Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa
File: 34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa (raw, json)
Hash identifier: mpZHAAPJTUQXooOaT1oXKL/6OVYZoElxqPmWeW2/+og=
Subject key identifier: C3:BA:B4:ED:50:07:38:93:AA:1E:54:19:5F:5A:81:DB:35:44:BC:A7
Certificate issuer: /CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
Certificate serial: 757AB9B9940B28360F684114808CA4DC5B42B2FD
Authority key identifier: 3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 269478
IP address blocks: 45.187.124.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:7a:b9:b9:94:0b:28:36:0f:68:41:14:80:8c:a4:dc:5b:42:b2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:08:a3:1e:19:b6:24:72:63:ab:08:f4:8f:
88:e4:17:a7:62:13:e8:a0:0b:9f:ad:c5:1c:36:c0:
9c:b8:e9:42:2c:0f:d4:ad:85:c4:b2:f9:5a:fb:85:
15:57:65:90:fe:dc:01:ea:14:33:9c:dd:af:0f:40:
e8:79:f9:bb:d0:12:68:45:63:f9:e4:bc:cb:e4:36:
62:47:a7:cb:5e:7e:eb:5e:45:59:85:05:c5:d9:94:
f5:42:14:d2:05:40:e7:ed:1f:b9:25:d6:c6:1c:ab:
54:fb:f3:f6:f5:1d:49:1f:7b:42:f4:b7:60:03:cc:
13:bd:56:3b:00:19:c0:a3:c1:97:d7:03:33:66:75:
3e:29:78:69:84:be:f7:66:8e:59:f6:6b:ca:aa:52:
ae:c7:42:ba:e8:93:4a:1b:21:05:67:ea:cd:25:67:
ec:e7:f9:e8:c8:62:0c:47:d8:a8:63:a2:66:ab:3a:
4b:c5:08:73:21:78:56:7f:a8:3e:64:f5:a2:e9:46:
38:7e:e9:33:2d:9d:c0:89:3a:45:c4:93:4a:7b:83:
4a:51:da:a5:8e:e1:c6:65:64:ed:67:99:22:9d:8e:
86:b7:46:ae:fc:37:ac:e6:f0:7a:f0:f8:7a:28:8d:
ac:d2:d1:ac:0e:7d:1b:44:f5:6d:16:99:b5:97:b0:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BA:B4:ED:50:07:38:93:AA:1E:54:19:5F:5A:81:DB:35:44:BC:A7
X509v3 Authority Key Identifier:
keyid:3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:3b:b9:5a:76:18:4c:65:4c:2f:6b:10:a2:71:3c:d5:0d:2b:
99:ac:c5:fb:4c:c8:53:ea:1e:82:78:48:52:4b:10:b8:b9:df:
ed:27:db:aa:09:7a:1f:a4:a4:cf:15:87:14:bb:79:b0:ac:d8:
1c:ed:15:b0:2f:2f:0a:22:0a:7e:87:5a:55:c0:0e:01:c0:41:
51:07:7e:68:4f:96:ed:b0:3d:aa:4c:0e:1b:b0:e4:d3:d4:44:
7f:dc:0f:34:58:b3:b5:68:4b:14:4e:2e:7e:73:f8:5c:95:fa:
99:9b:2f:d3:1f:d4:e1:ac:39:be:6a:d1:59:c6:f7:3a:a8:d6:
f1:d9:53:d0:3d:dd:0f:4a:ec:97:2e:70:36:cb:a4:ef:62:ce:
11:d5:b1:a5:a1:2f:c2:3b:70:24:b0:1f:9f:03:13:f8:c9:91:
de:e5:7d:37:a5:c3:c7:3c:8c:1b:45:a0:c6:d4:60:9c:a9:43:
03:13:72:52:5d:ff:d4:b5:5a:9f:b5:2b:42:dc:9d:6b:5e:3f:
c9:c4:b1:9f:59:5b:06:a6:ed:b7:54:ec:96:b8:64:fb:b6:85:
fc:56:ad:fa:fb:bb:87:08:9a:b3:8e:ec:73:b2:ce:01:56:88:
4c:bc:5b:04:7e:b5:e9:9b:25:b0:de:2d:27:49:4b:25:f2:27:
f6:05:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:34 2025 by rpki-client