Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
File: 34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier: BVk5GRfmlDttQSTk3gzcNbZFj6xTR2/n5uR1FdOiZ84=
Subject key identifier: 42:A0:87:E1:FA:E7:43:AB:86:F7:75:65:2E:76:7F:69:4F:FA:B6:1C
Certificate issuer: /CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901
Certificate serial: 7E43ED243C651CF6FCDA851CC92273EB6F628857
Authority key identifier: 86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer
Subject info access: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
Signing time: Wed 04 Jun 2025 14:55:30 +0000
ROA not before: Wed 04 Jun 2025 14:50:30 +0000
ROA not after: Wed 03 Jun 2026 14:55:30 +0000
asID: 268063
IP address blocks: 45.168.125.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:43:ed:24:3c:65:1c:f6:fc:da:85:1c:c9:22:73:eb:6f:62:88:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901
Validity
Not Before: Jun 4 14:50:30 2025 GMT
Not After : Jun 3 14:55:30 2026 GMT
Subject: CN=42A087E1FAE743AB86F775652E767F694FFAB61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:74:e0:67:e6:c3:eb:7e:a5:e2:34:8c:c2:
77:03:7e:8f:96:cf:c3:33:21:07:78:60:31:04:23:
6a:42:e0:59:d9:b3:e3:27:b2:07:7e:b5:88:38:b9:
b9:30:0b:d9:d2:ea:d4:75:3a:3e:36:7f:0a:ec:d4:
30:09:42:7d:f9:bd:d4:7d:2e:89:ca:11:44:6e:f3:
5e:7e:a7:9b:e4:11:47:58:c9:f2:49:60:76:43:e3:
73:bf:4b:dc:e0:84:75:19:b9:22:32:c4:9e:86:9b:
c0:24:14:b5:5c:b0:e5:08:7b:4d:08:55:7a:d3:bc:
9b:c2:b2:53:50:37:e1:c7:71:b0:64:3b:13:c8:3a:
bc:72:8c:07:4e:fa:87:fd:d1:f4:54:89:b0:b1:cf:
91:38:0d:f8:40:af:22:56:b0:58:5f:dc:92:71:73:
5c:ef:af:5d:9b:1d:3b:e8:eb:82:ed:a5:81:a8:0e:
6a:01:40:28:21:3a:76:5d:5c:77:15:b9:9b:3b:63:
bf:73:9b:2c:21:9c:11:af:e6:27:c3:54:3b:9c:17:
e1:82:9d:6f:e0:55:ab:79:3c:4c:23:eb:0d:9f:9c:
b7:9d:2b:0b:c7:1d:9f:e0:9a:f2:f2:ea:5a:ab:b6:
56:d9:1f:aa:e2:f3:b1:a5:0a:d9:71:95:19:c4:fd:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A0:87:E1:FA:E7:43:AB:86:F7:75:65:2E:76:7F:69:4F:FA:B6:1C
X509v3 Authority Key Identifier:
keyid:86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.125.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:c2:ba:55:f4:e1:05:99:84:56:0c:c2:40:fe:b1:53:0a:ec:
c1:67:e1:05:22:3e:76:5f:a2:b3:b7:09:0b:a3:42:f7:c6:21:
88:24:2e:3c:48:95:f4:76:ec:88:91:2a:48:e3:f6:43:22:8c:
55:7b:62:ca:c2:a9:94:8b:cc:77:87:e2:ed:7e:0f:85:ca:c1:
3b:6a:0a:d9:5d:d2:05:2f:90:d4:01:dc:5d:11:28:87:a0:0e:
a9:e4:ca:15:9e:ce:bc:39:74:0f:a2:11:1f:56:82:0d:86:ce:
07:1b:c2:49:e6:2e:eb:c0:a1:12:74:ba:e6:f2:6c:11:20:56:
5d:37:39:01:68:b7:86:8f:b4:aa:1a:43:e5:ff:28:23:63:7e:
84:a3:39:ee:2a:09:3d:a7:2f:af:b6:80:f6:09:a3:86:63:17:
31:1f:3f:d6:5b:06:f8:d5:a9:28:91:ee:f6:ef:8c:a4:2f:c4:
d7:53:88:e5:52:a6:a4:d8:d2:01:17:de:ca:cc:1d:46:b0:ca:
6f:75:92:b5:50:f3:4a:01:fd:dc:e3:4b:00:42:fa:f1:44:26:
71:42:05:7b:42:d0:d9:7f:4f:40:5c:a8:31:50:1e:61:b3:99:
45:59:34:d7:54:4d:d6:06:dc:7d:2f:bf:63:25:4e:b7:a2:3a:
bf:45:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:54:51 2025 by rpki-client