Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/34352e352e3233362e302f32322d3332203d3e20323636313039.roa
File: 34352e352e3233362e302f32322d3332203d3e20323636313039.roa (raw, json)
Hash identifier: rpQMLZb7BcLM7sA1WL+lf/Bek/hzUfkvH81sAwk/erA=
Subject key identifier: 23:39:15:0B:1F:89:D8:ED:FB:36:1D:31:AE:7A:35:04:18:BA:C1:43
Certificate issuer: /CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
Certificate serial: 77A12187F62C223D037C7958CE2D7692F4925CED
Authority key identifier: 77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/34352e352e3233362e302f32322d3332203d3e20323636313039.roa
Signing time: Wed 01 Oct 2025 16:53:04 +0000
ROA not before: Wed 01 Oct 2025 16:48:04 +0000
ROA not after: Wed 30 Sep 2026 16:53:04 +0000
asID: 266109
IP address blocks: 45.5.236.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a1:21:87:f6:2c:22:3d:03:7c:79:58:ce:2d:76:92:f4:92:5c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77CCF7DDC54E91B783BD705032C44EBE1A52DAA1
Validity
Not Before: Oct 1 16:48:04 2025 GMT
Not After : Sep 30 16:53:04 2026 GMT
Subject: CN=2339150B1F89D8EDFB361D31AE7A350418BAC143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:ae:c1:9f:90:b3:3d:d3:be:b6:40:d2:c0:
30:54:ac:ba:4d:24:58:45:90:be:77:3e:38:2a:67:
1c:17:2b:1b:c7:a1:17:45:1b:03:84:14:89:61:08:
45:67:4c:eb:11:f1:61:6e:7d:7e:b9:f8:bb:10:da:
4b:1d:52:33:4d:e8:ad:cb:5d:54:f2:2d:1f:ee:f4:
81:0e:40:c8:2b:d2:9b:00:ed:0c:09:bb:dc:99:70:
b3:c1:62:5a:f8:15:b3:c3:e7:db:cf:7b:dc:90:a1:
29:4f:c2:57:cd:65:34:92:8b:6c:a3:6c:09:69:45:
ad:61:5f:ad:ac:06:e4:89:e3:a5:a6:5e:e2:59:2f:
b8:bb:6d:ff:0c:67:1d:8c:01:f9:1f:32:c7:ef:f2:
90:e6:82:b1:8d:aa:9e:4c:c9:f4:8c:87:14:b1:4d:
48:83:b1:cf:72:68:06:13:94:b9:f9:a0:43:ee:d9:
34:77:d3:52:71:ed:51:e0:f7:77:42:1b:1c:34:62:
94:7a:38:ce:da:2b:77:fc:48:1c:26:ef:33:65:5b:
e5:27:9c:b4:62:0e:21:0d:3b:71:4f:9b:33:d1:6d:
aa:d4:99:08:b8:86:e5:a3:16:b7:bd:f9:c8:96:72:
c8:5c:90:42:c5:ce:b5:14:c6:b3:a2:9c:3d:cb:70:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:15:0B:1F:89:D8:ED:FB:36:1D:31:AE:7A:35:04:18:BA:C1:43
X509v3 Authority Key Identifier:
keyid:77:CC:F7:DD:C5:4E:91:B7:83:BD:70:50:32:C4:4E:BE:1A:52:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77CCF7DDC54E91B783BD705032C44EBE1A52DAA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CoY68GWihSr8Hrg8gmYtjS4m2LfwCFCMSfBne65iGuDm/0/34352e352e3233362e302f32322d3332203d3e20323636313039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.236.0/22
Signature Algorithm: sha256WithRSAEncryption
67:b3:83:b2:c9:ba:52:5a:69:c5:52:38:d7:c3:09:79:13:61:
14:e6:73:15:2e:02:19:53:f7:d4:15:72:e8:da:b5:41:54:40:
ad:fa:e8:26:ca:8f:54:39:ce:a6:e0:2f:de:0b:3a:9b:c2:f3:
82:a0:07:ca:cd:a4:ac:2a:04:fb:d6:49:c6:13:9f:c7:36:2e:
59:66:6c:72:73:4d:e0:3f:b0:e4:af:81:9c:ae:fd:a0:67:e0:
ce:27:05:bb:e6:b4:4c:d2:cc:1f:66:ab:a2:20:19:3c:b6:ec:
f5:29:78:c1:9d:11:86:6b:f1:87:45:81:ef:5d:45:2c:cb:e3:
78:46:39:a7:3d:bf:e5:20:2b:95:f4:fa:02:35:3f:18:90:e6:
cf:e6:90:b4:2f:c5:45:77:5b:ca:64:a9:ae:8a:90:a6:a4:d8:
e3:b6:22:66:9f:72:56:3b:09:81:39:6a:23:81:61:b4:83:2c:
e8:b1:63:da:2a:48:b8:fd:ae:bc:60:f5:a6:06:33:46:d4:e8:
db:9c:83:3a:71:8c:7b:33:38:ca:de:37:c4:a0:ff:ad:2a:38:
de:71:ff:cf:07:62:b6:6a:8a:3d:39:b3:f7:9e:21:74:dd:dd:
bd:f5:f5:a3:d6:92:70:7a:de:7a:70:16:5d:23:96:b5:9a:68:
d0:2f:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:13 2025 by rpki-client