Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/34352e37302e32382e302f32322d3332203d3e20323637353734.roa
File: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (raw, json)
Hash identifier: mqNqqmq59PG1ngENDtBPLxxBLIXkdkydi6VBE9MoqL8=
Subject key identifier: 00:6D:15:92:BC:F8:6C:9E:60:42:A4:AB:95:75:FA:BE:FA:34:84:BD
Certificate issuer: /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial: 4BA9ABA2C48708FC87D75F2A6E3DDD08E171ABEC
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/34352e37302e32382e302f32322d3332203d3e20323637353734.roa
Signing time: Mon 25 May 2026 13:20:42 +0000
ROA not before: Mon 25 May 2026 13:15:42 +0000
ROA not after: Mon 24 May 2027 13:20:42 +0000
asID: 267574
IP address blocks: 45.70.28.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a9:ab:a2:c4:87:08:fc:87:d7:5f:2a:6e:3d:dd:08:e1:71:ab:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Validity
Not Before: May 25 13:15:42 2026 GMT
Not After : May 24 13:20:42 2027 GMT
Subject: CN=006D1592BCF86C9E6042A4AB9575FABEFA3484BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:10:07:a8:21:c1:06:da:34:9a:b0:07:06:
c3:5c:cf:a7:89:37:fa:8d:81:83:26:2e:3a:34:d2:
09:04:22:68:8a:64:87:dd:b4:4b:d2:70:7f:f5:28:
10:66:71:9e:a1:e4:3b:ec:4e:61:ab:4e:bf:1e:01:
8b:80:e5:9e:b1:3c:8f:96:24:34:6c:93:04:de:bb:
95:c7:fb:27:c5:ce:c2:5c:e1:51:99:24:a8:ba:50:
16:4e:59:16:10:4d:02:38:c5:e1:e5:9a:64:38:db:
76:b0:fa:ed:47:8d:bd:a9:79:c2:21:b3:1d:de:e3:
71:84:82:a6:d5:fe:d2:67:60:5f:a7:2b:55:94:e1:
21:a6:b4:2d:1a:12:6a:a8:76:e1:e9:be:d6:71:fc:
d0:d4:6b:db:96:cc:1c:79:de:94:04:f7:9d:a2:5d:
08:67:4b:a8:73:cc:a6:a3:3f:4c:ec:ca:22:db:43:
5f:d0:27:5c:c1:14:03:32:4a:1c:11:55:f9:87:7a:
ff:b9:bc:c4:9f:c6:3e:92:c4:80:6f:e8:86:22:bc:
f8:74:ab:99:ce:10:a7:f7:d0:44:99:26:ee:dc:e3:
e5:db:b0:89:10:a5:d2:46:47:fa:d0:35:04:50:87:
82:1f:a5:5f:89:4b:c8:22:ec:d4:b8:3f:d1:59:99:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:15:92:BC:F8:6C:9E:60:42:A4:AB:95:75:FA:BE:FA:34:84:BD
X509v3 Authority Key Identifier:
keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/34352e37302e32382e302f32322d3332203d3e20323637353734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.28.0/22
Signature Algorithm: sha256WithRSAEncryption
38:46:ed:e4:00:40:a8:f8:4b:4d:d6:f2:b0:3d:97:a4:6e:e7:
5e:b2:fb:59:fe:7a:85:0d:92:48:e2:69:37:73:0d:a1:97:b5:
17:ab:79:9e:8a:bd:10:5f:bb:26:10:30:29:f3:8b:23:83:41:
fe:b2:f0:4d:ee:92:16:19:7a:6c:37:ee:c1:51:c0:75:bd:8f:
21:35:b8:8b:a4:86:29:0c:57:1f:98:46:6a:37:9e:e9:03:59:
b6:dc:8b:73:ca:3b:9e:71:72:08:76:28:e6:7f:4a:6e:06:93:
49:dc:4e:80:16:09:e9:48:1c:53:f9:70:25:b3:a2:77:44:43:
63:8a:aa:af:5b:8d:10:c2:bd:78:b0:89:ae:6c:7a:16:f3:2a:
4d:cd:8a:4c:48:bb:28:3b:59:b5:1a:ec:ed:a2:52:ba:13:93:
f7:34:63:6e:1f:cd:ea:14:53:26:b1:bb:15:4f:fd:4a:c8:e3:
fe:38:ce:19:15:d0:41:21:28:67:a5:e6:6a:92:e0:93:58:46:
79:fc:ee:c9:23:1e:38:d7:4b:e3:f0:77:61:7d:d6:3f:d5:9a:
de:2f:24:fb:5f:c3:16:d9:81:32:5c:a9:73:50:1e:b8:22:f6:
8b:2a:52:4a:25:ca:77:ef:08:bf:53:ca:f5:f0:2c:44:28:4e:
f2:f1:4d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:55:32 2026 by rpki-client