Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37392e302f32342d3234203d3e20323638383031.roa
File: 34352e3137332e37392e302f32342d3234203d3e20323638383031.roa (raw, json)
Hash identifier: l3VO4u9zsEROKnJ4wCBj/PlgR09DEk2jSBg4+Q7j1LQ=
Subject key identifier: C9:93:68:EF:B2:BF:71:1D:A3:BB:A3:26:F5:00:B2:34:21:60:32:B5
Certificate issuer: /CN=95275964CD9C4F9994AC4DB3B2756C130AAE0CDA
Certificate serial: 364F430BF5AD13935F37B591D622DCC50C416EAF
Authority key identifier: 95:27:59:64:CD:9C:4F:99:94:AC:4D:B3:B2:75:6C:13:0A:AE:0C:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37392e302f32342d3234203d3e20323638383031.roa
Signing time: Tue 10 Jun 2025 13:35:28 +0000
ROA not before: Tue 10 Jun 2025 13:30:28 +0000
ROA not after: Tue 09 Jun 2026 13:35:28 +0000
asID: 268801
IP address blocks: 45.173.79.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:4f:43:0b:f5:ad:13:93:5f:37:b5:91:d6:22:dc:c5:0c:41:6e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95275964CD9C4F9994AC4DB3B2756C130AAE0CDA
Validity
Not Before: Jun 10 13:30:28 2025 GMT
Not After : Jun 9 13:35:28 2026 GMT
Subject: CN=C99368EFB2BF711DA3BBA326F500B234216032B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:de:55:ef:e3:14:d5:00:28:ee:8c:b4:32:
e4:53:af:ac:81:7d:3b:ff:5f:93:58:fd:b7:99:b9:
d6:8a:2d:27:39:ce:00:6e:df:0e:33:50:e5:c5:6a:
dc:1b:48:91:fb:61:ed:d7:b3:4f:66:27:b3:87:91:
0a:9d:4d:08:12:2b:02:ce:a3:f6:4d:d2:ed:d9:49:
21:1a:93:f1:87:af:89:6a:84:9e:6f:3a:bb:2e:75:
25:c6:76:64:41:24:1f:f8:59:6a:1c:21:6e:41:5b:
aa:bb:98:24:3a:9e:62:8d:d4:6f:a2:3a:04:10:8f:
7e:87:6a:ba:95:ab:23:9d:71:4a:c0:f9:b5:b4:42:
90:55:c4:85:d3:40:a8:ec:23:c6:46:33:35:a7:96:
39:e3:68:9d:3c:ac:3a:af:2e:fe:01:47:e7:ea:15:
ad:5e:b5:b2:bf:bb:f4:fc:1d:d6:6a:1d:1e:cf:6a:
77:f0:13:dd:89:c7:9d:19:f2:e6:1a:2c:d7:84:8a:
b0:8a:3f:9b:0c:47:f0:72:b2:8a:4f:1b:5a:59:60:
8e:f6:dc:53:e0:15:51:af:27:67:b7:04:df:6a:9b:
a7:13:d0:6e:f4:0d:b8:71:76:65:33:2f:f1:05:97:
1e:07:6e:75:25:d8:23:70:10:da:d4:29:ed:0a:f5:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:93:68:EF:B2:BF:71:1D:A3:BB:A3:26:F5:00:B2:34:21:60:32:B5
X509v3 Authority Key Identifier:
keyid:95:27:59:64:CD:9C:4F:99:94:AC:4D:B3:B2:75:6C:13:0A:AE:0C:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95275964CD9C4F9994AC4DB3B2756C130AAE0CDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gcGhsix69wU41QvMsBWKnZF8YYoEWZqCWUNEfREnMrM/0/34352e3137332e37392e302f32342d3234203d3e20323638383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.79.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ee:24:15:09:46:66:07:1d:94:cf:68:e3:10:7b:77:b8:21:
fa:d6:81:20:93:08:8c:dc:81:d4:b8:ac:72:a0:34:8f:ed:93:
8c:1e:cf:a4:4c:b0:fc:3d:ba:c1:27:88:02:7f:a4:f8:0a:74:
bb:94:03:c1:28:65:34:63:85:27:bf:30:b6:06:e9:65:42:51:
bf:7c:18:ec:ea:c8:0c:44:e1:2c:64:51:32:4b:9e:8e:69:ef:
3a:a9:f8:f3:60:0e:de:33:ec:2c:ec:3a:d9:c6:7a:ab:e5:a9:
23:3f:15:58:4f:d4:24:e1:e7:2e:7f:19:2e:52:18:66:f4:c3:
9a:a6:e2:88:a5:83:5d:04:85:d4:41:14:1d:41:87:c5:8d:87:
aa:92:4e:63:31:f7:f6:b1:ad:4a:ed:71:e5:12:a5:77:4c:1d:
41:79:c0:d9:5b:c1:bd:85:d5:4d:ba:96:28:57:d9:da:42:6b:
f8:e8:7b:2e:c1:7e:78:39:40:0c:75:57:c9:15:ad:1d:f7:1e:
e0:34:e9:c8:4f:84:a7:7d:d0:14:73:7b:07:42:fa:1c:9e:1c:
0f:dc:18:64:48:15:90:03:1d:5c:c2:9d:e0:22:f8:03:7d:ed:
89:45:a4:b8:32:90:ca:96:90:39:88:39:ea:f5:f3:dc:75:2d:
94:4e:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:40:03 2025 by rpki-client