Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
File: 34352e3136302e32342e302f32322d3332203d3e20323638333938.roa (raw, json)
Hash identifier: bTdYs9Mt8O81ZF7FRHKSW1EZUaPsM7sfI14lyQx5cTk=
Subject key identifier: 59:D4:47:F2:8E:62:FF:BF:41:C8:4F:7E:92:7D:CA:BC:5B:1C:18:07
Certificate issuer: /CN=06A7907222E454EB4ECF6A3E99C6542039076347
Certificate serial: 72EE72B475DCC6DC5CCB72ED31EAC71D88F2297A
Authority key identifier: 06:A7:90:72:22:E4:54:EB:4E:CF:6A:3E:99:C6:54:20:39:07:63:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A7907222E454EB4ECF6A3E99C6542039076347.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
Signing time: Thu 15 May 2025 18:29:23 +0000
ROA not before: Thu 15 May 2025 18:24:23 +0000
ROA not after: Thu 14 May 2026 18:29:23 +0000
asID: 268398
IP address blocks: 45.160.24.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ee:72:b4:75:dc:c6:dc:5c:cb:72:ed:31:ea:c7:1d:88:f2:29:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A7907222E454EB4ECF6A3E99C6542039076347
Validity
Not Before: May 15 18:24:23 2025 GMT
Not After : May 14 18:29:23 2026 GMT
Subject: CN=59D447F28E62FFBF41C84F7E927DCABC5B1C1807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:8d:63:f8:e9:95:0e:f3:79:4d:4a:a2:82:
d4:36:e5:94:ab:b9:e7:33:23:b9:ac:c4:46:a3:30:
9a:d4:05:ca:b9:ef:1f:b6:5b:0e:70:87:64:87:5b:
04:87:73:b0:35:e9:5e:37:19:ae:87:37:ee:ad:a7:
df:11:d2:0c:3d:2c:62:f7:ca:3d:f3:fe:b0:95:96:
f6:7a:d3:10:52:53:de:ce:cc:6d:6d:25:26:3c:b1:
a0:24:2c:23:86:22:8e:53:4b:d3:a6:5f:b0:b0:d7:
d8:94:37:1e:5a:7e:73:59:11:09:91:4e:9c:66:0d:
b2:1c:9b:5c:73:ba:7d:96:03:05:4d:e2:fa:27:0d:
31:ee:ea:99:48:35:ef:d7:d0:59:8d:9f:87:34:1e:
32:9d:09:4e:f6:ab:d5:b7:1b:33:c0:6e:92:fd:47:
72:39:a2:c2:8a:c4:ed:4d:e5:5d:1f:af:af:3a:a0:
d2:79:53:ec:15:b7:e3:a0:41:91:13:c2:99:09:52:
be:19:f8:f2:1b:9b:3c:a7:9d:89:51:ed:fa:fd:ef:
bf:c0:7f:2f:7b:fd:c0:6e:8d:e3:67:85:80:44:6f:
43:6e:06:de:ed:ab:c0:3c:f8:80:1a:9d:e8:af:29:
11:bf:41:94:81:50:e7:5f:ab:a1:81:96:e8:44:f8:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:47:F2:8E:62:FF:BF:41:C8:4F:7E:92:7D:CA:BC:5B:1C:18:07
X509v3 Authority Key Identifier:
keyid:06:A7:90:72:22:E4:54:EB:4E:CF:6A:3E:99:C6:54:20:39:07:63:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/06A7907222E454EB4ECF6A3E99C6542039076347.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A7907222E454EB4ECF6A3E99C6542039076347.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.24.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:b5:cb:ab:16:b0:f9:52:d0:e7:a4:45:1b:6b:af:17:d4:29:
63:35:a4:10:25:11:f8:65:76:ce:b9:9b:99:af:3e:5c:25:4e:
90:33:c7:aa:38:e6:dd:a4:3a:5a:1d:1f:58:28:47:da:af:aa:
3d:17:70:b9:a8:a3:49:d1:04:9e:71:54:59:ea:e8:22:d6:cf:
a8:73:b7:56:8b:ab:ab:5f:a5:df:05:17:48:8b:17:b2:46:dd:
e7:16:8b:dd:c1:46:da:14:41:25:bf:59:14:35:18:48:16:43:
4e:68:d4:40:66:ad:4c:5a:ce:d7:1e:c9:26:c7:82:d8:d0:b4:
8a:07:f7:1f:16:42:4c:40:8a:7d:25:d2:ce:e5:dd:f3:54:1d:
8c:7f:1d:50:25:10:35:74:44:d4:0b:bc:59:ee:f2:b1:61:9c:
c8:51:e3:87:7d:59:d4:85:28:95:b3:98:7b:65:5e:e1:6c:fa:
8e:bc:10:bd:e7:a3:98:24:db:b4:a5:30:15:bf:cf:cb:31:7f:
3c:03:ad:81:2c:a8:eb:c7:53:80:97:71:d6:7e:00:fb:5d:b6:
74:9e:fe:69:01:b8:c8:7b:1f:f7:29:07:ab:d0:9b:5b:1a:c0:
b8:8b:ed:66:53:49:39:58:13:6c:57:3f:f6:8f:1e:93:83:6e:
ba:6a:3a:8a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcu5ytHXcxtxcy3LtMerHHYjyKXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBNzkwNzIyMkU0NTRFQjRFQ0Y2QTNFOTlDNjU0MjAz
OTA3NjM0NzAeFw0yNTA1MTUxODI0MjNaFw0yNjA1MTQxODI5MjNaMDMxMTAvBgNV
BAMTKDU5RDQ0N0YyOEU2MkZGQkY0MUM4NEY3RTkyN0RDQUJDNUIxQzE4MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXK41j+OmVDvN5TUqigtQ25ZSr
ueczI7msxEajMJrUBcq57x+2Ww5wh2SHWwSHc7A16V43Ga6HN+6tp98R0gw9LGL3
yj3z/rCVlvZ60xBSU97OzG1tJSY8saAkLCOGIo5TS9OmX7Cw19iUNx5afnNZEQmR
TpxmDbIcm1xzun2WAwVN4vonDTHu6plINe/X0FmNn4c0HjKdCU72q9W3GzPAbpL9
R3I5osKKxO1N5V0fr686oNJ5U+wVt+OgQZETwpkJUr4Z+PIbmzynnYlR7fr977/A
fy97/cBujeNnhYBEb0NuBt7tq8A8+IAaneivKRG/QZSBUOdfq6GBluhE+KrVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWdRH8o5i/79ByE9+kn3KvFscGAcwHwYDVR0j
BBgwFoAUBqeQciLkVOtOz2o+mcZUIDkHY0cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFSdTNYS3c3YUhuNGNDNlJyVmVKZjJBUWhTRWRNaGNiaHVwODJrNzNG
SlkvMC8wNkE3OTA3MjIyRTQ1NEVCNEVDRjZBM0U5OUM2NTQyMDM5MDc2MzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QTc5MDcyMjJFNDU0RUI0
RUNGNkEzRTk5QzY1NDIwMzkwNzYzNDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBUnUzWEt3N2FIbjRjQzZSclZlSmYyQVFoU0VkTWhjYmh1cDgyazczRkpZLzAv
MzQzNTJlMzEzNjMwMmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaAYMA0GCSqGSIb3DQEBCwUAA4IBAQBKtcurFrD5
UtDnpEUba68X1CljNaQQJRH4ZXbOuZuZrz5cJU6QM8eqOObdpDpaHR9YKEfar6o9
F3C5qKNJ0QSecVRZ6ugi1s+oc7dWi6urX6XfBRdIixeyRt3nFovdwUbaFEElv1kU
NRhIFkNOaNRAZq1MWs7XHskmx4LY0LSKB/cfFkJMQIp9JdLO5d3zVB2Mfx1QJRA1
dETUC7xZ7vKxYZzIUeOHfVnUhSiVs5h7ZV7hbPqOvBC956OYJNu0pTAVv8/LMX88
A62BLKjrx1OAl3HWfgD7XbZ0nv5pAbjIex/3KQer0JtbGsC4i+1mU0k5WBNsVz/2
jx6Tg266ajqK
-----END CERTIFICATE-----
Generated at Sun Jun 22 17:16:25 2025 by rpki-client