Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa
File: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (raw, json)
Hash identifier: KrbejnEAB1jYoyxgNuPx+4IjNgbAPuqfamW0X1CVqgY=
Subject key identifier: 6F:7D:FF:FF:14:0B:6C:E0:ED:04:C7:C4:8A:9F:FA:91:18:A1:76:99
Certificate issuer: /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial: 664282A2188ED2817A1C21075F72644F2762D815
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa
Signing time: Sat 04 Apr 2026 12:29:02 +0000
ROA not before: Sat 04 Apr 2026 12:24:02 +0000
ROA not after: Sat 03 Apr 2027 12:29:02 +0000
asID: 269473
IP address blocks: 45.187.168.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:42:82:a2:18:8e:d2:81:7a:1c:21:07:5f:72:64:4f:27:62:d8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Validity
Not Before: Apr 4 12:24:02 2026 GMT
Not After : Apr 3 12:29:02 2027 GMT
Subject: CN=6F7DFFFF140B6CE0ED04C7C48A9FFA9118A17699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:c0:51:ea:6d:da:0a:3a:b2:2f:32:f4:18:
5f:83:36:93:09:aa:73:f5:4e:00:f5:22:b7:3d:de:
60:85:2f:49:5a:b7:51:7a:32:24:c3:0e:a7:50:57:
3e:a0:80:c7:3a:63:dd:93:37:20:56:28:4a:9c:05:
3e:c7:d5:5e:3e:b9:51:8b:29:fc:9d:e8:7d:f2:9a:
af:a1:9c:39:24:41:ec:6c:f7:d4:2a:77:6d:ac:c4:
df:c7:8a:7e:80:1a:85:7b:a3:03:fc:8d:4a:a1:2d:
56:d9:a8:b1:47:9f:60:f3:03:a5:c7:e2:8f:06:4f:
c5:4c:61:68:19:3f:09:d1:d7:0d:5c:c9:2e:65:6c:
8f:c6:41:f1:60:d0:99:4d:85:a1:40:a5:12:4b:db:
1d:de:b4:34:1f:d7:d7:fc:87:69:20:ba:eb:19:a8:
41:b6:90:aa:0d:32:41:2e:ac:9f:75:c6:fa:d2:ee:
0a:57:a4:04:c8:64:ba:23:17:8f:c3:5d:fa:91:24:
e7:15:d0:00:12:29:22:ca:e3:06:7e:6e:51:bd:ef:
65:83:9d:70:2a:c8:9c:7a:09:46:19:23:e7:00:69:
eb:d4:b7:2f:3d:e5:19:3a:2b:97:00:70:f0:a2:e8:
25:48:6e:8d:23:c3:1c:27:a8:ce:5b:c3:e6:cc:ba:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:FF:FF:14:0B:6C:E0:ED:04:C7:C4:8A:9F:FA:91:18:A1:76:99
X509v3 Authority Key Identifier:
keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.168.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:d4:9b:45:4f:64:f3:71:fe:f1:70:ff:5c:5c:dd:e5:1a:d5:
0a:4e:5c:79:43:27:b6:9d:f7:40:91:6b:5e:47:4e:3e:de:c6:
c9:6a:5f:20:69:36:fd:7b:35:39:5f:99:34:58:9b:13:79:90:
a5:c3:c7:a8:14:92:32:2f:0d:e8:74:6a:2e:84:6b:d6:59:7d:
9b:08:a8:85:7a:4e:97:46:27:16:5c:26:83:25:06:dd:50:9b:
d9:3c:56:60:3d:69:9b:52:69:fc:c7:1f:65:bb:ce:54:91:fe:
02:13:a1:ad:e8:e4:5a:f9:4f:72:8e:8b:21:8d:bc:bc:91:db:
45:ed:d8:39:87:1b:72:30:ac:e7:e1:09:2c:da:c1:25:ed:98:
d4:c5:9a:cc:b3:21:13:51:0f:08:3a:86:3c:29:81:13:85:61:
e9:40:cf:dc:1f:c5:65:48:6a:73:74:b6:76:96:76:59:99:7b:
3a:80:8f:8c:e4:15:3f:c9:54:a7:72:15:27:a7:5c:0f:6b:18:
79:20:d6:b5:e5:ae:ed:4a:1e:b0:2a:22:79:e6:6d:f1:78:3c:
87:bf:e8:bb:8a:b8:77:08:0c:15:76:b2:60:1a:cf:39:74:37:
fb:a4:99:37:ff:71:c8:38:51:ec:6a:43:e7:68:05:26:1b:2c:
8a:2b:1a:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZkKCohiO0oF6HCEHX3JkTydi2BUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFBOTFCODcyOTkyNEI0RTgxNTVCODE5NTI2ODhCRUMw
MDRERDBCNzAeFw0yNjA0MDQxMjI0MDJaFw0yNzA0MDMxMjI5MDJaMDMxMTAvBgNV
BAMTKDZGN0RGRkZGMTQwQjZDRTBFRDA0QzdDNDhBOUZGQTkxMThBMTc2OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqi8BR6m3aCjqyLzL0GF+DNpMJ
qnP1TgD1Irc93mCFL0lat1F6MiTDDqdQVz6ggMc6Y92TNyBWKEqcBT7H1V4+uVGL
Kfyd6H3ymq+hnDkkQexs99Qqd22sxN/Hin6AGoV7owP8jUqhLVbZqLFHn2DzA6XH
4o8GT8VMYWgZPwnR1w1cyS5lbI/GQfFg0JlNhaFApRJL2x3etDQf19f8h2kguusZ
qEG2kKoNMkEurJ91xvrS7gpXpATIZLojF4/DXfqRJOcV0AASKSLK4wZ+blG972WD
nXAqyJx6CUYZI+cAaevUty895Rk6K5cAcPCi6CVIbo0jwxwnqM5bw+bMuoThAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUb33//xQLbODtBMfEip/6kRihdpkwHwYDVR0j
BBgwFoAUuqkbhymSS06BVbgZUmiL7ABN0LcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VY
RjkvMS9CQUE5MUI4NzI5OTI0QjRFODE1NUI4MTk1MjY4OEJFQzAwNEREMEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQTkxQjg3Mjk5MjRCNEU4
MTU1QjgxOTUyNjg4QkVDMDA0REQwQjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hydlR4YTJZTnhZeVBwM2M1UHE1MXVvM1dHbmp4TWhuTWpIc0J2ZDdlWEY5LzEv
MzQzNTJlMzEzODM3MmUzMTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtu6gwDQYJKoZIhvcNAQELBQADggEBAHvUm0VP
ZPNx/vFw/1xc3eUa1QpOXHlDJ7ad90CRa15HTj7exslqXyBpNv17NTlfmTRYmxN5
kKXDx6gUkjIvDeh0ai6Ea9ZZfZsIqIV6TpdGJxZcJoMlBt1Qm9k8VmA9aZtSafzH
H2W7zlSR/gIToa3o5Fr5T3KOiyGNvLyR20Xt2DmHG3IwrOfhCSzawSXtmNTFmsyz
IRNRDwg6hjwpgROFYelAz9wfxWVIanN0tnaWdlmZezqAj4zkFT/JVKdyFSenXA9r
GHkg1rXlru1KHrAqInnmbfF4PIe/6LuKuHcIDBV2smAazzl0N/ukmTf/ccg4Uexq
Q+doBSYbLIorGl4=
-----END CERTIFICATE-----
Generated at Wed Apr 8 18:11:00 2026 by rpki-client