Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36372e302f32342d3234203d3e20323637393436.roa
File: 34352e3136362e36372e302f32342d3234203d3e20323637393436.roa (raw, json)
Hash identifier: maS4nmFcdiHhy+ZX4S8/5wsNL5C7y3k1hxmjUU8OI0Q=
Subject key identifier: 91:B3:3E:0F:87:7F:9C:1D:9E:37:9B:4E:83:F8:BC:D2:3D:83:F0:CB
Certificate issuer: /CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A
Certificate serial: 4C80CE2FE7E770F9B00C547520681C6F5B277BC0
Authority key identifier: C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36372e302f32342d3234203d3e20323637393436.roa
Signing time: Thu 22 May 2025 18:17:26 +0000
ROA not before: Thu 22 May 2025 18:12:26 +0000
ROA not after: Thu 21 May 2026 18:17:26 +0000
asID: 267946
IP address blocks: 45.166.67.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:80:ce:2f:e7:e7:70:f9:b0:0c:54:75:20:68:1c:6f:5b:27:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A
Validity
Not Before: May 22 18:12:26 2025 GMT
Not After : May 21 18:17:26 2026 GMT
Subject: CN=91B33E0F877F9C1D9E379B4E83F8BCD23D83F0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:c5:b0:41:97:37:e4:f3:80:27:0c:68:a7:
29:e3:98:fd:cd:19:8d:a6:b6:2e:a0:db:91:c0:37:
e0:53:8a:f2:d8:26:46:96:72:8e:91:e8:ab:34:c5:
f6:f5:71:68:09:98:55:51:e6:2b:64:69:df:c8:e3:
9f:7e:83:27:ec:26:08:11:4f:d3:ba:18:ad:ac:4d:
0e:65:80:c4:cc:5e:59:c9:e6:97:27:a4:40:4f:e7:
97:2c:d4:d4:e4:41:ba:60:57:ee:22:63:99:fc:f3:
6c:6d:d6:e8:bb:ea:f1:5e:38:a0:4d:74:55:0c:72:
46:06:f9:33:84:aa:75:d8:bd:c8:ba:ae:c8:2c:c9:
5e:5b:3e:6b:49:ce:89:10:77:e6:d1:48:2b:41:29:
0f:77:5e:e2:a0:22:22:bd:97:2b:18:da:60:61:68:
42:14:94:c9:5d:db:75:81:c2:79:86:20:ed:53:d4:
25:db:a2:dd:8b:a2:a6:16:ec:1e:cf:38:cc:9e:6e:
5e:d0:ab:96:9d:23:e2:21:2b:7d:5a:62:c9:82:6f:
d1:0a:8d:59:58:9f:0f:83:a2:9c:12:26:c4:d7:80:
d3:98:3c:31:74:b5:e3:e5:36:de:0c:60:12:8c:00:
43:4a:11:3f:88:18:29:d4:5e:87:52:42:c1:cc:c0:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B3:3E:0F:87:7F:9C:1D:9E:37:9B:4E:83:F8:BC:D2:3D:83:F0:CB
X509v3 Authority Key Identifier:
keyid:C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36372e302f32342d3234203d3e20323637393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.67.0/24
Signature Algorithm: sha256WithRSAEncryption
76:16:12:7b:3f:39:a8:56:82:f0:2a:20:4b:c5:7e:26:8e:5b:
37:c3:5b:5f:67:a0:a4:8a:a1:28:da:ae:32:12:eb:fb:8d:b7:
5e:bf:f9:03:11:90:5b:0e:0e:c6:12:0b:b3:a2:ce:b1:0c:8b:
1e:73:b0:d2:6c:5c:d7:72:c1:b9:7a:10:b8:5e:8f:3e:3a:27:
b8:8a:56:e2:2e:35:b9:18:49:c3:e2:d9:a3:3e:5a:4a:e3:cb:
57:bc:44:b2:a5:f2:3f:d0:77:90:f5:03:1e:83:06:a6:76:95:
a0:02:54:79:7e:43:bb:a8:65:05:79:5f:1a:00:c4:39:d4:54:
1c:17:d3:e9:58:2f:7b:ea:0e:19:17:6a:f3:97:4e:e8:0e:e2:
c7:69:25:cc:ea:99:ec:f5:cb:38:e3:ac:62:99:d4:db:ea:68:
80:c6:8a:84:d6:b3:ac:62:30:e9:63:07:e8:ca:aa:94:11:bf:
fd:38:ae:1e:62:75:74:9e:f5:23:98:f5:28:99:9a:c7:b7:28:
1a:5e:82:25:aa:6a:53:fb:28:da:60:72:df:3d:5f:44:b8:94:
90:31:0a:8e:40:ab:c2:85:f6:de:c0:15:cc:d2:61:ef:1f:38:
80:ea:7e:15:ec:4b:81:34:8a:49:2c:c1:ec:2c:7a:09:03:ca:
94:d2:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:44:15 2025 by rpki-client