Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/4JiP45fvdhxWEyXdPKdmEGraQLGCwHz7uyE8X2yiWYx4/0/34352e352e342e302f32322d3332203d3e20323636313332.roa
File: 34352e352e342e302f32322d3332203d3e20323636313332.roa (raw, json)
Hash identifier: ywi+qTpxVvUnmYGbvNCZpJkWFv886ac+mMTvHRYf0qY=
Subject key identifier: 11:CF:03:A4:00:6D:D3:A7:32:FB:18:5C:51:4B:5E:9C:E1:3A:98:21
Certificate issuer: /CN=7899FC23F746B152BD613A586389B2297EF6746A
Certificate serial: 15F1F3D273402A31F5EB6A1BD07CE50F3C61C865
Authority key identifier: 78:99:FC:23:F7:46:B1:52:BD:61:3A:58:63:89:B2:29:7E:F6:74:6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7899FC23F746B152BD613A586389B2297EF6746A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4JiP45fvdhxWEyXdPKdmEGraQLGCwHz7uyE8X2yiWYx4/0/34352e352e342e302f32322d3332203d3e20323636313332.roa
Signing time: Wed 21 Oct 2026 18:16:36 +0000
ROA not before: Wed 21 Oct 2026 18:11:36 +0000
ROA not after: Wed 20 Oct 2027 18:16:36 +0000
asID: 266132
IP address blocks: 45.5.4.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f1:f3:d2:73:40:2a:31:f5:eb:6a:1b:d0:7c:e5:0f:3c:61:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7899FC23F746B152BD613A586389B2297EF6746A
Validity
Not Before: Oct 21 18:11:36 2026 GMT
Not After : Oct 20 18:16:36 2027 GMT
Subject: CN=11CF03A4006DD3A732FB185C514B5E9CE13A9821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:6b:09:be:cb:65:3f:1f:2b:44:51:6c:3f:
5b:c7:03:33:02:c3:e0:99:f1:5b:76:2b:6b:9d:37:
40:71:cf:db:68:9b:26:b0:fb:39:cd:af:59:32:55:
76:7d:4b:8f:ad:9b:12:2f:d5:f5:f3:3e:7a:ce:b1:
11:49:c5:54:b9:2f:44:31:a0:ee:9f:15:96:ce:2c:
10:d3:f0:ee:52:f7:39:4a:2b:36:1f:0a:95:93:1c:
0c:6f:e8:0b:98:9e:62:f1:6d:c5:4f:43:d3:5a:00:
fa:29:21:34:e5:78:ff:2f:c8:fa:5a:5d:95:ce:29:
78:25:6f:7e:fe:25:68:c9:e7:eb:0c:e8:6a:12:20:
4d:65:32:7d:3a:5b:25:77:2e:a8:12:68:b2:1e:eb:
b0:6d:4e:72:05:b7:05:14:68:2e:61:a3:08:34:32:
69:ef:a9:a6:d5:fc:ad:e8:c2:25:9c:49:1b:e5:fa:
a3:3f:61:d5:e8:06:c6:90:2f:53:83:ed:d9:a6:86:
4e:2b:ab:20:c7:6f:f3:36:d4:34:b3:ff:a8:80:b0:
71:c3:80:57:41:47:c2:0e:a7:68:5f:9b:22:26:32:
b7:ae:c1:97:f0:77:05:43:e1:ad:3a:85:e1:21:74:
ad:5b:7d:6c:ed:6d:6d:53:25:67:17:e9:33:3b:e6:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:03:A4:00:6D:D3:A7:32:FB:18:5C:51:4B:5E:9C:E1:3A:98:21
X509v3 Authority Key Identifier:
keyid:78:99:FC:23:F7:46:B1:52:BD:61:3A:58:63:89:B2:29:7E:F6:74:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4JiP45fvdhxWEyXdPKdmEGraQLGCwHz7uyE8X2yiWYx4/0/7899FC23F746B152BD613A586389B2297EF6746A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7899FC23F746B152BD613A586389B2297EF6746A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiP45fvdhxWEyXdPKdmEGraQLGCwHz7uyE8X2yiWYx4/0/34352e352e342e302f32322d3332203d3e20323636313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.4.0/22
Signature Algorithm: sha256WithRSAEncryption
18:21:ba:41:c9:28:a0:e9:b5:1f:c7:ca:f6:57:ce:a7:6c:dd:
43:b0:84:98:72:b5:47:96:99:17:58:28:d1:f6:34:3b:d7:a9:
58:b0:0d:1d:d5:c3:cb:1d:3d:e5:4e:96:ae:46:95:a3:8d:bd:
f1:67:50:26:ea:22:ed:1d:68:4a:8e:e4:cf:09:66:a8:15:f2:
38:15:b2:c8:e0:64:c6:73:4d:ec:a5:78:17:e0:ae:d7:8e:25:
d8:fd:36:b7:01:2a:19:0b:2f:bc:6f:0d:6c:0b:d2:c4:52:fb:
10:31:c4:40:cf:b4:b4:0e:c8:a4:a9:de:18:39:fc:f6:99:90:
8f:41:0f:50:f2:ee:1b:6a:73:5b:45:d6:50:a9:23:df:14:84:
ae:b0:2d:f0:11:6c:61:17:30:76:e6:02:0e:12:10:b5:c9:77:
a6:51:79:f8:43:8f:9f:ac:b7:41:ef:35:89:81:ee:87:3b:61:
27:5e:4e:47:8c:21:4d:a1:f9:fc:01:a3:7e:60:38:db:e1:27:
8d:db:a5:01:fc:ce:89:ed:ce:39:24:7b:98:6b:99:21:da:47:
c8:d1:be:c0:f3:0b:ef:fa:eb:7d:55:3f:b4:9d:2c:9c:47:0a:
99:55:f2:c8:e0:36:83:47:35:84:65:a9:25:2f:95:f5:aa:6d:
82:02:a6:18
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUFfHz0nNAKjH162ob0HzlDzxhyGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg5OUZDMjNGNzQ2QjE1MkJENjEzQTU4NjM4OUIyMjk3
RUY2NzQ2QTAeFw0yNjEwMjExODExMzZaFw0yNzEwMjAxODE2MzZaMDMxMTAvBgNV
BAMTKDExQ0YwM0E0MDA2REQzQTczMkZCMTg1QzUxNEI1RTlDRTEzQTk4MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClEGsJvstlPx8rRFFsP1vHAzMC
w+CZ8Vt2K2udN0Bxz9tomyaw+znNr1kyVXZ9S4+tmxIv1fXzPnrOsRFJxVS5L0Qx
oO6fFZbOLBDT8O5S9zlKKzYfCpWTHAxv6AuYnmLxbcVPQ9NaAPopITTleP8vyPpa
XZXOKXglb37+JWjJ5+sM6GoSIE1lMn06WyV3LqgSaLIe67BtTnIFtwUUaC5howg0
MmnvqabV/K3owiWcSRvl+qM/YdXoBsaQL1OD7dmmhk4rqyDHb/M21DSz/6iAsHHD
gFdBR8IOp2hfmyImMreuwZfwdwVD4a06heEhdK1bfWztbW1TJWcX6TM75lYhAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUEc8DpABt06cy+xhcUUtenOE6mCEwHwYDVR0j
BBgwFoAUeJn8I/dGsVK9YTpYY4myKX72dGowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEppUDQ1ZnZkaHhXRXlYZFBLZG1FR3JhUUxHQ3dIejd1eUU4WDJ5aVdZ
eDQvMC83ODk5RkMyM0Y3NDZCMTUyQkQ2MTNBNTg2Mzg5QjIyOTdFRjY3NDZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4OTlGQzIzRjc0NkIxNTJC
RDYxM0E1ODYzODlCMjI5N0VGNjc0NkEuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRKaVA0NWZ2ZGh4V0V5WGRQS2RtRUdyYVFMR0N3SHo3dXlFOFgyeWlXWXg0LzAv
MzQzNTJlMzUyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM2MzEzMzMy
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLQUEMA0GCSqGSIb3DQEBCwUAA4IBAQAYIbpBySig6bUfx8r2
V86nbN1DsISYcrVHlpkXWCjR9jQ716lYsA0d1cPLHT3lTpauRpWjjb3xZ1Am6iLt
HWhKjuTPCWaoFfI4FbLI4GTGc03spXgX4K7XjiXY/Ta3ASoZCy+8bw1sC9LEUvsQ
McRAz7S0Dsikqd4YOfz2mZCPQQ9Q8u4banNbRdZQqSPfFISusC3wEWxhFzB25gIO
EhC1yXemUXn4Q4+frLdB7zWJge6HO2EnXk5HjCFNofn8AaN+YDjb4SeN26UB/M6J
7c45JHuYa5kh2kfI0b7A8wvv+ut9VT+0nSycRwqZVfLI4DaDRzWEZaklL5X1qm2C
AqYY
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:50:12 2026 by rpki-client