Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa
File: 34352e3233302e32382e302f32322d3234203d3e20323637313435.roa (raw, json)
Hash identifier: e3gDh30bCFxyxSG6XiET0YR4C4e+fAFmToi+8txavoA=
Subject key identifier: 6D:84:77:81:89:D2:95:96:D0:8C:D0:72:40:5C:81:F9:AA:3C:7D:99
Certificate issuer: /CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Certificate serial: 6CC5FE8448B9A6A051A521084BA180A74456DEBB
Authority key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa
Signing time: Thu 06 Mar 2025 03:03:25 +0000
ROA not before: Thu 06 Mar 2025 02:58:25 +0000
ROA not after: Thu 05 Mar 2026 03:03:25 +0000
asID: 267145
IP address blocks: 45.230.28.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c5:fe:84:48:b9:a6:a0:51:a5:21:08:4b:a1:80:a7:44:56:de:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85
Validity
Not Before: Mar 6 02:58:25 2025 GMT
Not After : Mar 5 03:03:25 2026 GMT
Subject: CN=6D84778189D29596D08CD072405C81F9AA3C7D99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:e1:71:73:82:b5:15:b0:8e:a7:f8:16:fa:
63:08:34:47:22:b3:67:7e:70:5b:e7:53:6d:ee:be:
a4:d6:5e:ec:52:2a:d3:dc:70:66:38:6d:70:a5:d4:
a0:5a:03:88:fc:c5:78:75:03:1b:30:d2:15:f8:0c:
58:27:ad:6c:d3:96:0d:45:26:87:12:9c:dc:30:2e:
1e:82:aa:eb:d4:f8:c7:4c:15:44:77:d7:8a:11:d4:
20:7e:bb:53:88:21:43:28:68:97:c5:b3:32:3b:b9:
ce:84:70:51:f4:5e:40:cc:e0:08:50:54:de:33:b2:
70:0e:a3:7f:0d:62:51:6e:14:f5:42:c0:81:7f:90:
23:e0:34:61:24:a3:c6:0b:29:e1:28:b5:01:6b:93:
28:87:e2:1f:84:9e:1a:d4:98:8e:ab:36:2f:61:d7:
85:a3:76:6c:b0:8f:1f:58:98:3f:21:cf:97:b3:5e:
fa:eb:c8:15:c9:10:0e:5e:5f:dd:fb:d0:63:14:2a:
a6:db:33:3e:f8:01:9f:92:a5:b6:9b:ab:16:47:90:
8c:17:8a:67:f7:12:6a:fd:be:10:0c:46:f5:85:77:
71:27:71:f1:74:f2:ae:64:4e:76:ee:eb:be:39:65:
4b:8f:a2:29:37:fe:c8:21:9a:c2:92:8a:07:83:9d:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:77:81:89:D2:95:96:D0:8C:D0:72:40:5C:81:F9:AA:3C:7D:99
X509v3 Authority Key Identifier:
keyid:3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/34352e3233302e32382e302f32322d3234203d3e20323637313435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.28.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a5:7d:57:d8:23:d3:cf:98:d4:f8:3a:31:a6:32:05:cb:ba:
cc:65:79:db:ea:b5:ec:cd:6c:69:fd:88:66:5b:bd:2b:05:46:
0d:71:49:37:1e:15:8b:d0:4c:d8:cb:63:2f:c6:da:0c:d5:57:
7d:23:02:58:39:75:55:97:4e:d5:51:a7:ed:f7:77:31:bb:f7:
9b:58:9f:3e:4f:fe:3b:ae:2f:cc:97:37:6e:3b:39:93:c5:45:
39:72:1d:c8:a6:82:3f:93:e4:0b:33:d1:4f:9f:09:c9:df:cb:
14:5f:72:87:fa:2f:e0:c4:2c:9c:7c:ce:d5:2f:f2:51:5e:23:
27:16:6e:e7:98:57:07:d3:ce:90:9c:9a:a1:bd:68:9e:65:48:
1a:00:a5:04:bc:ab:15:28:96:2b:8a:fa:46:b5:08:c9:85:4f:
8a:28:a6:57:b5:40:11:3f:3b:09:d0:c0:98:12:d1:1b:6e:b6:
b2:95:36:10:83:59:1b:3c:0d:d7:90:66:32:df:15:49:33:f7:
2d:2f:24:8a:82:77:29:01:91:8a:18:e6:25:46:7f:95:eb:b7:
5e:49:55:50:8c:62:c8:94:34:c9:91:d6:f2:f9:6f:63:b7:52:
16:cd:fb:00:95:8e:15:b9:0f:cb:44:55:0e:90:ed:04:88:e0:
b6:53:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:14:24 2025 by rpki-client