Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3234203d3e20323633303437.roa
File: 34352e3138382e3232342e302f32322d3234203d3e20323633303437.roa (raw, json)
Hash identifier: 4Xlkp6QO8ZAY9USvyBRQUCLp485pvheaeJ2/totgZe0=
Subject key identifier: 01:96:A6:7E:2F:F0:C8:9B:82:F3:60:32:94:7F:65:8D:62:2D:F9:15
Certificate issuer: /CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Certificate serial: 59009E42DC9331D394FE81CE943BA43EE285E6A4
Authority key identifier: 99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3234203d3e20323633303437.roa
Signing time: Fri 24 Oct 2025 16:24:32 +0000
ROA not before: Fri 24 Oct 2025 16:19:32 +0000
ROA not after: Fri 23 Oct 2026 16:24:32 +0000
asID: 263047
IP address blocks: 45.188.224.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:00:9e:42:dc:93:31:d3:94:fe:81:ce:94:3b:a4:3e:e2:85:e6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Validity
Not Before: Oct 24 16:19:32 2025 GMT
Not After : Oct 23 16:24:32 2026 GMT
Subject: CN=0196A67E2FF0C89B82F36032947F658D622DF915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:10:e3:b4:b1:b6:37:4e:af:29:41:ff:bb:
5f:b2:aa:b3:3a:e5:43:e9:ab:ed:41:30:e2:99:32:
4c:43:75:da:99:54:63:7b:82:75:9b:ba:52:3d:c3:
c5:52:58:79:98:01:e5:b3:c5:03:f6:ba:ee:2f:4c:
d3:82:a3:f9:3b:8a:10:4e:17:15:40:ac:ba:1a:43:
c6:80:48:20:d8:f6:bd:bd:bc:2f:b4:5c:b3:1c:cb:
2e:b9:d2:58:eb:14:ac:9a:28:60:e3:13:d9:c8:bb:
e0:2f:72:53:0c:b0:dc:18:8a:f2:84:1f:d2:01:ba:
77:b4:1b:11:f0:c1:3d:01:b2:55:8a:d9:72:e4:75:
46:82:0a:9b:1b:92:7d:17:02:d1:ad:35:24:f6:4e:
fe:07:4f:43:16:ab:0f:ec:70:d9:8d:36:6c:98:ba:
3d:d5:17:91:3e:ff:ca:8b:e8:09:52:86:4a:74:f7:
3a:b0:4e:5e:a8:e5:e8:2b:eb:90:cf:04:e8:72:20:
f3:b3:d1:b1:15:e4:12:e3:e8:0c:d8:3d:e7:e3:82:
05:c3:18:4b:6c:95:b9:71:15:e5:52:ce:88:bb:bd:
51:84:88:49:d7:1e:dd:24:3c:1b:15:24:9a:41:66:
45:61:e3:01:ad:76:c1:d6:f8:ac:6b:93:14:61:1c:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:A6:7E:2F:F0:C8:9B:82:F3:60:32:94:7F:65:8D:62:2D:F9:15
X509v3 Authority Key Identifier:
keyid:99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3234203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:27:55:03:21:27:be:78:36:70:00:18:71:bf:0f:83:e6:ef:
98:37:73:a1:cd:af:e9:ab:02:8d:aa:bb:d2:6d:2a:5e:52:0a:
a8:23:fd:53:04:a1:28:8a:d7:4b:78:3e:d6:54:94:11:d1:bd:
77:d8:0a:95:07:14:b9:1b:d4:75:b4:b7:d2:ce:2a:8f:c9:27:
f4:d0:8e:4c:31:e6:0d:2c:17:d6:7e:1b:96:91:b8:d8:c3:a1:
41:4d:8f:d6:2c:a5:e8:4b:8c:e1:ad:b3:46:9c:a9:01:38:5b:
37:e0:7d:0a:66:16:4f:cb:28:a7:db:23:c6:93:bd:ef:00:b0:
b1:cc:7f:28:af:48:96:42:8f:5f:25:ca:f0:8e:d8:10:a8:c7:
6f:46:7b:69:e2:06:b0:4a:eb:76:af:7b:12:00:8b:aa:c0:0d:
61:ba:8e:7d:ae:6d:f2:b0:42:03:db:0c:7d:bf:8b:12:a7:9f:
76:26:68:0e:73:00:2b:fb:30:eb:bd:e5:c5:04:7d:4d:99:78:
4b:d5:dd:dc:68:ad:cb:03:2d:9b:84:8e:49:a9:7d:ac:6b:14:
ee:2d:39:82:ad:fe:98:eb:8f:3e:23:71:34:3a:68:04:63:ba:
b9:77:4d:42:8b:10:41:29:da:2e:63:48:ca:d2:25:a7:88:08:
f6:c7:78:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:11:37 2025 by rpki-client