Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/34352e3232382e34342e302f32322d3332203d3e20323637303438.roa
File: 34352e3232382e34342e302f32322d3332203d3e20323637303438.roa (raw, json)
Hash identifier: ptKypdvsfe/A1ZLP+gZ8Dglfn9xoPxaI9bJaA102gPw=
Subject key identifier: 6B:5E:D0:5F:02:B6:D2:19:77:F6:01:A0:3B:69:D4:66:8D:E1:B4:D1
Certificate issuer: /CN=DBFB5B14FE52FD99D231D815C08ABF45E15373D0
Certificate serial: 7C127F9E820E45AA2EC87BED2B41472377C028B0
Authority key identifier: DB:FB:5B:14:FE:52:FD:99:D2:31:D8:15:C0:8A:BF:45:E1:53:73:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBFB5B14FE52FD99D231D815C08ABF45E15373D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/34352e3232382e34342e302f32322d3332203d3e20323637303438.roa
Signing time: Tue 30 Jun 2026 13:34:15 +0000
ROA not before: Tue 30 Jun 2026 13:29:15 +0000
ROA not after: Tue 29 Jun 2027 13:34:15 +0000
asID: 267048
IP address blocks: 45.228.44.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:12:7f:9e:82:0e:45:aa:2e:c8:7b:ed:2b:41:47:23:77:c0:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBFB5B14FE52FD99D231D815C08ABF45E15373D0
Validity
Not Before: Jun 30 13:29:15 2026 GMT
Not After : Jun 29 13:34:15 2027 GMT
Subject: CN=6B5ED05F02B6D21977F601A03B69D4668DE1B4D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:2d:23:26:b9:68:29:9e:04:e2:fd:38:d0:
cb:3c:8a:d0:1d:ae:89:fb:17:59:e9:e0:21:29:7c:
13:b7:89:93:69:e7:eb:dd:5f:7c:51:8f:56:b5:1d:
0e:00:b5:60:bd:5e:2b:50:f5:3e:97:cf:cf:78:89:
23:17:d1:cb:1c:db:02:5a:61:f3:37:9d:1d:31:61:
31:dc:e3:a9:8d:86:9f:c7:80:09:8e:be:f9:ec:83:
ec:68:d1:b5:dc:30:dd:df:29:23:67:ed:17:67:e2:
1d:0e:96:d0:07:df:e6:d5:7f:d5:c9:68:8d:f1:53:
4b:5b:3f:a4:1b:df:b6:e2:4b:1d:84:5e:19:86:c0:
3e:d3:44:cf:b1:7d:08:c6:d3:e7:ba:74:23:90:b0:
8c:f6:d9:95:bb:1f:59:59:59:cc:0b:c4:6f:17:91:
3e:dc:db:c4:20:36:47:12:89:79:8b:38:e3:f5:93:
22:65:2b:02:25:8e:75:9a:7e:ba:f3:bb:d9:5d:44:
03:f7:df:60:c3:a9:fd:ff:62:73:e5:ac:af:c3:7b:
78:89:dd:1e:5c:61:e0:b7:d4:3d:ca:fc:49:df:b5:
24:0a:4d:4f:01:92:28:cf:57:6b:7a:23:5d:be:10:
c9:9a:ed:5a:2c:cf:87:23:2a:ea:09:23:f2:20:90:
9a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5E:D0:5F:02:B6:D2:19:77:F6:01:A0:3B:69:D4:66:8D:E1:B4:D1
X509v3 Authority Key Identifier:
keyid:DB:FB:5B:14:FE:52:FD:99:D2:31:D8:15:C0:8A:BF:45:E1:53:73:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/DBFB5B14FE52FD99D231D815C08ABF45E15373D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBFB5B14FE52FD99D231D815C08ABF45E15373D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/34352e3232382e34342e302f32322d3332203d3e20323637303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:38:94:3d:4c:58:8f:71:a0:09:b6:d3:fe:73:0c:8a:4b:9b:
69:e2:ce:f9:8a:0d:0b:a0:97:1f:80:e7:34:d0:17:2c:7f:ba:
ab:27:db:33:48:29:a6:7f:e0:c0:ce:66:c3:c1:0c:2f:5c:a4:
e1:99:f9:da:57:71:d5:bb:f2:22:bd:4d:2d:93:1d:78:f1:3c:
14:3d:5d:42:8e:70:e3:ba:27:17:20:13:80:db:39:6b:95:aa:
e5:c6:a7:7c:c2:e9:ff:35:0a:eb:35:a8:b8:48:c6:da:ca:33:
63:6f:12:eb:3a:5a:4a:7d:fb:32:07:bd:bf:5a:3a:8c:0e:fd:
d5:8b:8e:40:e6:43:d7:a7:9a:d1:b4:8c:37:4c:dd:fe:12:72:
90:ad:22:0d:b3:d1:ab:0b:3a:f2:2f:e3:d3:9e:28:c3:58:b4:
dc:93:d9:99:d5:e3:17:32:7f:7d:9f:79:6e:6b:ae:27:25:2a:
f1:b3:48:05:20:33:a1:5c:10:4d:a8:e9:5f:c6:4a:28:88:b6:
3a:24:24:e7:14:b5:de:1a:a3:89:64:60:80:3d:56:8e:30:80:
a0:29:53:6c:1e:34:b3:ee:d0:4b:56:8f:58:93:cc:21:b4:b5:
25:47:07:02:39:c4:c8:c5:25:69:dd:56:80:46:e3:bf:f0:f1:
8b:1e:8e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:02:10 2026 by rpki-client