Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3332203d3e20323637363336.roa
File: 34352e3232342e32342e302f32322d3332203d3e20323637363336.roa (raw, json)
Hash identifier: 74uV400DcOaEUk1zb7BXIfz6meLZuI8H2EbJ6rMseEs=
Subject key identifier: C3:38:0A:02:34:D5:CB:24:72:1D:6D:D4:58:F5:CA:10:BE:CE:CE:FE
Certificate issuer: /CN=A1E289E62C24AE2ECF3211E63E2E81322ADD6E99
Certificate serial: 3DC4792C694B5EFB25DE103A3FA03923C8EDB5DA
Authority key identifier: A1:E2:89:E6:2C:24:AE:2E:CF:32:11:E6:3E:2E:81:32:2A:DD:6E:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3332203d3e20323637363336.roa
Signing time: Wed 05 Feb 2025 13:02:35 +0000
ROA not before: Wed 05 Feb 2025 12:57:35 +0000
ROA not after: Wed 04 Feb 2026 13:02:35 +0000
asID: 267636
IP address blocks: 45.224.24.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c4:79:2c:69:4b:5e:fb:25:de:10:3a:3f:a0:39:23:c8:ed:b5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1E289E62C24AE2ECF3211E63E2E81322ADD6E99
Validity
Not Before: Feb 5 12:57:35 2025 GMT
Not After : Feb 4 13:02:35 2026 GMT
Subject: CN=C3380A0234D5CB24721D6DD458F5CA10BECECEFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:8c:ae:0e:7b:48:28:34:12:35:0f:4b:49:
56:a8:08:7d:b3:86:52:08:4a:76:71:22:fd:ba:82:
70:3e:29:d5:79:ef:aa:97:3a:c5:0d:71:df:f5:58:
23:29:32:39:a5:3f:f2:d9:2c:47:f6:70:57:04:a1:
f3:a1:3d:09:cd:4b:8a:c1:f3:92:5f:ea:28:f9:50:
47:45:09:a0:d2:48:2c:a8:3e:a5:af:c3:f9:2b:1d:
28:cf:41:60:90:56:b8:47:ff:01:16:1e:2f:5a:09:
ff:b8:93:41:79:a1:d8:73:73:6a:09:5f:75:56:10:
b5:4a:f2:ed:df:93:8e:20:6a:16:f5:c3:20:3a:a5:
4c:86:06:f8:17:8c:44:36:ab:5f:87:21:80:26:1d:
ba:cf:6c:6a:7a:76:64:bd:60:3d:63:ed:8f:d3:48:
4e:76:94:99:09:0c:1d:99:f5:2d:fc:5a:be:e2:e6:
80:2c:c1:61:41:65:30:d0:5d:f6:bf:d2:c4:73:2a:
87:bc:79:a0:a4:eb:23:de:5b:47:c6:28:e9:b0:e2:
8e:d8:45:3b:70:5f:03:6a:f7:22:4e:af:68:d5:c5:
65:0d:c5:8d:55:23:77:54:80:19:1e:a0:a1:33:59:
a0:63:c8:bd:86:07:0a:1a:65:d2:7a:9a:9c:b2:d6:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:0A:02:34:D5:CB:24:72:1D:6D:D4:58:F5:CA:10:BE:CE:CE:FE
X509v3 Authority Key Identifier:
keyid:A1:E2:89:E6:2C:24:AE:2E:CF:32:11:E6:3E:2E:81:32:2A:DD:6E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E289E62C24AE2ECF3211E63E2E81322ADD6E99.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32342e302f32322d3332203d3e20323637363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:54:fd:9a:86:27:9b:3a:3c:2c:b4:0a:f1:ae:c3:7a:40:7d:
93:e4:4b:91:ea:6d:1b:6d:79:97:6f:c3:8a:6f:51:c5:5e:c2:
57:ad:9b:f9:57:3a:2d:6b:69:d0:a9:00:67:b4:aa:1b:13:c0:
3c:ca:dd:02:a2:b0:d7:cd:78:c7:ca:39:c4:6d:69:c5:24:57:
f3:96:a6:01:aa:d4:6c:1f:80:5f:38:37:f2:cd:4f:f6:43:58:
d0:db:b8:82:c0:74:b5:47:6d:68:96:0b:06:61:89:80:2f:8a:
e6:df:6e:29:cd:11:6b:26:cf:fc:a1:51:f0:34:0d:6c:67:c3:
5d:7b:95:eb:c5:5d:76:7b:c7:0d:61:0e:87:07:ed:e9:18:b3:
d5:b9:50:9c:cb:a8:00:af:00:a7:2f:37:8c:9c:49:ca:15:a7:
1d:10:4a:00:af:8b:c3:c0:fe:6a:8f:83:4e:bd:8b:5a:88:e2:
30:f0:d7:cf:a1:d5:6f:c1:59:f7:a1:f4:36:47:8e:d2:6b:53:
c3:2d:b9:97:52:64:f6:b5:d4:d0:2d:6d:f5:6a:e8:ce:b4:bd:
36:e1:3f:6c:a8:b4:a2:b6:f1:fc:cd:88:cc:d8:de:d5:d7:ba:
83:f4:b7:d6:5d:e4:9f:30:28:c5:24:94:77:83:fd:66:55:e4:
3d:94:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:45:07 2025 by rpki-client