Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e33312e302f32342d3234203d3e20323637303437.roa
File: 34352e3232372e33312e302f32342d3234203d3e20323637303437.roa (raw, json)
Hash identifier: EKnGgeD6+PaQMMMpLUoXC2OCE0TwwYHPDpTYLJ8EEhI=
Subject key identifier: D0:1F:5D:E2:88:2D:53:A8:15:85:BA:09:BE:63:EB:31:6D:CF:11:0F
Certificate issuer: /CN=B0B7CC182286506A60C3582F880657A780AE1B77
Certificate serial: 1A9E48933BA990A061ADFE80B42B67151E430C83
Authority key identifier: B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e33312e302f32342d3234203d3e20323637303437.roa
Signing time: Fri 10 Oct 2025 22:03:01 +0000
ROA not before: Fri 10 Oct 2025 21:58:01 +0000
ROA not after: Fri 09 Oct 2026 22:03:01 +0000
asID: 267047
IP address blocks: 45.227.31.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9e:48:93:3b:a9:90:a0:61:ad:fe:80:b4:2b:67:15:1e:43:0c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B7CC182286506A60C3582F880657A780AE1B77
Validity
Not Before: Oct 10 21:58:01 2025 GMT
Not After : Oct 9 22:03:01 2026 GMT
Subject: CN=D01F5DE2882D53A81585BA09BE63EB316DCF110F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:8b:4e:47:9c:26:b2:98:df:b0:f2:29:da:
18:e0:3d:0c:5e:98:d3:54:c5:1a:8f:2a:4d:4a:de:
38:8f:f5:a6:fe:2d:00:ae:7f:07:2c:fc:00:c7:5a:
91:7f:bb:f9:be:fc:77:c0:34:1a:a9:5a:d7:8a:e9:
f4:8b:46:b7:0d:a9:a1:f6:b8:f2:8b:93:af:f7:95:
f1:a7:2f:24:e8:ff:a0:3a:8a:2d:db:0f:38:15:72:
dd:44:f7:b3:da:cd:6c:d5:d1:74:12:1d:43:bf:db:
60:9c:09:e7:39:f1:14:4d:41:54:2a:87:86:1a:ce:
47:a8:1b:30:88:ee:9b:7e:59:89:6a:86:14:c0:42:
3e:2f:6d:ff:65:eb:d1:88:7d:72:68:74:df:b5:a7:
53:50:ab:7b:6a:ea:d8:23:25:1f:53:46:9f:0c:f4:
f5:41:20:de:58:87:54:fd:3c:0a:a4:2d:76:ea:75:
f8:f3:9f:bd:a1:e3:f7:ac:e9:f2:ff:14:94:16:ce:
55:54:09:cc:aa:a4:5d:aa:51:16:ed:f2:85:89:06:
99:99:41:96:bc:06:77:a2:f0:84:fe:a9:ed:63:c5:
cb:83:14:de:85:ce:0b:d3:ce:ec:a2:94:1b:bf:d1:
6d:3f:3d:99:40:e8:d5:4a:04:c2:42:90:bd:9f:6e:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1F:5D:E2:88:2D:53:A8:15:85:BA:09:BE:63:EB:31:6D:CF:11:0F
X509v3 Authority Key Identifier:
keyid:B0:B7:CC:18:22:86:50:6A:60:C3:58:2F:88:06:57:A7:80:AE:1B:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/B0B7CC182286506A60C3582F880657A780AE1B77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B7CC182286506A60C3582F880657A780AE1B77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/34352e3232372e33312e302f32342d3234203d3e20323637303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.31.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ad:a3:46:63:ee:76:47:be:9e:ba:c5:71:0e:aa:bc:28:61:
0d:a7:d0:cd:ef:e0:52:e0:98:c2:6c:f4:c9:d7:7c:cb:4f:42:
14:78:cb:9c:87:e9:4a:3a:71:a9:49:00:b5:a1:78:41:6d:b4:
66:dc:3a:35:05:89:bd:43:fe:37:49:b6:c5:5a:5b:05:c9:fd:
b5:88:80:9e:dc:03:54:9e:51:87:c1:ff:c1:a8:bb:a4:77:ee:
12:bc:85:56:28:a3:c1:71:3a:6a:be:26:95:a8:01:e1:4b:58:
87:df:f9:99:b7:0b:47:ef:72:e3:bb:f8:17:38:36:6a:8c:d7:
96:dd:5a:f0:28:c9:3f:5c:7e:6c:a2:3e:d7:75:89:82:b1:d9:
da:73:df:6d:cf:5c:db:e4:d8:0f:1e:f6:99:18:f0:30:09:35:
ee:7c:b8:80:4c:b7:a2:aa:78:fa:6e:02:20:57:4d:34:2a:90:
86:8d:84:66:b0:04:98:01:c3:65:0e:17:84:06:64:71:6a:53:
f2:ac:bc:bf:65:5f:a8:fa:a2:b8:b3:95:d1:28:91:e2:c7:76:
1e:b4:4a:77:53:97:72:5c:16:e7:04:14:ce:16:97:a4:ee:f7:
f1:a0:3f:04:d5:b8:3b:5c:39:a0:ab:2d:36:9a:9e:dc:59:d4:
cf:5d:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:40 2025 by rpki-client