Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
File: 34352e3136312e39362e302f32322d3232203d3e20323638343633.roa (raw, json)
Hash identifier: KUjKdr4lZgotgR+zs/iGunz2SVIT0IPjv96MtuYT+AU=
Subject key identifier: 42:B6:1C:EA:D2:64:47:53:49:3B:5F:90:95:09:76:62:34:5C:E8:A8
Certificate issuer: /CN=A0E5732D5CB2354F7128E1B6A750407464415454
Certificate serial: 68A07EE89D7A6282FFEDAFA987489C58E830B9D9
Authority key identifier: A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
Signing time: Thu 25 Sep 2025 13:25:20 +0000
ROA not before: Thu 25 Sep 2025 13:20:20 +0000
ROA not after: Thu 24 Sep 2026 13:25:20 +0000
asID: 268463
IP address blocks: 45.161.96.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a0:7e:e8:9d:7a:62:82:ff:ed:af:a9:87:48:9c:58:e8:30:b9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0E5732D5CB2354F7128E1B6A750407464415454
Validity
Not Before: Sep 25 13:20:20 2025 GMT
Not After : Sep 24 13:25:20 2026 GMT
Subject: CN=42B61CEAD2644753493B5F9095097662345CE8A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:3a:73:fd:11:9c:fe:9b:86:99:41:80:ef:
63:89:71:53:21:39:93:22:19:72:90:87:af:68:63:
04:5f:95:c3:03:cb:25:7e:93:9a:85:95:cd:0e:40:
58:07:ab:97:2e:0d:10:d8:ae:96:bc:42:89:39:46:
b2:6b:ce:98:60:03:9e:46:70:4a:e9:d5:c2:7e:5f:
5d:47:b5:13:99:e8:e9:02:e2:46:30:5e:a8:56:0b:
4f:f7:3d:90:1d:f7:e1:85:69:1b:15:4b:54:5d:bd:
c1:49:b5:39:b0:5d:54:90:93:ce:9e:8f:ae:3c:97:
13:8f:02:e7:e1:2a:49:c0:3f:89:67:a7:1a:24:23:
bf:65:a4:cb:8f:cf:01:29:e7:10:12:d6:fb:6e:67:
0b:bc:6b:85:6e:89:6c:fb:f5:5d:6b:93:a4:c6:3a:
cd:85:6c:d2:b5:60:25:54:f0:93:0f:64:df:32:d1:
76:c3:69:40:94:52:74:d4:b1:6e:cd:40:c6:50:ce:
6a:e8:81:33:20:5c:ad:fb:a2:08:96:58:7c:cd:2f:
af:4f:31:2e:9b:45:f4:66:a6:e7:4e:c5:d6:e5:67:
8b:bc:26:2c:00:84:8e:72:fe:5d:ed:12:e0:29:bc:
b7:f2:c2:82:13:0a:ec:f4:fc:16:3e:62:8d:ef:85:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B6:1C:EA:D2:64:47:53:49:3B:5F:90:95:09:76:62:34:5C:E8:A8
X509v3 Authority Key Identifier:
keyid:A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39362e302f32322d3232203d3e20323638343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:7d:df:70:23:87:56:82:06:f3:27:92:c0:3b:d8:6c:d9:4d:
2d:ea:61:c3:a7:97:60:57:e1:97:35:87:0c:cc:73:fc:c1:c4:
70:69:e8:14:2a:26:38:5c:e2:e1:2d:72:2a:5b:59:e2:34:98:
47:1b:3b:c2:ea:a2:5c:28:c3:4f:57:85:26:51:0e:40:5a:91:
24:80:7b:5e:43:77:0d:11:74:3f:89:cf:f2:16:45:a0:40:bf:
71:1b:c5:c1:6c:1d:44:68:4b:12:69:c9:c3:da:e7:00:4f:14:
65:cc:88:34:5d:8b:6c:63:35:ad:55:2a:4d:06:7b:62:6e:50:
e9:4f:37:2d:21:b6:3f:a8:c8:48:e2:d7:93:33:66:6c:48:b1:
d9:9a:67:97:c5:24:3d:63:26:7d:c2:51:39:49:a6:e1:89:ab:
ec:b8:51:32:19:60:90:c9:83:79:a2:d6:b8:4b:cb:b4:37:8f:
a8:0c:54:65:0d:4d:5f:f4:ce:7e:19:ca:d3:13:9e:4d:87:44:
4f:ff:52:5a:88:f1:d2:78:71:c2:b7:44:c0:a7:4a:80:b6:e8:
a4:53:15:25:8c:72:11:5a:e0:60:28:f0:5a:79:fc:0b:01:ef:
99:17:a1:68:33:87:31:5d:36:2c:78:94:09:a2:11:ab:0c:cc:
c1:18:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:15 2025 by rpki-client