Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e362e3134382e302f32322d3332203d3e203238363439.roa
File: 34352e362e3134382e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier: Z+gjz7QoO23jMj4JwSjq1pdrOjOXF2Y1uozUs85h4q8=
Subject key identifier: C4:62:49:38:CE:FF:8F:3B:4B:BA:11:34:CC:7E:84:57:95:20:FC:64
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 35EDBBAA5916333B1202434418F9B7829F6E1FB1
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e362e3134382e302f32322d3332203d3e203238363439.roa
Signing time: Tue 06 May 2025 00:49:50 +0000
ROA not before: Tue 06 May 2025 00:44:50 +0000
ROA not after: Tue 05 May 2026 00:49:50 +0000
asID: 28649
IP address blocks: 45.6.148.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ed:bb:aa:59:16:33:3b:12:02:43:44:18:f9:b7:82:9f:6e:1f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:44:50 2025 GMT
Not After : May 5 00:49:50 2026 GMT
Subject: CN=C4624938CEFF8F3B4BBA1134CC7E84579520FC64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:31:ad:e4:b7:68:d5:1b:a2:e2:db:38:8c:
99:56:f6:6b:08:3f:95:f4:02:32:d4:01:68:5d:c2:
b3:19:5e:b9:3b:5e:57:10:f3:a7:7e:b1:f2:c9:12:
1f:9d:7b:9e:91:aa:3d:f0:6f:de:44:39:c3:9f:ab:
2e:a8:61:a5:0b:64:77:a9:95:e3:23:71:e5:0e:76:
f5:0b:28:42:8d:18:f6:f3:6d:e6:fa:83:4f:59:7e:
0b:8d:eb:b5:14:da:df:2c:4b:e2:55:06:c7:0f:b3:
f6:b3:39:d0:49:a1:dd:87:02:8c:40:b2:46:4b:fb:
9f:a3:30:a1:9a:09:2c:ba:61:8b:0b:f6:1e:eb:fb:
49:7f:e4:88:a3:95:22:a1:24:5a:c5:bb:15:8a:08:
f4:a7:92:15:17:0b:b9:70:8b:e9:d8:87:89:d7:3a:
cd:28:92:c9:e5:89:fc:11:79:ca:de:33:7d:54:34:
b3:11:25:b2:9d:ae:61:b9:3e:2a:9c:ea:3a:1a:39:
76:e6:40:64:36:3d:f7:f4:04:07:d2:db:0b:35:18:
b4:9e:02:5c:50:a5:3a:e1:93:c1:14:01:6e:3f:7b:
cf:d1:44:f6:a7:99:0e:8c:ab:1b:50:00:59:b0:b8:
ae:05:75:2a:5e:4f:91:23:a9:8a:46:ef:d5:ac:bd:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:49:38:CE:FF:8F:3B:4B:BA:11:34:CC:7E:84:57:95:20:FC:64
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e362e3134382e302f32322d3332203d3e203238363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:fc:70:2e:b2:bc:03:20:11:61:5a:74:16:73:d2:28:2b:24:
d3:92:a4:5f:37:e7:e8:39:97:64:6d:aa:85:f5:a1:70:04:8a:
a2:97:d0:ce:20:1e:b8:18:d7:f6:4a:15:c5:c3:5b:af:f3:42:
07:eb:b7:81:03:d0:9a:2c:35:21:28:aa:fc:f0:9c:e3:84:2b:
9d:a1:ae:a6:89:ad:7e:5d:41:e3:0e:51:42:c3:ac:6e:0c:8f:
15:08:0e:d0:9c:2f:23:60:cd:93:a4:fb:88:29:e9:da:b7:2e:
92:c2:2d:e4:f6:66:9d:26:0f:2e:4d:ab:ce:26:b4:b3:eb:27:
8a:dc:d8:c6:d5:4c:45:18:b2:1f:de:1d:91:9c:73:06:9d:09:
0e:70:52:98:55:da:de:f5:86:49:3e:c5:64:8b:76:6f:bf:2a:
9f:e2:41:05:ef:c8:bf:fc:f4:03:e3:8a:ba:c3:70:ab:e9:90:
66:5c:17:14:c6:f7:71:13:d6:58:ea:2a:68:5b:34:4f:c8:27:
08:1e:e9:59:c4:6d:fb:f0:84:ea:2c:1a:ef:18:13:f6:cb:a9:
96:d4:50:3a:77:bd:a0:26:1b:d6:ed:64:60:30:a6:b3:0a:d2:
65:b7:74:80:5d:58:61:a0:8c:03:ab:f2:30:b5:b3:df:ae:d3:
90:84:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:57 2025 by rpki-client