88:b2:cc:6f:
d8:24:c7:a4:e4:61:b7:81:54:54:7a:80:63:d9:c4:81:5a:bd:
79:2d:0f:38:b8:db:75:d4:0d:f9:fb:bb:3d:a9:cd:4a:58:4c:
9a:ec:95:2c:79:ad:07:e0:2b:11:14:22:f2:e8:35:9a:25:d1:
99:4c:0c:0e:17:de:58:a2:ea:b8:43:a6:bd:63:3d:24:e1:4a:
7b:18:22:a0:13:a9:5b:21:16:85:c6:79:02:66:f2:44:73:56:
3f:33:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:27 2025 by rpki-client