Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e37312e36382e302f32322d3234203d3e20323632393037.roa
File: 34352e37312e36382e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier: F1cFDS1pZAHut3m+yrki+I2jvrDE81jYq9bGmzCVpJ8=
Subject key identifier: 04:A5:CF:30:9E:37:FA:40:89:CD:24:32:96:70:76:C8:4A:2C:AF:2B
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 1BA47C3F944FAB27A67C9DB0DD8CBB3CF27E0803
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e37312e36382e302f32322d3234203d3e20323632393037.roa
Signing time: Wed 04 Feb 2026 15:44:28 +0000
ROA not before: Wed 04 Feb 2026 15:39:28 +0000
ROA not after: Wed 03 Feb 2027 15:44:28 +0000
asID: 262907
IP address blocks: 45.71.68.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a4:7c:3f:94:4f:ab:27:a6:7c:9d:b0:dd:8c:bb:3c:f2:7e:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Feb 4 15:39:28 2026 GMT
Not After : Feb 3 15:44:28 2027 GMT
Subject: CN=04A5CF309E37FA4089CD2432967076C84A2CAF2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:1c:0f:cd:33:25:58:94:39:2b:9a:35:10:
fb:e5:aa:52:bc:f2:41:f8:7c:06:b2:ce:d5:f3:e1:
87:74:13:f4:a4:b2:2a:db:83:22:30:41:bc:30:80:
24:8b:a1:ba:75:ce:ea:8e:ea:7d:52:c9:37:cd:dd:
1d:53:a2:d6:5b:42:7e:f5:3f:ea:0a:6e:04:75:e2:
d6:cc:b4:19:3e:73:d6:99:85:33:3c:20:0f:12:ba:
de:45:84:b1:dd:df:61:72:90:36:a5:f1:2b:b5:bf:
a8:d7:59:33:49:83:b8:65:9c:e1:5b:8d:98:b1:89:
21:b1:c5:cb:a9:9d:5b:30:86:c1:f6:44:d6:9c:26:
28:20:69:25:e1:7e:0d:e3:80:32:36:8a:e9:e8:2d:
51:98:e7:b8:de:a3:0f:f7:95:bb:b9:d4:24:fd:56:
92:49:a1:a1:6b:dc:82:9e:9d:9a:64:e5:8c:18:fb:
4d:2d:8a:c3:97:dd:13:75:6d:a1:de:79:fb:c3:0c:
b1:85:b3:41:53:4f:a7:9a:3f:eb:9a:1e:d4:ed:e2:
62:c7:bd:8e:fb:e0:fd:c4:13:2b:f4:d9:3b:72:c3:
f7:e1:10:5e:2e:47:6e:f3:6a:0b:4a:8a:e7:ad:30:
2e:34:dc:28:9e:01:66:ba:d5:e9:bc:45:a4:77:80:
ae:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A5:CF:30:9E:37:FA:40:89:CD:24:32:96:70:76:C8:4A:2C:AF:2B
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e37312e36382e302f32322d3234203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.68.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:d1:22:03:75:3b:7d:77:41:23:15:b1:ae:03:87:87:e3:16:
3c:45:40:5f:a1:a3:67:00:b8:60:fa:4e:59:90:0a:78:3b:33:
46:e3:5b:ad:dc:b1:ab:68:13:b9:ef:f7:13:93:33:84:80:9a:
b2:27:cb:4b:fc:72:d9:a5:5d:2f:8f:9d:fd:dd:b5:5f:68:fc:
f1:78:b0:de:4e:73:2d:32:d3:7e:67:17:c5:e1:c4:41:2b:81:
7b:2a:d1:41:22:b3:fb:e6:a0:79:f2:fe:ed:b9:97:a5:d7:d6:
60:6c:14:ff:f6:e9:c5:b7:35:20:60:c2:1b:46:c5:ff:e4:1a:
cf:ea:4e:6d:3a:0f:0b:51:af:31:47:e1:85:26:cf:31:29:97:
77:86:37:6c:b7:5a:78:41:74:e5:a5:fe:b7:95:f0:19:ae:73:
e7:4c:b6:3d:5c:30:d7:d1:00:9b:17:c0:70:25:18:d2:4d:d8:
19:0d:6c:a4:41:73:ca:1c:21:0d:f7:d0:ef:ba:df:96:0e:1f:
d2:4c:53:54:4b:68:41:09:48:ce:4c:36:7e:6b:ff:b6:6d:65:
e8:e1:e0:0e:be:9e:e8:0d:24:ca:e5:0b:6a:bd:3d:2c:53:27:
bd:94:f0:f3:98:ab:b0:4d:87:bb:f7:2a:31:be:d5:06:27:ff:
98:f3:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:54:23 2026 by rpki-client