Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa
File: 34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa (raw, json)
Hash identifier: abY2ZiwLus4Y0y8kU8Bbk1j9YGW0GJGomWVx/NV1F0s=
Subject key identifier: 22:81:DA:20:F7:81:6A:25:AE:5F:20:7E:82:FA:0D:11:38:13:2B:AD
Certificate issuer: /CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Certificate serial: 61FA1D02CC0F915ACF50322067BE65309FE7AA85
Authority key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa
Signing time: Thu 06 Mar 2025 07:25:38 +0000
ROA not before: Thu 06 Mar 2025 07:20:38 +0000
ROA not after: Thu 05 Mar 2026 07:25:38 +0000
asID: 267024
IP address blocks: 45.227.113.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:fa:1d:02:cc:0f:91:5a:cf:50:32:20:67:be:65:30:9f:e7:aa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C
Validity
Not Before: Mar 6 07:20:38 2025 GMT
Not After : Mar 5 07:25:38 2026 GMT
Subject: CN=2281DA20F7816A25AE5F207E82FA0D1138132BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:1c:85:cc:55:e7:58:95:b7:42:69:a0:bf:
49:66:a7:d7:d1:68:84:3c:a2:f0:18:1d:22:97:11:
c1:83:5c:4d:9e:14:ce:e7:3f:9f:b4:23:cf:fe:21:
a3:d6:e9:42:de:f0:09:2d:8f:e4:11:51:d6:36:aa:
79:ab:75:22:72:89:bf:66:87:b3:3f:24:15:a4:ae:
3a:78:17:2b:05:2a:62:61:df:fd:03:94:c7:7c:57:
ab:14:21:78:d4:7b:06:0e:d5:ab:ec:83:f2:43:28:
03:10:0e:f9:d0:12:af:68:2a:e5:32:ef:13:f7:35:
6a:1f:31:c5:4c:a5:09:57:1e:78:5f:41:b3:a1:b8:
dc:76:ae:7d:47:89:46:66:9d:fd:1b:65:a7:31:aa:
65:d4:d3:c0:bb:ea:cf:29:fe:7b:1a:59:d3:5a:ea:
a9:f2:82:46:da:56:81:bb:56:96:d5:d7:f9:5d:66:
83:54:ab:41:e7:3f:77:1b:d4:95:64:15:3c:8b:de:
6a:06:fb:e4:f9:8f:2b:c6:f5:38:7b:50:00:42:7e:
04:7b:40:fd:9e:a5:a0:d6:6f:b7:4e:06:0a:03:f0:
33:94:d3:fc:d3:85:a5:28:35:50:f6:b3:c6:0f:36:
13:5a:bd:cf:5f:7d:b2:84:85:1d:f5:24:ff:b2:47:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:81:DA:20:F7:81:6A:25:AE:5F:20:7E:82:FA:0D:11:38:13:2B:AD
X509v3 Authority Key Identifier:
keyid:DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/34352e3232372e3131332e302f32342d3234203d3e20323637303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:33:55:2f:5d:e0:57:cc:ad:07:9b:2c:b9:63:07:dc:0f:c4:
25:aa:b0:69:fc:b3:e2:98:7b:4c:a0:36:0a:47:a7:fa:44:b8:
ba:c0:1a:26:3b:43:c7:a2:e4:e8:16:65:b0:b5:0a:5d:ac:9f:
21:2c:19:7f:5e:95:cd:88:35:68:88:95:3e:89:95:3a:d0:8a:
1a:89:a9:84:52:e4:dd:cf:37:65:4f:4d:85:86:7e:b5:12:f6:
d8:54:46:12:75:a9:8f:79:ca:19:fd:e5:0b:1e:7c:fc:d5:da:
e1:57:31:83:ef:aa:f5:7f:30:f4:20:a3:38:46:c9:f9:f2:da:
93:24:f9:02:bd:55:0f:3c:2d:83:bb:7b:e4:3e:c8:f1:d6:0b:
d0:8d:d8:c5:24:ba:e1:2e:c7:92:e5:a8:f3:87:1b:33:30:ac:
81:dc:80:52:95:5d:cd:68:12:c7:58:60:83:28:ab:e8:0b:19:
40:dd:40:11:f3:5d:87:17:23:8c:e6:22:3d:a1:a7:ba:dd:4d:
be:ea:de:ce:c8:27:99:0e:f0:5a:4f:c5:e8:25:8e:a2:80:4d:
81:2f:a3:97:db:72:4f:d0:90:f4:e0:cf:14:02:70:4b:c1:96:
55:e9:02:19:95:19:1c:fe:d2:4e:12:e2:cc:d5:4c:d5:10:8a:
d6:f1:af:d2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYfodAswPkVrPUDIgZ75lMJ/nqoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMwQzE2RUEzQTNCODI2NTAxRDAyQUMyRTYyRUY5QTFD
RDk3MTIwQzAeFw0yNTAzMDYwNzIwMzhaFw0yNjAzMDUwNzI1MzhaMDMxMTAvBgNV
BAMTKDIyODFEQTIwRjc4MTZBMjVBRTVGMjA3RTgyRkEwRDExMzgxMzJCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9xyFzFXnWJW3Qmmgv0lmp9fR
aIQ8ovAYHSKXEcGDXE2eFM7nP5+0I8/+IaPW6ULe8Aktj+QRUdY2qnmrdSJyib9m
h7M/JBWkrjp4FysFKmJh3/0DlMd8V6sUIXjUewYO1avsg/JDKAMQDvnQEq9oKuUy
7xP3NWofMcVMpQlXHnhfQbOhuNx2rn1HiUZmnf0bZacxqmXU08C76s8p/nsaWdNa
6qnygkbaVoG7VpbV1/ldZoNUq0HnP3cb1JVkFTyL3moG++T5jyvG9Th7UABCfgR7
QP2epaDWb7dOBgoD8DOU0/zThaUoNVD2s8YPNhNavc9ffbKEhR31JP+yRyTFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIoHaIPeBaiWuXyB+gvoNETgTK60wHwYDVR0j
BBgwFoAU3AwW6jo7gmUB0CrC5i75oc2XEgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZ3dEM1b2g0OFpqR2FFS211SFJEUmo0Y05VN3M0U3ZhVXY2dnd0V3Vn
MU4vMS9EQzBDMTZFQTNBM0I4MjY1MDFEMDJBQzJFNjJFRjlBMUNEOTcxMjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMEMxNkVBM0EzQjgyNjUw
MUQwMkFDMkU2MkVGOUExQ0Q5NzEyMEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGd3RDNW9oNDhaakdhRUttdUhSRFJqNGNOVTdzNFN2YVV2NnZ3dFd1ZzFOLzEv
MzQzNTJlMzIzMjM3MmUzMTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt43EwDQYJKoZIhvcNAQELBQADggEBADozVS9d
4FfMrQebLLljB9wPxCWqsGn8s+KYe0ygNgpHp/pEuLrAGiY7Q8ei5OgWZbC1Cl2s
nyEsGX9elc2INWiIlT6JlTrQihqJqYRS5N3PN2VPTYWGfrUS9thURhJ1qY95yhn9
5QsefPzV2uFXMYPvqvV/MPQgozhGyfny2pMk+QK9VQ88LYO7e+Q+yPHWC9CN2MUk
uuEux5LlqPOHGzMwrIHcgFKVXc1oEsdYYIMoq+gLGUDdQBHzXYcXI4zmIj2hp7rd
Tb7q3s7IJ5kO8FpPxegljqKATYEvo5fbck/QkPTgzxQCcEvBllXpAhmVGRz+0k4S
4szVTNUQitbxr9I=
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:59:29 2025 by rpki-client