Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
File: 34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (raw, json)
Hash identifier: FWS3B1yJj4kySgRzJb8rDcyACIoFBAKMslIb57YJh8I=
Subject key identifier: 86:AA:7F:33:86:CE:1B:09:CB:DA:A2:B1:27:8D:E5:F2:7B:52:C7:C1
Certificate issuer: /CN=A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F
Certificate serial: 41F5393B9A5EE8CE1ACF183CA7ED8F1D48AA244F
Authority key identifier: A1:76:0A:7E:E0:C2:DE:FB:3E:45:D1:8E:0E:E3:65:B4:CC:94:1E:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
Signing time: Thu 19 Jun 2025 04:32:45 +0000
ROA not before: Thu 19 Jun 2025 04:27:45 +0000
ROA not after: Thu 18 Jun 2026 04:32:45 +0000
asID: 273392
IP address blocks: 45.168.94.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f5:39:3b:9a:5e:e8:ce:1a:cf:18:3c:a7:ed:8f:1d:48:aa:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F
Validity
Not Before: Jun 19 04:27:45 2025 GMT
Not After : Jun 18 04:32:45 2026 GMT
Subject: CN=86AA7F3386CE1B09CBDAA2B1278DE5F27B52C7C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2a:bf:71:eb:99:eb:10:3d:e9:0b:a4:95:4b:
7c:31:4b:03:a3:5a:8c:b9:00:bc:fc:ba:59:22:fd:
21:13:89:72:84:1b:8a:f8:01:d9:5d:a7:94:3d:1b:
72:28:4d:e7:e2:92:a6:82:4a:f3:8d:2d:7e:28:6b:
3a:5d:b4:47:95:f0:14:9b:4d:16:61:d2:39:3b:6d:
e4:1e:c3:62:8e:4a:30:0d:1d:06:81:58:d3:22:a1:
1f:5d:32:f7:7c:0c:1e:2a:80:55:c3:9e:f5:1f:72:
83:e1:54:4e:c2:f0:1a:70:20:57:46:80:7d:6a:65:
8e:fd:0f:fa:e6:fa:f4:0f:54:1f:e9:3c:ac:11:c8:
8e:0d:b6:9d:fa:ad:65:7b:ef:ee:e3:35:db:6f:80:
de:66:a6:db:e2:2b:08:4c:01:f2:bc:21:58:e7:27:
5b:c6:ed:d0:67:9b:67:ac:df:38:a3:46:fe:89:3d:
6d:a9:e5:b7:ab:4a:51:41:7c:1c:e3:2c:24:0e:ae:
c2:85:c6:7b:84:8c:8a:7b:92:6c:05:8a:04:36:03:
bf:0f:df:e4:2d:11:3c:19:eb:aa:37:00:17:15:fb:
00:6c:fd:2d:12:0c:ef:9f:6e:11:d0:b2:6f:ee:f1:
6f:8b:5e:39:80:d9:ca:42:63:ec:4b:89:bc:87:4d:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AA:7F:33:86:CE:1B:09:CB:DA:A2:B1:27:8D:E5:F2:7B:52:C7:C1
X509v3 Authority Key Identifier:
keyid:A1:76:0A:7E:E0:C2:DE:FB:3E:45:D1:8E:0E:E3:65:B4:CC:94:1E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ec:64:cc:02:23:e4:08:b0:0a:56:06:c0:50:e5:29:eb:a5:
12:69:65:55:37:1f:70:f5:45:ba:db:e7:4b:77:30:4d:bf:a4:
2f:88:a5:5c:68:51:4c:69:3d:5f:31:bc:0c:26:97:2f:36:7e:
a1:6d:26:5b:34:0d:f7:8e:2c:16:56:19:77:e1:5a:11:1f:ab:
9c:f6:16:d0:8c:d5:d9:5b:53:e5:35:de:b2:99:86:69:fa:d1:
ff:c7:44:e4:cc:05:8e:95:91:c3:90:e5:63:c6:ac:ac:f2:b4:
45:46:56:5f:7e:9b:54:0e:08:ce:e5:f4:c9:83:16:d6:f0:a5:
ce:ff:55:47:03:97:38:50:33:f9:d4:6e:12:0f:d9:d0:34:2e:
3d:ee:f8:6f:84:1a:01:ab:31:c9:6e:96:49:7c:19:bb:5f:dd:
a2:27:5b:2c:c7:e1:2d:79:48:17:69:64:59:fe:87:d2:2a:0d:
45:df:bf:8f:67:a4:a2:7c:14:5c:53:46:e4:92:85:ea:76:f3:
f8:97:0d:b0:6f:89:5b:b3:62:39:b6:37:b0:57:36:67:9a:3d:
ee:15:e9:2e:ca:34:02:f7:d0:10:25:da:ae:e4:6c:b1:da:38:
e8:71:7d:70:e7:b8:3c:9f:59:c5:d6:01:94:2a:21:45:c3:92:
6a:69:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:06:27 2025 by rpki-client