Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
File: 34352e3136312e32302e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier: QXOWosaoZUnOff/366m5+VXqxvO9oKo3qAcNaj++9vs=
Subject key identifier: 92:47:60:B2:38:31:C9:AB:68:14:47:D1:C5:66:A4:D7:F8:50:DB:36
Certificate issuer: /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial: 19C276CE4FC45B93E426793E838609075F1EE8E9
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
Signing time: Wed 01 Oct 2025 18:01:37 +0000
ROA not before: Wed 01 Oct 2025 17:56:37 +0000
ROA not after: Wed 30 Sep 2026 18:01:37 +0000
asID: 268440
IP address blocks: 45.161.20.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c2:76:ce:4f:c4:5b:93:e4:26:79:3e:83:86:09:07:5f:1e:e8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Validity
Not Before: Oct 1 17:56:37 2025 GMT
Not After : Sep 30 18:01:37 2026 GMT
Subject: CN=924760B23831C9AB681447D1C566A4D7F850DB36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:a2:8a:fc:4f:3e:54:c9:8a:78:58:41:53:
62:ff:e1:f4:76:72:05:fa:6a:aa:64:0d:d0:0a:b0:
87:e7:53:fd:50:30:17:c0:00:e4:83:57:d8:da:3f:
e5:d3:f1:30:e3:09:d5:ab:cb:44:a5:a6:41:d9:51:
a4:5b:04:af:71:6d:3b:2c:a0:f7:a3:d8:cf:79:1b:
a4:1f:6b:22:de:17:bc:19:25:bb:99:32:89:8b:23:
f5:89:f2:f1:0d:41:6e:73:39:47:e5:85:3d:b9:fa:
67:75:1c:40:d5:b0:02:2c:16:5b:82:1c:44:69:4b:
f8:c3:4a:0c:3f:cf:a0:8d:2e:03:86:e8:eb:37:31:
13:a0:1e:6a:f0:f5:3c:7c:56:d8:36:6e:d9:53:30:
78:58:ab:db:ad:f5:53:e0:b2:ff:6e:d3:c0:e6:aa:
10:a5:02:4f:33:0a:3d:3c:51:e7:66:ec:71:42:2e:
e6:b8:46:fa:f1:f1:fa:21:c7:09:21:88:9f:72:45:
77:b5:56:84:a4:72:5f:3b:c3:56:05:33:84:52:ba:
fa:5a:6a:eb:9b:6b:9c:d9:1c:8c:4a:84:d9:9b:00:
2d:de:c5:86:f7:6a:d0:84:86:b8:04:fa:ee:8c:ea:
4c:82:6f:95:0b:49:74:f2:15:d8:12:ac:ef:5d:ca:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:47:60:B2:38:31:C9:AB:68:14:47:D1:C5:66:A4:D7:F8:50:DB:36
X509v3 Authority Key Identifier:
keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32302e302f32342d3234203d3e20323638343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.20.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b3:91:69:94:ff:d9:89:c3:50:1e:09:5e:c7:f5:2a:b7:13:
94:1a:4c:21:ef:52:4c:b8:4f:7f:a0:97:f3:a8:7b:bc:51:5c:
9a:e2:65:4f:0c:45:c7:12:e0:d1:83:f8:98:c1:91:87:6c:74:
a7:68:a6:2f:24:f1:45:db:f6:a8:2c:6d:2e:e1:b7:f1:56:72:
65:e8:b0:11:25:e7:ab:65:3c:32:0e:2e:e6:3b:b5:1c:32:b5:
40:52:af:b0:db:47:af:0d:34:62:13:c9:e8:d3:e2:a0:1c:bb:
b7:38:42:91:64:42:b0:e1:7b:66:dd:13:1b:eb:a0:40:a3:ac:
8f:da:49:2d:17:6b:56:18:31:61:d5:e7:46:54:50:65:63:f0:
87:7b:16:23:ee:f5:50:4c:64:15:03:36:c0:05:f7:bb:27:18:
cb:15:4d:7e:99:ae:d8:46:72:1e:e6:6b:e9:9f:b2:11:55:27:
5e:2f:a8:91:dd:e9:d0:17:17:22:3e:8b:d2:00:4b:4c:58:fc:
84:92:0b:15:29:f6:ee:a0:7d:9b:40:1f:9e:aa:e9:b1:49:86:
0f:be:df:33:1f:b6:ba:e8:2a:39:98:a6:d3:20:79:38:7a:af:
bc:cb:75:cc:6d:93:0e:28:4b:8d:15:bd:65:e0:84:71:62:b2:
b0:d7:33:20
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGcJ2zk/EW5PkJnk+g4YJB18e6OkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAxRjdFQkQ1RUUyMTUyRDQ2ODlBNjE1RDBGMTg2RDA3
NUVFQ0Q0MTAeFw0yNTEwMDExNzU2MzdaFw0yNjA5MzAxODAxMzdaMDMxMTAvBgNV
BAMTKDkyNDc2MEIyMzgzMUM5QUI2ODE0NDdEMUM1NjZBNEQ3Rjg1MERCMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2O6KK/E8+VMmKeFhBU2L/4fR2
cgX6aqpkDdAKsIfnU/1QMBfAAOSDV9jaP+XT8TDjCdWry0SlpkHZUaRbBK9xbTss
oPej2M95G6QfayLeF7wZJbuZMomLI/WJ8vENQW5zOUflhT25+md1HEDVsAIsFluC
HERpS/jDSgw/z6CNLgOG6Os3MROgHmrw9Tx8Vtg2btlTMHhYq9ut9VPgsv9u08Dm
qhClAk8zCj08Uedm7HFCLua4Rvrx8fohxwkhiJ9yRXe1VoSkcl87w1YFM4RSuvpa
auuba5zZHIxKhNmbAC3exYb3atCEhrgE+u6M6kyCb5ULSXTyFdgSrO9dymmhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkkdgsjgxyatoFEfRxWak1/hQ2zYwHwYDVR0j
BBgwFoAUcB9+vV7iFS1GiaYV0PGG0HXuzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGJNM0djRDl2YmhYdVh0NmN6SmRpbjVZQ3Y5MmFzZEVDbmVTc3JwMWRl
MlkvMC83MDFGN0VCRDVFRTIxNTJENDY4OUE2MTVEMEYxODZEMDc1RUVDRDQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMUY3RUJENUVFMjE1MkQ0
Njg5QTYxNUQwRjE4NkQwNzVFRUNENDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hiTTNHY0Q5dmJoWHVYdDZjekpkaW41WUN2OTJhc2RFQ25lU3NycDFkZTJZLzAv
MzQzNTJlMzEzNjMxMmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaEUMA0GCSqGSIb3DQEBCwUAA4IBAQAEs5FplP/Z
icNQHglex/UqtxOUGkwh71JMuE9/oJfzqHu8UVya4mVPDEXHEuDRg/iYwZGHbHSn
aKYvJPFF2/aoLG0u4bfxVnJl6LARJeerZTwyDi7mO7UcMrVAUq+w20evDTRiE8no
0+KgHLu3OEKRZEKw4Xtm3RMb66BAo6yP2kktF2tWGDFh1edGVFBlY/CHexYj7vVQ
TGQVAzbABfe7JxjLFU1+ma7YRnIe5mvpn7IRVSdeL6iR3enQFxciPovSAEtMWPyE
kgsVKfbuoH2bQB+equmxSYYPvt8zH7a66Co5mKbTIHk4eq+8y3XMbZMOKEuNFb1l
4IRxYrKw1zMg
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:46:00 2025 by rpki-client