Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32382e302f32342d3234203d3e20323637303437.roa
File: 34352e3232372e32382e302f32342d3234203d3e20323637303437.roa (raw, json)
Hash identifier: LA0+vJ0ysM1SeJ70vJos44GJMJLSIPdxZUeOzuV24a4=
Subject key identifier: 8F:02:CD:31:69:03:79:27:40:0C:37:0A:AA:7A:AE:85:61:6D:A3:1A
Certificate issuer: /CN=B0B7CC182286506A60C3582F880657A780AE1B77
Certificate serial: 7EB21223D7850CD7DD01A048C306206304EDBA3D
Authority key identifier: B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32382e302f32342d3234203d3e20323637303437.roa
Signing time: Fri 10 Oct 2025 22:03:00 +0000
ROA not before: Fri 10 Oct 2025 21:58:00 +0000
ROA not after: Fri 09 Oct 2026 22:03:00 +0000
asID: 267047
IP address blocks: 45.227.28.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b2:12:23:d7:85:0c:d7:dd:01:a0:48:c3:06:20:63:04:ed:ba:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B7CC182286506A60C3582F880657A780AE1B77
Validity
Not Before: Oct 10 21:58:00 2025 GMT
Not After : Oct 9 22:03:00 2026 GMT
Subject: CN=8F02CD3169037927400C370AAA7AAE85616DA31A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:55:9d:57:a8:c6:2b:38:e8:22:95:2a:c9:23:
3d:df:9c:82:07:95:60:f0:ac:fa:e5:31:45:6a:6e:
c5:a4:ce:33:f6:ea:b1:c4:87:c8:88:58:83:36:78:
6f:51:07:67:dd:77:b6:ed:f4:b4:61:10:e3:bb:4e:
ee:e7:ad:a1:13:cc:61:df:0d:7d:9a:9e:fe:14:cd:
67:f7:27:cf:57:1f:2d:69:5b:4b:dd:19:b1:4f:2b:
1f:c3:13:35:07:f7:d7:b3:f2:d7:c1:25:60:f1:14:
94:d2:9e:65:61:a5:6f:3c:b9:b7:fa:a6:09:5d:80:
00:29:0c:27:28:9e:a8:4f:d8:30:18:98:9d:17:13:
78:12:86:d1:3d:c1:36:a9:60:e5:75:cc:ad:df:5d:
7e:78:69:f9:f3:42:41:5c:a0:54:d6:ba:9e:20:eb:
a5:89:d7:68:b6:99:92:ac:f6:19:68:fc:fc:56:c2:
93:c0:58:02:a0:3f:0a:39:60:32:2a:06:51:88:8c:
63:5f:74:40:f5:a0:da:7c:31:72:ae:f4:63:44:b0:
0e:8e:1b:be:68:a2:3f:e4:b7:a8:ab:9d:cb:b3:2d:
82:5d:c6:64:76:f2:5e:8a:7c:3d:1d:d1:3c:52:c9:
2c:98:ba:b9:f1:bd:01:b3:0f:b6:bf:7f:a3:bf:be:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:CD:31:69:03:79:27:40:0C:37:0A:AA:7A:AE:85:61:6D:A3:1A
X509v3 Authority Key Identifier:
keyid:B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e32382e302f32342d3234203d3e20323637303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:09:3c:9a:a3:19:91:8d:cb:e8:eb:73:9e:db:8c:7e:6e:df:
56:27:be:c2:20:f2:31:d8:cd:9a:b0:f4:90:f2:3b:00:69:83:
93:95:41:df:bc:09:83:5d:42:b0:40:84:bc:c9:7f:f9:1c:22:
51:d0:75:8f:5b:cc:06:7d:a3:f5:6a:f0:37:9c:b0:ea:bf:0b:
51:32:32:0b:dc:a9:9f:80:20:27:7d:99:7c:3e:5a:d4:c3:bf:
a9:d1:a0:ee:bf:a6:0c:20:3f:a6:5b:4d:0b:3f:be:41:15:2e:
74:8a:f3:30:e1:79:00:3b:e6:3a:ad:6a:ab:01:ab:d3:29:ac:
b3:49:ca:50:7c:3b:f7:ee:46:e4:2d:7e:9c:72:3e:23:7e:d7:
b1:3c:38:e6:2c:30:86:2c:98:3c:55:ba:e6:91:4a:ab:63:82:
af:47:83:ed:94:a3:57:a8:ea:25:1c:8a:5e:a4:4e:2a:58:51:
87:ea:60:6b:f7:91:f3:2e:cb:31:e8:89:24:b3:ab:82:a1:85:
ad:7d:ec:aa:ff:55:5f:c9:2a:fc:b5:cf:cf:51:fd:f3:b9:cb:
a4:89:6f:34:d5:1c:d4:ea:17:b4:ea:1f:fe:d5:f9:83:b5:11:
7b:14:96:7f:cb:77:4a:f4:3e:23:0b:25:cc:44:73:1b:85:2b:
0f:77:9a:f1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfrISI9eFDNfdAaBIwwYgYwTtuj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCN0NDMTgyMjg2NTA2QTYwQzM1ODJGODgwNjU3QTc4
MEFFMUI3NzAeFw0yNTEwMTAyMTU4MDBaFw0yNjEwMDkyMjAzMDBaMDMxMTAvBgNV
BAMTKDhGMDJDRDMxNjkwMzc5Mjc0MDBDMzcwQUFBN0FBRTg1NjE2REEzMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnVZ1XqMYrOOgilSrJIz3fnIIH
lWDwrPrlMUVqbsWkzjP26rHEh8iIWIM2eG9RB2fdd7bt9LRhEOO7Tu7nraETzGHf
DX2anv4UzWf3J89XHy1pW0vdGbFPKx/DEzUH99ez8tfBJWDxFJTSnmVhpW88ubf6
pgldgAApDCconqhP2DAYmJ0XE3gShtE9wTapYOV1zK3fXX54afnzQkFcoFTWup4g
66WJ12i2mZKs9hlo/PxWwpPAWAKgPwo5YDIqBlGIjGNfdED1oNp8MXKu9GNEsA6O
G75ooj/kt6irncuzLYJdxmR28l6KfD0d0TxSySyYurnxvQGzD7a/f6O/viedAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjwLNMWkDeSdADDcKqnquhWFtoxowHwYDVR0j
BBgwFoAUsLfMGCKGUGpgw1gviAZXp4CuG3cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhmUngyOGYyVnpkM0dZQkVpMUd5dUVoWTZrU1A5OEdKWmJockhlWnVU
Q2EvMC9CMEI3Q0MxODIyODY1MDZBNjBDMzU4MkY4ODA2NTdBNzgwQUUxQjc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQjdDQzE4MjI4NjUwNkE2
MEMzNTgyRjg4MDY1N0E3ODBBRTFCNzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYZlJ4MjhmMlZ6ZDNHWUJFaTFHeXVFaFk2a1NQOThHSlpiaHJIZVp1VENhLzAv
MzQzNTJlMzIzMjM3MmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeMcMA0GCSqGSIb3DQEBCwUAA4IBAQBqCTyaoxmR
jcvo63Oe24x+bt9WJ77CIPIx2M2asPSQ8jsAaYOTlUHfvAmDXUKwQIS8yX/5HCJR
0HWPW8wGfaP1avA3nLDqvwtRMjIL3KmfgCAnfZl8PlrUw7+p0aDuv6YMID+mW00L
P75BFS50ivMw4XkAO+Y6rWqrAavTKayzScpQfDv37kbkLX6ccj4jftexPDjmLDCG
LJg8VbrmkUqrY4KvR4PtlKNXqOolHIpepE4qWFGH6mBr95HzLssx6Ikks6uCoYWt
feyq/1VfySr8tc/PUf3zucukiW801RzU6he06h/+1fmDtRF7FJZ/y3dK9D4jCyXM
RHMbhSsPd5rx
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:44:38 2025 by rpki-client