Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa
File: 34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa (raw, json)
Hash identifier: 52UN5fGDT4gW/FGEu6MRGg6JNc6QtTZnx3GjSNQo3+s=
Subject key identifier: 2F:B0:AB:86:E2:8A:A0:4D:2E:30:6F:A7:A5:6E:FB:2A:8C:58:5A:1A
Certificate issuer: /CN=A35142C9CC2E829537680E680EFBF8C64BFBDF74
Certificate serial: 25D011ADBBC5D8ADCC8CEB9B1BD34F5ED5E6CD3B
Authority key identifier: A3:51:42:C9:CC:2E:82:95:37:68:0E:68:0E:FB:F8:C6:4B:FB:DF:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35142C9CC2E829537680E680EFBF8C64BFBDF74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa
Signing time: Fri 27 Feb 2026 14:32:08 +0000
ROA not before: Fri 27 Feb 2026 14:27:08 +0000
ROA not after: Fri 26 Feb 2027 14:32:08 +0000
asID: 273311
IP address blocks: 45.170.137.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d0:11:ad:bb:c5:d8:ad:cc:8c:eb:9b:1b:d3:4f:5e:d5:e6:cd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35142C9CC2E829537680E680EFBF8C64BFBDF74
Validity
Not Before: Feb 27 14:27:08 2026 GMT
Not After : Feb 26 14:32:08 2027 GMT
Subject: CN=2FB0AB86E28AA04D2E306FA7A56EFB2A8C585A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:4e:13:74:cc:d4:fc:99:56:75:90:2e:4a:
48:78:8d:97:c2:b0:91:f3:98:92:89:b5:0d:d1:57:
c4:2c:b5:09:2a:2c:47:98:3c:17:98:57:e6:a7:22:
46:89:33:47:3a:90:57:59:d4:77:c5:12:9d:22:9a:
54:00:62:63:df:ee:b2:b3:ad:ca:33:ca:c9:d6:0f:
85:7f:dd:6a:27:50:ac:e0:e1:ae:40:2c:ab:a9:1b:
3c:b6:e1:45:12:9b:60:8a:e3:2e:38:62:59:34:25:
26:c4:1b:26:42:5f:59:26:ef:b8:cb:c0:f8:f0:73:
19:b8:ea:4b:bc:b8:b4:e6:0a:e9:1c:83:49:bc:0f:
11:23:98:65:52:12:7d:83:8d:99:6c:e4:2b:5b:1c:
6a:73:91:88:a6:41:42:b6:f6:c0:f2:f8:d6:3e:94:
90:e1:6b:96:e3:b4:8c:db:94:94:1c:2a:cf:26:58:
a8:0a:49:8a:b2:19:4e:db:4d:ae:58:58:e3:c8:8d:
0d:b1:26:2b:29:96:ce:51:1b:5b:a4:c7:39:93:1b:
58:ab:94:66:4b:20:c7:0d:90:bb:00:f4:c4:db:2c:
da:96:14:dc:8a:0c:cd:d1:c4:f4:bb:60:c4:b5:01:
92:3d:3e:6f:55:a7:d6:c3:ac:5d:04:83:fb:2d:76:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B0:AB:86:E2:8A:A0:4D:2E:30:6F:A7:A5:6E:FB:2A:8C:58:5A:1A
X509v3 Authority Key Identifier:
keyid:A3:51:42:C9:CC:2E:82:95:37:68:0E:68:0E:FB:F8:C6:4B:FB:DF:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/A35142C9CC2E829537680E680EFBF8C64BFBDF74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35142C9CC2E829537680E680EFBF8C64BFBDF74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/34352e3137302e3133372e302f32342d3234203d3e20323733333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c8:59:da:fa:4e:2f:6c:34:d5:f8:55:4b:ac:83:18:25:cb:
0f:21:24:e0:b0:24:d1:b9:84:28:08:17:ff:ee:d4:ba:55:b1:
f3:46:1e:21:46:8d:25:1c:05:dc:b5:69:02:b0:55:5f:e8:73:
9d:b7:cd:7a:25:51:5b:6f:f4:4a:d7:34:9e:57:b9:77:5f:94:
c7:16:49:1c:e0:7d:35:61:5d:41:2c:ba:8b:ee:08:0d:c3:60:
64:b5:3f:3e:c7:89:96:e8:83:11:75:f5:b3:49:56:a4:09:b5:
93:34:1b:2c:e8:3b:01:ae:a5:16:d7:2c:cf:3b:22:09:ad:4c:
83:1f:fd:7f:42:6f:ad:8d:49:2b:73:9d:7e:4e:0c:51:97:b4:
6d:5a:47:9d:8d:ad:4f:85:dd:a0:8f:5b:61:18:9a:97:ed:a9:
49:d0:c1:76:5b:42:c9:37:4f:01:10:80:3c:14:6f:dd:f1:92:
fa:e9:9e:0f:99:2f:dc:c6:90:7c:11:89:56:4b:62:d2:21:be:
9f:97:89:97:92:67:83:32:b3:0c:1f:df:90:6b:17:ab:9f:85:
b3:75:b1:c2:0c:d2:1b:ae:a7:2f:fc:78:80:cd:b7:2b:82:60:
dc:97:c0:ba:a1:b1:fa:ed:97:c6:2f:b2:59:a6:1b:4f:20:3a:
c5:76:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:45:14 2026 by rpki-client