Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134342e302f32322d3332203d3e20323636303439.roa
File: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (raw, json)
Hash identifier: 4ZaVQjVXwvRbC5ExazWpeYv0cl2fUamURy4tT5ASmO8=
Subject key identifier: 59:83:70:82:C7:D0:16:31:FC:A9:18:3A:D7:07:3A:31:ED:10:B6:23
Certificate issuer: /CN=995252A0A186A5AC771DA6040FEF634B469DC2E3
Certificate serial: 1D0B28FB57DC20DF934DFB4E78464DAB46EE5BA0
Authority key identifier: 99:52:52:A0:A1:86:A5:AC:77:1D:A6:04:0F:EF:63:4B:46:9D:C2:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/995252A0A186A5AC771DA6040FEF634B469DC2E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134342e302f32322d3332203d3e20323636303439.roa
Signing time: Wed 21 Oct 2026 18:12:54 +0000
ROA not before: Wed 21 Oct 2026 18:07:54 +0000
ROA not after: Wed 20 Oct 2027 18:12:54 +0000
asID: 266049
IP address blocks: 45.4.144.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0b:28:fb:57:dc:20:df:93:4d:fb:4e:78:46:4d:ab:46:ee:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995252A0A186A5AC771DA6040FEF634B469DC2E3
Validity
Not Before: Oct 21 18:07:54 2026 GMT
Not After : Oct 20 18:12:54 2027 GMT
Subject: CN=59837082C7D01631FCA9183AD7073A31ED10B623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:9a:cb:b6:8b:d7:93:41:7c:6e:17:aa:4a:
07:cd:52:d6:de:db:6b:87:60:22:18:d7:cc:c9:ef:
8c:c6:92:7f:42:b4:fc:c8:ec:ee:b1:b7:22:10:59:
61:67:0a:54:f0:d5:a9:d0:b6:ae:28:a8:d9:43:9d:
16:92:0d:64:2e:4c:14:16:5c:4a:b7:6f:03:19:da:
95:c9:47:fe:93:a4:75:57:d1:8a:ea:b8:f6:92:b9:
62:ad:77:82:a7:dc:16:4b:fe:9d:a3:e4:20:5b:4b:
a5:df:32:b7:52:1d:e7:d0:47:45:5c:67:98:72:06:
56:43:59:01:a2:23:83:10:30:3a:b8:7b:75:78:4a:
9b:8d:bb:62:87:c7:e4:a9:53:47:fe:b4:8d:c7:67:
c8:9e:fd:db:c1:59:ae:99:d4:46:dd:bd:3c:f3:35:
fa:61:37:47:3a:6c:03:50:ca:d3:f8:ed:f0:8b:91:
93:cf:53:c7:3e:d4:99:43:ab:2a:5e:4f:21:50:5d:
75:1e:be:eb:38:f5:d1:8f:7d:72:06:f2:e2:1f:5c:
ad:07:92:65:0c:79:83:86:31:30:d4:b7:cb:79:03:
23:55:8a:66:51:60:9c:48:cd:c5:91:2d:b0:7e:22:
a1:8e:4f:66:72:1e:fa:3b:d2:c0:17:e6:3d:59:68:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:70:82:C7:D0:16:31:FC:A9:18:3A:D7:07:3A:31:ED:10:B6:23
X509v3 Authority Key Identifier:
keyid:99:52:52:A0:A1:86:A5:AC:77:1D:A6:04:0F:EF:63:4B:46:9D:C2:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/995252A0A186A5AC771DA6040FEF634B469DC2E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/995252A0A186A5AC771DA6040FEF634B469DC2E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134342e302f32322d3332203d3e20323636303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:07:3e:cf:48:13:fc:cd:f4:56:32:8e:70:59:12:47:36:bd:
fc:51:47:17:ba:7b:37:9f:23:e7:96:33:95:bf:fd:63:fc:89:
d6:39:23:56:0c:00:07:3e:15:ed:6c:dd:3f:57:55:77:46:09:
ee:bd:dd:a7:f3:e2:08:4d:cd:94:95:fc:19:fc:32:b7:6c:df:
55:51:63:cb:5f:28:ff:69:52:fd:eb:a8:28:0a:2c:3e:60:82:
17:56:31:1b:5d:f6:91:89:9c:6f:37:03:ff:2e:47:60:75:8f:
5f:17:5b:61:61:76:94:4e:80:f4:d6:ea:aa:db:4a:55:6a:20:
dc:2c:a4:9d:35:71:85:36:1c:fc:48:d1:03:3c:df:14:fd:b1:
60:ad:98:d9:1b:56:a2:2d:3d:0a:cf:99:68:d1:e1:c5:20:f2:
a9:96:bf:2b:42:d9:33:3a:ea:db:4b:20:0f:4c:a4:cd:ae:85:
fb:41:96:1b:cf:80:e8:43:71:c9:82:2e:fe:55:4c:88:f7:c1:
2c:a7:20:14:3e:12:28:a1:87:e1:70:e4:4f:b9:30:e0:24:5e:
3f:8f:7f:a2:6b:8a:07:a5:4a:fd:81:31:48:cd:e7:9a:da:58:
27:16:96:83:3e:50:f2:28:3c:4f:3c:13:c2:ad:2b:e9:b2:ab:
48:c4:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:41:33 2026 by rpki-client