Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa
File: 34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (raw, json)
Hash identifier: TxOIhbwzlN7I7q94EScK4FFwq4vxuPW0ymjAuYngXN8=
Subject key identifier: 7B:0D:EC:78:26:47:60:89:4B:AA:C7:E8:BE:A1:08:EE:60:B6:A6:8B
Certificate issuer: /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Certificate serial: 321C2D899D79935A39D1E7B20DA48D5F1C768BB5
Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa
Signing time: Sat 04 Apr 2026 12:29:02 +0000
ROA not before: Sat 04 Apr 2026 12:24:02 +0000
ROA not after: Sat 03 Apr 2027 12:29:02 +0000
asID: 269473
IP address blocks: 45.187.171.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1c:2d:89:9d:79:93:5a:39:d1:e7:b2:0d:a4:8d:5f:1c:76:8b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7
Validity
Not Before: Apr 4 12:24:02 2026 GMT
Not After : Apr 3 12:29:02 2027 GMT
Subject: CN=7B0DEC78264760894BAAC7E8BEA108EE60B6A68B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:d6:c7:fc:75:7b:c7:b7:bb:79:59:bc:08:
d2:93:74:4b:0f:2f:61:b2:62:2b:a3:c2:ea:48:bf:
29:6b:89:b4:05:9f:43:03:92:c2:3a:22:4b:99:d9:
7f:b1:66:66:50:48:5c:5b:ad:d6:aa:02:7b:46:47:
b8:37:b6:3a:55:d5:4e:e8:54:47:f7:40:12:0b:e8:
39:7f:b1:5e:a0:95:3c:0d:8c:ff:e1:b0:63:55:b4:
b0:5c:1b:f9:cd:2e:b5:43:b7:28:55:dc:35:ab:fc:
3c:af:4e:cc:13:a1:fe:16:ec:db:54:ef:10:ed:fe:
97:f6:09:d6:07:0e:82:02:60:72:11:b7:7c:49:1e:
37:40:8c:cc:66:98:43:8c:e9:34:7f:fe:77:5e:12:
43:98:92:e7:3c:73:88:0c:c7:3c:4f:39:15:bc:27:
dd:1a:8a:bc:52:ce:dc:eb:9c:35:b1:14:bf:49:80:
fc:e5:15:92:37:ba:5f:70:12:33:7c:7e:3a:bd:55:
8e:01:0d:f0:11:11:f8:ff:4b:f9:dc:cd:97:48:c6:
79:33:7e:73:01:22:4b:c4:cf:41:66:27:f2:b3:a2:
47:13:10:69:58:2e:07:a9:e9:1e:9f:87:6b:e3:6a:
b0:6b:8f:d9:ab:e5:29:fc:71:24:31:f2:86:71:0e:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:EC:78:26:47:60:89:4B:AA:C7:E8:BE:A1:08:EE:60:B6:A6:8B
X509v3 Authority Key Identifier:
keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.171.0/24
Signature Algorithm: sha256WithRSAEncryption
40:89:82:d2:c1:f0:93:6e:07:4a:e7:11:e2:f7:f7:7a:23:c9:
cb:fe:ad:68:5b:d8:e6:48:63:33:3f:25:d3:d5:1b:f2:2c:12:
4f:56:e2:3b:a0:43:17:df:00:f0:6a:71:b0:4d:8a:d9:ad:af:
00:21:39:56:5a:7f:0d:15:25:28:06:42:3e:cb:a5:01:f5:0a:
56:d9:a0:70:34:a1:c2:8c:6f:1f:95:2a:46:5e:09:b4:17:a4:
b3:ab:52:20:af:ed:55:49:d0:b4:a0:92:7e:00:76:d0:50:da:
cb:a6:05:55:e0:01:92:02:e1:d6:82:c1:84:50:a8:00:ab:3c:
4e:8a:eb:3f:ca:fa:bc:b2:7d:6e:3f:f8:43:d3:e3:68:e3:12:
4d:65:fd:c1:37:56:c6:11:5b:1a:52:7e:d8:fd:cc:2e:ce:21:
df:7a:dd:75:1f:61:ec:c6:84:ca:d8:44:23:6c:20:05:3b:23:
7f:d0:72:7e:7f:f6:9c:90:24:80:05:45:3c:cd:94:fa:99:f3:
b8:58:37:09:cc:91:7a:1a:28:c3:36:1c:13:a4:6e:6b:49:08:
77:14:a9:a9:c1:e6:d8:17:f0:c3:0f:fd:37:ca:51:77:78:eb:
86:3b:20:37:1c:2a:b7:3b:f9:b2:46:74:60:44:46:2a:23:b0:
9a:d6:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:45:42 2026 by rpki-client