Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa
File: 34352e3137332e37382e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier: cbXB2pJsrhx4UtfCraAa9t1ceZVwiVFdfNBOyAt//S0=
Subject key identifier: D2:0A:F2:E5:97:A2:A6:AC:73:84:B8:BA:7C:E0:C7:8E:11:D4:94:57
Certificate issuer: /CN=95275964CD9C4F9994AC4DB3B2756C130AAE0CDA
Certificate serial: 4ED3E3CA3E01AFEB434A00F924F268B81D741270
Authority key identifier: 95:27:59:64:CD:9C:4F:99:94:AC:4D:B3:B2:75:6C:13:0A:AE:0C:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa
Signing time: Tue 10 Jun 2025 13:35:28 +0000
ROA not before: Tue 10 Jun 2025 13:30:28 +0000
ROA not after: Tue 09 Jun 2026 13:35:28 +0000
asID: 268801
IP address blocks: 45.173.78.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d3:e3:ca:3e:01:af:eb:43:4a:00:f9:24:f2:68:b8:1d:74:12:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95275964CD9C4F9994AC4DB3B2756C130AAE0CDA
Validity
Not Before: Jun 10 13:30:28 2025 GMT
Not After : Jun 9 13:35:28 2026 GMT
Subject: CN=D20AF2E597A2A6AC7384B8BA7CE0C78E11D49457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:21:75:ef:fa:e5:50:f8:e4:2c:97:e4:04:
4a:c5:24:04:cf:fa:52:59:81:24:49:6a:23:ac:33:
67:9d:ed:4e:15:d1:b9:d1:49:bb:4d:f7:bd:6a:a6:
e2:d3:c4:67:5d:ef:dc:ee:57:32:48:c5:b5:63:14:
a1:e9:2d:b2:24:f4:fe:ed:a8:6b:ea:f0:21:31:3c:
8a:62:1a:ed:67:5c:41:6b:a1:92:20:a4:69:f0:64:
a1:bd:fa:0c:98:93:ac:9c:56:95:95:11:54:8c:4a:
7f:c9:e5:55:74:fb:f2:e0:dd:07:31:4f:bc:96:49:
89:4d:f5:c1:0a:87:ad:d0:9d:9e:4f:21:68:62:f3:
a9:8f:51:92:e5:a1:aa:5e:cd:c9:1a:12:c4:4f:0c:
b6:52:36:49:cc:33:2d:00:10:2c:32:73:48:1f:ad:
bb:a5:3f:fb:66:31:9c:62:2e:73:d3:d5:4f:3d:9c:
56:bd:34:2e:4e:c8:e6:fe:30:40:8a:2b:d6:64:a1:
e5:fb:ef:57:b5:dc:a2:f4:7c:bc:72:f3:23:fc:dd:
68:d5:d7:42:80:73:2b:01:b8:dc:32:43:23:b4:37:
be:df:17:0f:17:cb:82:55:e8:92:e7:09:90:45:5d:
f2:42:a7:67:fb:db:21:da:ea:cb:84:67:f8:bb:e5:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:F2:E5:97:A2:A6:AC:73:84:B8:BA:7C:E0:C7:8E:11:D4:94:57
X509v3 Authority Key Identifier:
keyid:95:27:59:64:CD:9C:4F:99:94:AC:4D:B3:B2:75:6C:13:0A:AE:0C:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37382e302f32342d3234203d3e20323638383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.78.0/24
Signature Algorithm: sha256WithRSAEncryption
82:25:25:e0:42:31:fa:6e:22:fc:81:cc:a9:48:fb:00:85:e2:
41:a7:1f:7e:cd:ae:37:99:c7:0e:d0:d6:25:f3:42:8b:ee:e9:
e2:0d:0a:25:b6:88:c8:25:35:53:a2:b7:5b:33:7a:93:b6:e2:
75:f0:ea:b0:97:86:95:66:ba:fa:8b:dc:f4:d2:bd:40:e1:fc:
69:59:d5:f1:b0:05:6c:5d:c2:52:06:b5:ac:08:96:af:32:cb:
6b:ad:a7:08:d4:2b:bd:9a:eb:35:5d:82:e1:dc:dc:f9:f4:a6:
34:e8:44:e3:d2:44:65:78:7c:0b:72:a0:6e:50:90:30:b8:7d:
ba:d1:2b:5a:aa:0f:94:96:e8:38:88:10:d1:ee:84:c2:c5:0c:
2a:ed:51:41:35:34:e4:21:bf:6f:47:3f:dc:5d:ae:ed:a2:bd:
70:66:0a:be:18:46:50:4f:9c:33:28:af:06:98:2e:b7:f8:8b:
e6:b5:46:2e:2a:d1:45:b4:b4:d2:62:76:d8:9b:f8:a9:15:b4:
9b:45:05:26:2c:d5:61:78:12:d1:59:92:01:38:6a:45:a7:45:
78:c0:e7:86:66:e9:dc:d7:d0:4b:83:40:48:34:c8:97:d5:da:
aa:71:f8:34:08:21:76:f4:49:1a:88:7d:41:2a:eb:b8:e3:00:
33:18:e3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 09:27:36 2025 by rpki-client