Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa
File: 34352e3136312e32322e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier: y2PpABc/Sg1TZ0UYoWQMJkfjOm+jHPlyiTpY2c2lreM=
Subject key identifier: 3E:F5:08:89:A8:FA:B9:A3:D6:6C:1D:B4:D5:B1:E2:8B:40:4F:68:12
Certificate issuer: /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial: 3010CD7A7B03140252BC5EF4FEB3EAE4AA9C6B93
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa
Signing time: Wed 01 Oct 2025 18:01:37 +0000
ROA not before: Wed 01 Oct 2025 17:56:37 +0000
ROA not after: Wed 30 Sep 2026 18:01:37 +0000
asID: 268440
IP address blocks: 45.161.22.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:10:cd:7a:7b:03:14:02:52:bc:5e:f4:fe:b3:ea:e4:aa:9c:6b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Validity
Not Before: Oct 1 17:56:37 2025 GMT
Not After : Sep 30 18:01:37 2026 GMT
Subject: CN=3EF50889A8FAB9A3D66C1DB4D5B1E28B404F6812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f6:b3:4b:29:72:96:53:1a:0d:21:fa:72:90:
07:b6:07:a5:ef:8d:63:df:62:72:9e:e8:66:e3:c5:
70:cf:6e:f7:52:cc:8a:59:32:8c:a6:f7:5a:40:6b:
d3:2a:49:55:23:cf:23:97:7e:7f:08:f4:cd:ac:70:
0d:27:d4:20:40:09:1d:7a:13:f0:1d:74:1b:41:61:
17:ac:5d:ab:c5:04:c5:ac:e5:d0:8f:89:4b:e3:e7:
a7:03:1f:1b:94:10:5f:98:69:06:61:04:2e:32:ec:
04:ae:b2:6c:9b:ef:71:50:07:88:25:09:da:5e:28:
07:46:49:e0:38:f0:03:ad:d9:39:63:84:49:06:cd:
93:ac:2a:57:9e:22:e6:0a:ae:e2:8e:64:0b:b3:3b:
f1:65:3c:47:bf:5e:d8:3d:74:62:8e:51:3b:19:73:
73:e9:db:0f:eb:05:6e:f4:38:97:d3:6b:b9:05:2e:
9e:19:f8:13:3c:a5:f4:05:39:f0:5b:33:e6:4c:46:
62:d1:40:8f:c5:fe:d9:81:e9:e3:e1:05:cd:09:d0:
8d:f5:73:ba:f8:fc:bc:64:87:28:c3:0d:6b:59:29:
33:1e:7f:99:cb:7d:8a:c6:ed:55:fb:01:a7:2c:16:
e8:1f:a5:d7:d4:a9:3c:ca:2c:bb:ec:a4:20:27:4e:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F5:08:89:A8:FA:B9:A3:D6:6C:1D:B4:D5:B1:E2:8B:40:4F:68:12
X509v3 Authority Key Identifier:
keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32322e302f32342d3234203d3e20323638343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.22.0/24
Signature Algorithm: sha256WithRSAEncryption
89:65:77:ee:72:7f:89:33:99:b8:db:7a:23:f0:9d:0e:06:be:
5f:b4:0a:96:0d:da:72:b1:e7:c5:ea:98:05:14:85:f8:2a:b2:
c2:23:c2:7b:43:55:e3:d7:56:a3:a9:b7:3c:58:82:3d:43:93:
36:8a:62:b3:06:47:ad:2b:00:18:e5:32:3c:d0:a5:a8:e9:f9:
f0:6b:a0:b8:58:d2:bd:e5:21:3e:4f:ac:fd:67:3f:f7:9d:82:
82:2b:a0:86:1a:24:50:09:19:33:1b:0f:1b:3e:8d:aa:4d:da:
0d:5c:49:fb:e7:ce:6b:6e:2f:16:50:3a:65:05:a4:b0:fb:64:
99:ba:d7:c0:06:73:c9:30:65:e1:6e:3a:eb:aa:e2:1f:9a:f1:
3f:d6:43:2f:79:e6:af:d1:7f:7c:1c:99:4c:7e:43:35:13:e5:
15:28:13:27:a2:7e:06:a2:b6:8f:d8:7b:4d:6e:46:63:22:9d:
3d:0d:d4:17:b5:45:cc:cc:f7:c2:65:d7:78:a3:4c:ce:1f:e0:
21:90:20:8f:26:73:52:f9:0b:a9:50:75:bf:09:38:70:43:71:
82:02:fe:d5:af:81:72:88:68:3d:de:cd:93:ab:fd:1a:ab:b9:
87:64:4e:6b:62:b3:0e:86:6e:ec:41:c8:bb:38:ab:7b:81:8f:
a6:5c:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:48:16 2025 by rpki-client