Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6b7U4uggvJMSKPdYnhmxQEwwCn6TApnoy6Ghoyw5ABV2/0/34352e3233372e3231372e302f32342d3234203d3e20323638323939.roa
File: 34352e3233372e3231372e302f32342d3234203d3e20323638323939.roa (raw, json)
Hash identifier: fJ2bYhjmjPKQG6WJ6rymjPlA8+4qr9ceMF3BoPYt63k=
Subject key identifier: 4C:8B:CA:23:21:3D:4F:1C:51:03:A4:25:4B:80:CE:A3:43:11:D2:7A
Certificate issuer: /CN=1DB352FB189B016E05AAE98CAC7385C15DC0F584
Certificate serial: 53DF059C29D49D9711608B79940CD0BCADA4255C
Authority key identifier: 1D:B3:52:FB:18:9B:01:6E:05:AA:E9:8C:AC:73:85:C1:5D:C0:F5:84
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DB352FB189B016E05AAE98CAC7385C15DC0F584.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6b7U4uggvJMSKPdYnhmxQEwwCn6TApnoy6Ghoyw5ABV2/0/34352e3233372e3231372e302f32342d3234203d3e20323638323939.roa
Signing time: Fri 01 Aug 2025 23:08:42 +0000
ROA not before: Fri 01 Aug 2025 23:03:42 +0000
ROA not after: Fri 31 Jul 2026 23:08:42 +0000
asID: 268299
IP address blocks: 45.237.217.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:df:05:9c:29:d4:9d:97:11:60:8b:79:94:0c:d0:bc:ad:a4:25:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DB352FB189B016E05AAE98CAC7385C15DC0F584
Validity
Not Before: Aug 1 23:03:42 2025 GMT
Not After : Jul 31 23:08:42 2026 GMT
Subject: CN=4C8BCA23213D4F1C5103A4254B80CEA34311D27A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:50:fc:66:ad:6b:75:b4:ce:ad:e4:ba:6f:
4e:95:99:92:b3:76:03:3d:5d:f6:30:55:47:f8:67:
81:48:85:54:d5:a8:f1:5f:f6:19:e8:24:3e:29:b0:
3d:d4:c2:83:2e:79:e5:fc:d0:10:b9:84:5d:41:11:
34:c5:ca:9f:a1:e7:62:0e:9a:34:b5:b6:f3:5a:a6:
69:f2:76:83:9d:ec:b7:ab:94:87:b6:f0:da:ba:2f:
70:24:f5:a7:1a:9a:34:17:7b:3b:15:b3:8d:ab:72:
b5:2f:30:d8:95:7d:d3:d8:0b:05:bd:aa:74:8e:9f:
b6:68:90:72:ca:f1:5a:ab:10:e8:c4:73:58:0a:2c:
e2:c5:1c:88:89:c3:41:74:9a:2b:ba:75:9d:78:d9:
93:9a:3f:b7:32:39:71:a1:8d:bd:cd:59:17:d6:ca:
2f:0c:75:8d:cb:c4:01:04:39:ee:e0:c4:f6:8b:ce:
f6:13:cb:f9:fc:a5:7e:fe:b3:5d:5e:f6:68:db:b1:
b7:7a:c6:ac:d3:03:71:3a:53:bf:e4:6c:c7:f1:2e:
c8:bf:15:c3:ae:0c:f1:18:09:2d:a8:ff:b9:aa:8a:
1a:a0:58:c5:85:f2:d2:83:3c:c5:ae:17:10:ae:09:
b4:86:15:83:83:06:16:e1:b2:68:fc:4d:17:85:40:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8B:CA:23:21:3D:4F:1C:51:03:A4:25:4B:80:CE:A3:43:11:D2:7A
X509v3 Authority Key Identifier:
keyid:1D:B3:52:FB:18:9B:01:6E:05:AA:E9:8C:AC:73:85:C1:5D:C0:F5:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6b7U4uggvJMSKPdYnhmxQEwwCn6TApnoy6Ghoyw5ABV2/0/1DB352FB189B016E05AAE98CAC7385C15DC0F584.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DB352FB189B016E05AAE98CAC7385C15DC0F584.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6b7U4uggvJMSKPdYnhmxQEwwCn6TApnoy6Ghoyw5ABV2/0/34352e3233372e3231372e302f32342d3234203d3e20323638323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.217.0/24
Signature Algorithm: sha256WithRSAEncryption
89:91:9c:54:0f:1f:5d:db:eb:14:b6:09:b3:48:2e:2a:ac:a5:
67:57:ec:ba:94:08:52:ef:30:4b:88:61:0f:98:ee:bf:3b:5c:
62:33:4e:80:6f:23:2e:12:02:d7:2f:1e:cd:ed:98:59:d0:09:
4c:34:ad:03:13:0a:cc:fe:f7:6f:e1:60:c5:a3:04:e3:32:ca:
24:44:17:1c:25:fb:75:dc:f0:f6:e5:0c:e0:d6:21:19:1c:79:
f0:15:ed:6d:64:7c:77:13:d2:50:7f:3e:af:2c:28:86:64:3b:
11:c0:f4:1b:8c:23:c2:13:f3:2a:9d:39:00:a4:3c:ea:e7:62:
86:f7:12:db:a0:7a:a0:c6:1b:c3:52:ae:eb:80:b8:97:aa:ca:
31:98:fa:03:15:a3:be:de:fb:cf:c0:d1:d2:1e:d6:9a:10:42:
32:4e:63:80:0c:1a:80:50:03:e9:7e:9a:5d:02:d2:c6:53:b5:
3d:b4:c0:6c:92:9e:80:80:c4:a6:09:e8:8f:c9:4e:46:66:81:
60:aa:56:0f:88:b8:d3:6c:3d:da:d2:5d:8b:bf:4c:52:08:83:
25:e2:49:30:45:45:dc:7f:08:d9:32:df:c4:4c:b3:4a:c7:37:
ff:de:a0:76:6a:24:2c:58:a9:d3:ee:24:21:7e:a2:9c:c7:33:
49:99:bd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:32:23 2025 by rpki-client