Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa
File: 34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa (raw, json)
Hash identifier: 1S93ub7MdHQ8uhzm7ZiGoo+KTgVGZ3QqseCdQELK/Gc=
Subject key identifier: C4:FF:D7:C2:8C:71:B8:7E:5C:A7:4B:6F:88:52:1B:69:1E:A9:3D:BE
Certificate issuer: /CN=433BC56DE61BF5759F79705E437131F09597AF13
Certificate serial: 400A34A7EDEA88B0C1A8DCEB38614A2D04265053
Authority key identifier: 43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa
Signing time: Mon 31 Mar 2025 17:43:17 +0000
ROA not before: Mon 31 Mar 2025 17:38:17 +0000
ROA not after: Mon 30 Mar 2026 17:43:17 +0000
asID: 269079
IP address blocks: 45.179.133.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0a:34:a7:ed:ea:88:b0:c1:a8:dc:eb:38:61:4a:2d:04:26:50:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433BC56DE61BF5759F79705E437131F09597AF13
Validity
Not Before: Mar 31 17:38:17 2025 GMT
Not After : Mar 30 17:43:17 2026 GMT
Subject: CN=C4FFD7C28C71B87E5CA74B6F88521B691EA93DBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:dd:b4:9e:eb:f6:51:e2:ea:b2:c5:ac:e0:
e3:11:60:31:d2:bd:79:0b:13:26:53:1c:d2:05:5d:
27:d6:3a:28:74:77:2e:83:ca:82:39:0a:6c:00:6a:
73:e2:cb:09:aa:93:d7:f9:84:64:1e:23:e4:0d:29:
69:8b:99:d8:c6:64:f6:63:f7:e4:33:b9:5b:41:93:
46:24:71:5f:dc:27:3d:3a:06:48:16:b3:8e:98:6e:
18:58:db:ac:7c:f5:de:fd:4f:9b:49:d9:d6:a9:15:
8a:12:f9:87:7f:0d:d7:bb:b1:23:a6:13:5e:9f:8a:
5b:d9:5d:75:c6:2c:83:2e:fb:6d:08:1a:29:b2:53:
9e:44:00:ad:2b:0e:90:79:bf:cc:08:f2:f9:ff:4c:
77:18:a1:34:99:d7:0e:38:7c:97:07:86:94:47:2a:
9e:cf:a0:f2:f3:f6:a0:12:92:bd:5b:cc:e4:ea:bc:
b1:70:69:9b:58:9d:e0:81:a3:e3:53:65:db:ef:d3:
c9:1a:83:29:30:21:a6:9d:a1:04:74:e3:2b:ec:1a:
36:cf:10:ff:53:42:0f:47:30:82:af:05:e1:0a:c1:
7a:0d:c4:17:0c:31:dc:62:96:4e:66:7a:52:31:47:
42:e7:ee:27:11:12:67:4c:a5:90:21:12:53:37:58:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FF:D7:C2:8C:71:B8:7E:5C:A7:4B:6F:88:52:1B:69:1E:A9:3D:BE
X509v3 Authority Key Identifier:
keyid:43:3B:C5:6D:E6:1B:F5:75:9F:79:70:5E:43:71:31:F0:95:97:AF:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/433BC56DE61BF5759F79705E437131F09597AF13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BC56DE61BF5759F79705E437131F09597AF13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/0/34352e3137392e3133332e302f32342d3234203d3e20323639303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.133.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7d:df:9d:3e:03:d6:46:fa:28:8e:fe:05:ea:8b:24:75:8a:
42:9f:af:60:ad:61:01:2c:a0:67:33:25:47:9b:aa:e7:fa:0c:
c6:b5:bd:8d:75:89:d5:23:ec:65:de:48:44:8f:1f:2a:d7:83:
1a:d5:60:5d:13:a9:2e:bc:48:ac:ca:8d:80:8c:79:55:62:22:
e8:ec:b0:c7:ef:6b:01:64:f7:11:5e:63:f0:e2:62:40:ef:43:
bf:a5:08:15:d6:b0:45:81:52:6c:fd:b8:7c:a2:75:0c:8e:d9:
e4:c3:b8:b2:fa:91:e9:4b:71:0b:2d:ea:8e:c4:94:89:4b:ab:
ae:55:ad:83:e8:02:19:6f:95:7d:5c:fa:2d:a7:f1:de:37:26:
0c:ff:e7:93:12:69:31:ac:9c:a4:45:e2:16:c1:62:26:db:2f:
3e:45:1c:39:94:68:7f:41:dc:b3:cb:2d:38:39:cc:79:ef:c9:
28:7d:e2:9c:b5:d3:d7:37:7a:f8:71:b2:51:c3:39:d5:bf:d7:
9f:4e:4f:3b:09:a5:3d:c0:9f:8d:fa:15:96:1d:8f:15:56:7d:
ac:20:b8:e0:8b:e6:a9:e0:cd:63:c4:c8:91:76:ab:c4:e0:f9:
9d:d5:27:48:3f:eb:0d:e7:ac:4e:2d:18:3c:b7:62:4e:a5:c3:
f5:db:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 19:32:13 2025 by rpki-client