Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
File: 34352e3137352e37362e302f32322d3232203d3e20323638383930.roa (raw, json)
Hash identifier: do7V4bbb/JL5H2BaoYXDAF9yLaj6Lf747cG8jND8PnI=
Subject key identifier: 41:B8:B5:76:0C:F2:A3:1A:9D:16:03:4B:CC:6D:C8:AD:A3:FF:54:F1
Certificate issuer: /CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Certificate serial: 59C57F88437FD8547BDE17E5131ED538160C8276
Authority key identifier: A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
Signing time: Tue 11 Mar 2025 19:57:23 +0000
ROA not before: Tue 11 Mar 2025 19:52:23 +0000
ROA not after: Tue 10 Mar 2026 19:57:23 +0000
asID: 268890
IP address blocks: 45.175.76.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c5:7f:88:43:7f:d8:54:7b:de:17:e5:13:1e:d5:38:16:0c:82:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Validity
Not Before: Mar 11 19:52:23 2025 GMT
Not After : Mar 10 19:57:23 2026 GMT
Subject: CN=41B8B5760CF2A31A9D16034BCC6DC8ADA3FF54F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:5a:7c:de:fd:3d:05:b9:a3:11:6b:08:9b:
6a:c8:3f:0a:62:a9:a6:cf:09:ae:d4:3c:74:7f:43:
fa:5a:6f:ac:cf:27:9b:c3:17:ac:a9:4b:bf:0d:01:
ef:3f:df:8d:f7:4c:df:77:98:45:83:1e:b8:b5:4d:
5f:c8:ba:a7:a9:2c:ab:07:31:6c:db:43:4a:37:1a:
52:40:43:ab:49:56:70:26:5f:6a:b9:5c:ae:b0:12:
69:b4:bf:00:78:96:a6:28:79:55:6f:48:2d:bb:24:
30:b4:0f:47:6d:ef:c8:8d:99:61:0d:6a:5b:3b:09:
bd:a6:b7:f5:b7:05:9d:be:8e:f1:d7:bf:fd:1a:94:
94:f8:71:3a:4a:ce:7e:2d:75:29:14:a6:d2:d8:13:
75:71:7e:13:96:a4:9a:a2:df:a7:e4:14:b3:5a:27:
d9:95:c3:34:1a:4a:28:81:50:06:3a:3f:df:58:c7:
dc:ab:9d:da:45:ea:25:c4:02:9d:c6:f0:33:be:88:
e0:15:39:26:fb:56:af:cf:e4:19:20:e9:5b:37:11:
74:59:ef:e6:b8:f0:24:70:78:ce:67:e4:07:57:d6:
0e:e0:7e:fc:23:b0:88:e5:9d:54:24:b7:9b:58:9a:
cc:7e:13:f0:d8:5c:11:92:99:02:e1:a7:41:7c:64:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:B5:76:0C:F2:A3:1A:9D:16:03:4B:CC:6D:C8:AD:A3:FF:54:F1
X509v3 Authority Key Identifier:
keyid:A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.76.0/22
Signature Algorithm: sha256WithRSAEncryption
44:48:6c:8c:17:1e:c7:c4:ed:99:f2:39:8c:6b:96:5d:9b:0c:
1e:46:b0:86:9e:68:0a:14:2d:b7:48:6b:26:fb:b9:6a:2a:c8:
eb:c3:f6:b7:5f:7d:4d:2d:bd:3a:4d:b7:d4:98:f1:6f:81:54:
91:5d:fd:a9:03:48:0a:bd:14:5c:c4:d0:8f:80:fd:3b:bd:3f:
c3:70:eb:d0:a6:3c:64:e5:6d:fd:f4:02:de:66:e1:42:f0:3e:
8a:b0:10:c5:a0:5e:82:ce:39:40:14:21:ae:7f:6c:cb:79:eb:
d8:d9:42:95:f9:3a:3c:a6:3b:82:c0:ba:e4:45:38:d6:3c:eb:
c9:f0:b2:45:22:50:f2:7d:fb:e9:af:e2:08:dc:b6:fc:4e:8d:
ad:3a:25:09:ea:d3:c6:d4:62:d2:58:b2:85:0b:c1:a1:30:c6:
e5:d3:5b:e9:dd:ab:5e:49:0e:dc:34:85:67:17:96:9e:f7:4a:
73:a7:44:bf:d3:38:e7:51:fa:e3:8f:75:04:e9:71:ae:60:2a:
65:08:cf:e0:c4:51:94:b9:82:bd:a6:5d:2e:3b:d5:53:57:ab:
76:c9:bf:67:40:6c:21:a4:12:74:f3:81:a6:50:a6:33:b3:95:
3a:65:fa:32:25:42:0e:87:9f:8b:86:aa:1f:54:2f:76:7e:ad:
0a:9b:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:53 2025 by rpki-client