Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa
File: 34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa (raw, json)
Hash identifier: JSzHgpxlF6P0SM6Ji1j7nwocOG/tZXDgQCXCJAUejYY=
Subject key identifier: 04:B4:20:E0:17:3A:76:B6:25:68:FB:69:5B:C8:CF:57:FA:13:16:02
Certificate issuer: /CN=3E1AA64F1F90D524070428F948C2D4929E70635C
Certificate serial: 78BF5556D80B37AAE6687A1264D59A9219B5D2C2
Authority key identifier: 3E:1A:A6:4F:1F:90:D5:24:07:04:28:F9:48:C2:D4:92:9E:70:63:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E1AA64F1F90D524070428F948C2D4929E70635C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa
Signing time: Mon 21 Jul 2025 18:50:30 +0000
ROA not before: Mon 21 Jul 2025 18:45:30 +0000
ROA not after: Mon 20 Jul 2026 18:50:30 +0000
asID: 266972
IP address blocks: 45.225.208.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:bf:55:56:d8:0b:37:aa:e6:68:7a:12:64:d5:9a:92:19:b5:d2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E1AA64F1F90D524070428F948C2D4929E70635C
Validity
Not Before: Jul 21 18:45:30 2025 GMT
Not After : Jul 20 18:50:30 2026 GMT
Subject: CN=04B420E0173A76B62568FB695BC8CF57FA131602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:8e:22:29:65:8e:de:6d:fd:8a:f9:92:dc:
a3:e0:c9:07:4c:83:32:da:d2:e8:2b:cc:b6:ad:ad:
77:09:40:4b:0d:2a:b0:02:d5:b9:80:ed:16:79:3f:
ce:97:14:8e:ac:ac:6e:a3:06:16:ce:e8:10:a0:d6:
77:95:68:12:82:43:77:45:1b:2d:18:6a:41:06:2c:
93:03:91:13:01:b4:cc:1c:8c:76:8b:9c:73:45:7c:
72:70:56:0b:ea:57:a2:bc:42:16:82:94:c1:bb:57:
37:19:9d:bf:95:29:fb:b2:54:63:55:a9:bf:0d:49:
68:c0:ad:92:46:4d:7a:36:75:d4:c8:59:bd:a3:74:
a3:8b:f2:fb:2b:87:cd:84:01:dc:b3:19:1e:09:3e:
d7:19:0b:d9:0b:ad:ef:c4:07:5d:c6:fd:22:0f:d7:
52:f0:2e:6f:33:c7:c5:e0:12:a5:30:d8:53:a4:00:
b4:4b:da:e8:f8:18:c5:be:ca:03:f8:a1:56:4b:40:
26:06:66:85:12:47:a5:0b:7c:79:5b:f2:ac:c6:29:
75:55:9c:c8:bb:c7:73:c3:8d:52:fa:1b:ff:2f:23:
37:e0:f2:a5:37:68:6e:c6:16:89:14:47:42:ab:ab:
ab:70:fd:fa:dd:98:e8:29:54:9a:e2:f0:06:76:8e:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:20:E0:17:3A:76:B6:25:68:FB:69:5B:C8:CF:57:FA:13:16:02
X509v3 Authority Key Identifier:
keyid:3E:1A:A6:4F:1F:90:D5:24:07:04:28:F9:48:C2:D4:92:9E:70:63:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/3E1AA64F1F90D524070428F948C2D4929E70635C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E1AA64F1F90D524070428F948C2D4929E70635C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRY947nQiCXVBTQ2wEqzowWyxmPjuMntpFeHVXaGJUx/0/34352e3232352e3230382e302f32322d3332203d3e20323636393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.208.0/22
Signature Algorithm: sha256WithRSAEncryption
35:7c:de:20:24:47:31:6e:1e:38:de:cb:9e:c1:1b:d7:ba:54:
34:d9:eb:6c:72:5f:b3:f9:b4:bf:d7:91:c1:d3:04:83:de:bb:
f9:0e:a3:c5:73:4a:44:38:c8:46:c7:54:14:40:ad:3e:b9:d2:
4f:a2:e2:5e:1b:e2:27:e1:a7:e9:cc:f4:34:b6:85:6d:f1:41:
35:17:9f:6c:7f:0a:55:51:9b:30:98:a9:cc:45:24:94:76:d6:
25:10:03:72:30:95:50:6e:0f:9a:ce:13:be:dd:4c:a5:c2:b6:
ab:20:1f:73:f7:fb:a5:f0:fc:b4:af:5c:07:df:60:7e:97:fb:
26:99:93:8a:b0:95:d1:9e:b6:dd:9e:be:6d:07:e2:ee:03:ac:
a3:1d:5d:f6:3d:2c:32:32:a5:45:2a:92:f0:7e:ce:e9:68:14:
92:47:5f:e9:2f:56:0c:3f:10:1c:99:54:6b:27:30:69:cf:4d:
49:39:b9:7f:50:ed:d3:93:75:57:94:19:97:c9:cd:7b:a3:1a:
68:81:6b:d1:f0:f8:2f:19:93:d0:a8:d5:92:4b:a9:ab:a7:b8:
c9:54:09:00:1e:89:6b:0b:42:a4:c0:63:47:e1:53:70:5b:18:
95:9a:8e:02:73:6a:c4:f9:bb:de:a3:b1:ce:21:fb:d3:d9:c0:
a0:a8:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:00:00 2025 by rpki-client