Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132332e302f32342d3234203d3e20323637313537.roa
File: 34352e3233302e3132332e302f32342d3234203d3e20323637313537.roa (raw, json)
Hash identifier: byISY6DNOWGDEXDoQ0J4Bb7ZXivysnnTs5SERXjNDOg=
Subject key identifier: 30:87:52:E8:59:01:7B:D4:89:D0:6D:D8:17:C1:2F:24:D2:CB:8A:17
Certificate issuer: /CN=97188083CF1EC8C68294C98DF03C225ED3FD9534
Certificate serial: 702E56A0808130FE280FEF168E6D16642229D3A2
Authority key identifier: 97:18:80:83:CF:1E:C8:C6:82:94:C9:8D:F0:3C:22:5E:D3:FD:95:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97188083CF1EC8C68294C98DF03C225ED3FD9534.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132332e302f32342d3234203d3e20323637313537.roa
Signing time: Wed 15 Oct 2025 22:28:47 +0000
ROA not before: Wed 15 Oct 2025 22:23:47 +0000
ROA not after: Wed 14 Oct 2026 22:28:47 +0000
asID: 267157
IP address blocks: 45.230.123.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:2e:56:a0:80:81:30:fe:28:0f:ef:16:8e:6d:16:64:22:29:d3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97188083CF1EC8C68294C98DF03C225ED3FD9534
Validity
Not Before: Oct 15 22:23:47 2025 GMT
Not After : Oct 14 22:28:47 2026 GMT
Subject: CN=308752E859017BD489D06DD817C12F24D2CB8A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:e5:f8:24:0a:91:3e:af:50:32:cd:fc:bb:
fe:b6:cd:ea:56:af:dd:26:96:a6:8c:bb:e3:0c:9e:
01:19:4e:ee:62:1a:60:89:4b:cc:17:be:39:c0:65:
63:dc:6d:20:38:0c:0d:6c:11:2e:1b:b4:11:d6:2b:
4a:18:b9:94:d7:d3:4e:92:7b:ee:ee:bc:2e:fe:e8:
57:4a:7f:24:22:a1:e0:9f:b3:5b:e0:50:14:ea:af:
2a:52:51:1f:e4:88:5a:e7:75:4b:1e:c4:28:ba:7a:
07:64:97:84:82:cc:84:82:e8:e5:fc:cf:60:7c:58:
47:cc:bd:20:ac:00:48:39:63:cf:89:8d:ec:0a:e1:
15:86:4a:d8:3d:0f:fe:86:52:6f:91:88:9d:ae:6d:
d2:9b:a1:b8:43:99:2f:5a:aa:80:ca:fa:1f:58:b2:
97:34:56:e1:b4:d7:7e:cf:2d:ec:22:af:a8:f7:9a:
b5:97:3e:20:6a:e5:23:8f:c1:8a:c0:ac:33:97:af:
dd:16:55:bc:4a:83:d3:22:2b:e0:91:70:41:21:04:
90:8d:94:87:c8:61:52:b6:68:28:e9:ba:9d:71:6d:
2f:71:a4:58:2c:0d:34:52:7f:ab:d7:7b:05:18:86:
cf:d4:36:04:84:65:3f:72:f4:33:3c:98:91:a3:53:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:87:52:E8:59:01:7B:D4:89:D0:6D:D8:17:C1:2F:24:D2:CB:8A:17
X509v3 Authority Key Identifier:
keyid:97:18:80:83:CF:1E:C8:C6:82:94:C9:8D:F0:3C:22:5E:D3:FD:95:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/97188083CF1EC8C68294C98DF03C225ED3FD9534.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97188083CF1EC8C68294C98DF03C225ED3FD9534.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/34352e3233302e3132332e302f32342d3234203d3e20323637313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.123.0/24
Signature Algorithm: sha256WithRSAEncryption
13:18:33:46:d0:d8:86:38:19:b0:21:2d:48:91:ec:7b:49:5b:
4c:d8:50:57:ab:07:24:6d:94:22:8c:1e:27:1b:7c:20:96:16:
94:5a:50:4c:6e:8f:28:09:c3:8a:59:86:00:c7:3f:39:76:b9:
da:4b:eb:64:91:e1:7d:8e:a1:d7:41:b8:cc:14:59:77:44:f8:
e1:f1:55:4d:b0:2d:90:5e:b1:fb:4c:d5:de:c4:a4:60:d2:a2:
66:05:66:ac:c3:ae:11:f1:84:90:98:d8:d0:ff:ab:2d:63:7c:
1f:88:05:94:84:2a:69:f1:20:36:77:0a:e5:ef:02:ca:72:49:
ab:50:15:99:f6:ec:a8:87:da:af:88:31:7b:16:fa:ac:e0:90:
12:3f:e2:55:54:85:c2:f5:95:1b:00:71:e1:54:c3:23:c0:6f:
bb:b0:e9:48:02:10:dd:00:57:f6:f6:1b:69:2a:6d:4d:75:42:
6e:9a:b2:d8:b3:da:0c:ee:75:30:02:ba:04:ee:19:85:8a:0e:
06:cf:80:a4:c1:cb:a4:4d:f8:58:0e:b9:ca:1d:1f:67:eb:7e:
6b:06:49:e6:a4:89:88:4a:b9:9a:2f:22:b6:a4:ba:57:7f:5c:
d5:85:d5:97:c5:e8:e9:1a:f2:f4:21:f0:3c:0a:20:54:4d:e2:
f3:2d:18:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:13:19 2025 by rpki-client