Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32332d3233203d3e20323638383930.roa
File: 34352e3137352e37362e302f32332d3233203d3e20323638383930.roa (raw, json)
Hash identifier: Jhfd8pikICEU79UyKd2n/mxI+ikZS1JnwA8eE0VY894=
Subject key identifier: C9:15:3A:A1:6B:DC:A2:22:03:9F:48:F1:9B:71:59:62:6C:4B:4D:45
Certificate issuer: /CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Certificate serial: 28EA8133FA082CAB8719F2792E90E3474A557543
Authority key identifier: A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32332d3233203d3e20323638383930.roa
Signing time: Tue 11 Mar 2025 19:57:23 +0000
ROA not before: Tue 11 Mar 2025 19:52:23 +0000
ROA not after: Tue 10 Mar 2026 19:57:23 +0000
asID: 268890
IP address blocks: 45.175.76.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ea:81:33:fa:08:2c:ab:87:19:f2:79:2e:90:e3:47:4a:55:75:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Validity
Not Before: Mar 11 19:52:23 2025 GMT
Not After : Mar 10 19:57:23 2026 GMT
Subject: CN=C9153AA16BDCA222039F48F19B7159626C4B4D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:33:49:06:bb:1a:95:d1:1a:9f:0b:08:9b:
ef:4c:1b:25:53:9a:d0:27:c7:13:24:17:d0:42:e1:
a5:b9:3e:ed:4c:4c:26:68:8f:01:50:c3:59:25:ef:
17:35:ea:f0:48:81:de:1f:ec:71:eb:11:37:d3:06:
d9:e0:26:e1:97:dd:90:4d:7b:d9:b5:bd:dc:67:eb:
0e:31:3c:98:e6:dd:6b:c6:27:cb:2d:21:a6:17:a3:
fe:6c:7b:60:ef:dd:4a:69:91:58:e8:d3:02:81:d5:
b0:5c:f2:43:4f:81:28:c7:54:d6:e0:32:a3:66:f8:
49:8c:68:68:b3:ec:38:d3:af:f7:ab:6a:13:e2:4e:
2c:fe:5f:6a:21:3f:76:a2:8e:80:6a:b5:77:90:c6:
77:fb:85:d9:8e:b4:69:a9:fa:e0:5a:38:50:77:d8:
88:43:e3:2e:c4:91:cd:ae:0e:cb:37:09:5f:2d:0c:
88:6d:3a:90:8c:d9:da:a3:f3:48:11:72:30:ed:7c:
53:33:dc:b1:1d:62:39:00:ef:13:99:0a:a0:3d:3f:
95:88:aa:a8:c5:cf:ad:45:98:8f:83:25:4c:fa:b0:
6e:d2:e0:47:c8:d5:f3:3d:6f:7d:ec:eb:8e:de:fb:
72:22:09:38:fe:42:c8:24:17:21:7d:ab:19:d6:13:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:15:3A:A1:6B:DC:A2:22:03:9F:48:F1:9B:71:59:62:6C:4B:4D:45
X509v3 Authority Key Identifier:
keyid:A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/34352e3137352e37362e302f32332d3233203d3e20323638383930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.76.0/23
Signature Algorithm: sha256WithRSAEncryption
33:5f:90:59:67:a2:a7:17:9c:aa:57:08:5f:36:08:d5:16:bf:
3f:3b:01:eb:db:c3:8e:9f:2c:04:8e:d3:d0:a9:88:0f:3e:38:
b1:97:14:e6:de:6b:13:a4:89:05:a0:5c:f3:6d:e1:35:3a:96:
2d:72:3b:38:43:99:fc:2b:75:ac:a0:6d:c3:37:25:eb:c1:56:
93:6f:27:30:6b:d3:4b:ad:77:b5:a6:e1:38:d8:3e:8b:11:b1:
85:e5:d5:70:11:9c:88:c4:ad:7d:42:6f:36:44:55:42:3b:45:
d5:a6:db:6b:c2:99:70:44:30:b5:3f:76:53:fd:de:2d:f2:36:
59:c0:be:30:5d:17:d4:d4:cc:c3:52:61:a0:37:18:34:8e:81:
0a:55:c9:40:c5:7a:37:e7:59:67:51:35:0a:97:52:10:ce:6d:
7c:9a:5d:70:dd:59:b0:35:e9:5d:eb:5e:92:59:cf:53:67:4a:
fc:36:c0:18:3c:3d:cf:c4:bf:81:9c:a5:40:bb:c6:e7:b0:a4:
0b:a4:e4:d7:40:d4:95:c8:60:bc:29:92:5c:99:6b:e9:47:8f:
ec:55:bb:2e:60:e7:90:f3:8b:08:c5:e2:f3:df:67:5c:1a:8e:
34:21:7d:03:6c:a1:88:d9:52:e7:4e:19:b7:8b:9a:ed:2f:2b:
02:e4:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:56 2025 by rpki-client