Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa
File: 34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa (raw, json)
Hash identifier: ISx1EaMUcpZzRAPsX8J+K251aNMePYHn4+Bz7RRwb2A=
Subject key identifier: 46:D5:39:C3:9A:1C:8F:39:D9:EA:46:EC:FF:41:53:E1:5E:65:90:E1
Certificate issuer: /CN=1E4DBF67BA6C544FEB0BF88A714C80A4417D6641
Certificate serial: 09F5B89164066EE9D83D0D8879DF3DA5B1FF58AB
Authority key identifier: 1E:4D:BF:67:BA:6C:54:4F:EB:0B:F8:8A:71:4C:80:A4:41:7D:66:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa
Signing time: Wed 23 Apr 2025 12:11:24 +0000
ROA not before: Wed 23 Apr 2025 12:06:24 +0000
ROA not after: Wed 22 Apr 2026 12:11:24 +0000
asID: 267956
IP address blocks: 45.166.116.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f5:b8:91:64:06:6e:e9:d8:3d:0d:88:79:df:3d:a5:b1:ff:58:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E4DBF67BA6C544FEB0BF88A714C80A4417D6641
Validity
Not Before: Apr 23 12:06:24 2025 GMT
Not After : Apr 22 12:11:24 2026 GMT
Subject: CN=46D539C39A1C8F39D9EA46ECFF4153E15E6590E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:a6:37:03:7e:aa:01:86:e3:fc:fb:23:75:
9b:50:75:c1:d1:f7:f9:7d:bb:39:31:e6:b8:77:72:
74:db:ca:e0:b3:7e:04:9f:a8:98:ae:f1:e6:15:4c:
44:e9:fe:06:40:d5:98:77:ab:3f:84:c9:be:32:8b:
61:d0:e2:7f:fa:2f:e8:05:12:b3:08:77:1d:f8:db:
55:71:d4:dd:c9:96:a7:ea:c8:69:e1:f9:31:6f:c7:
e7:83:e2:7a:b7:71:a8:aa:1c:b5:bd:c3:af:53:98:
92:78:0e:79:57:09:e3:6d:5d:cb:43:eb:63:3a:15:
38:6d:d1:03:fd:5f:a9:b5:1e:a4:af:4e:84:23:d4:
d7:43:89:a1:f0:12:36:b6:52:6f:6b:f4:d4:ec:6c:
e1:d6:52:e3:b4:ba:37:7f:00:f5:58:38:5e:6c:9b:
db:93:0a:91:92:42:bc:54:b7:69:04:b4:2f:dd:24:
db:31:5c:72:83:07:c8:19:38:36:11:0b:e0:e9:87:
8f:37:57:e7:96:c3:eb:12:f6:48:5e:0c:df:c5:04:
ef:c2:d6:c0:bc:98:06:6a:1c:c5:88:b2:a3:23:49:
44:83:12:83:51:b9:b8:1a:d3:b3:c8:0f:2e:d5:29:
15:86:35:78:56:ea:a5:0c:db:0a:63:09:9c:f8:16:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D5:39:C3:9A:1C:8F:39:D9:EA:46:EC:FF:41:53:E1:5E:65:90:E1
X509v3 Authority Key Identifier:
keyid:1E:4D:BF:67:BA:6C:54:4F:EB:0B:F8:8A:71:4C:80:A4:41:7D:66:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E4DBF67BA6C544FEB0BF88A714C80A4417D6641.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/34352e3136362e3131362e302f32322d3234203d3e20323637393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:cd:5e:9f:9a:e7:f4:1d:6b:61:d0:44:a5:d4:fe:84:43:85:
c4:f0:8c:a3:7f:55:bc:fb:03:e7:6e:d7:15:96:9e:14:71:e6:
a8:5f:d6:c3:08:2d:bd:35:a7:ae:1d:d2:82:48:5b:02:f0:7c:
d8:44:68:a2:01:17:df:f8:63:41:d3:9c:22:67:cd:c5:15:66:
14:d4:85:97:33:0c:68:eb:45:4b:e2:59:e0:f4:eb:f0:86:35:
ea:d4:3b:66:9d:5d:f2:44:f8:96:31:1f:68:eb:b2:17:5b:4f:
f7:82:a1:9f:04:26:cb:1c:ff:58:36:2e:c3:d2:1f:c8:14:8d:
62:bf:b9:85:39:63:36:d8:90:e0:99:74:ab:94:80:68:3a:14:
80:e6:ab:b7:d7:20:44:b8:0c:54:35:7b:5b:f8:a1:28:a2:b0:
10:37:cb:3a:cf:90:6d:df:5b:57:7d:fb:3d:d4:34:45:50:7e:
ba:29:fc:6d:aa:14:1e:dc:4c:c6:fc:2f:71:c0:ae:4e:9e:5c:
6b:3a:4b:a9:f6:24:1d:05:32:99:ed:0b:e7:da:00:34:72:37:
84:c3:94:0f:3a:dc:5d:ba:a5:17:0b:66:ef:7f:9b:9f:42:fd:
49:16:49:67:f6:c0:a6:7e:2a:24:1e:69:fe:6f:ba:73:e9:8d:
aa:b3:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:49:49 2025 by rpki-client