Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3332203d3e20323637303539.roa
File: 34352e3232382e3130382e302f32322d3332203d3e20323637303539.roa (raw, json)
Hash identifier: 94HNUeuOcsJgs4yVhX0Vm6hLxm5MnmbEPYUDyCP4qbU=
Subject key identifier: 4C:68:57:70:41:66:F5:75:7E:8C:B6:82:AE:B8:A2:75:94:45:C8:DD
Certificate issuer: /CN=E206333253C6E73C4379D5340F89DA62102A6EDB
Certificate serial: 04AD3D9687C3BD731CE1A38769789D7CEDA55B6B
Authority key identifier: E2:06:33:32:53:C6:E7:3C:43:79:D5:34:0F:89:DA:62:10:2A:6E:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E206333253C6E73C4379D5340F89DA62102A6EDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3332203d3e20323637303539.roa
Signing time: Wed 02 Apr 2025 13:37:58 +0000
ROA not before: Wed 02 Apr 2025 13:32:58 +0000
ROA not after: Wed 01 Apr 2026 13:37:58 +0000
asID: 267059
IP address blocks: 45.228.108.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ad:3d:96:87:c3:bd:73:1c:e1:a3:87:69:78:9d:7c:ed:a5:5b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E206333253C6E73C4379D5340F89DA62102A6EDB
Validity
Not Before: Apr 2 13:32:58 2025 GMT
Not After : Apr 1 13:37:58 2026 GMT
Subject: CN=4C6857704166F5757E8CB682AEB8A2759445C8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:4f:25:f0:b8:a5:f6:52:23:94:4c:5e:48:
b4:7d:5b:f7:3d:72:2f:a0:1c:c9:5f:38:4e:c2:49:
42:18:2c:fb:8b:8a:19:ab:86:0a:2e:35:75:1d:0e:
bb:e7:a6:4e:72:15:e2:5b:cf:30:64:4a:18:0d:73:
cd:8f:86:33:09:d6:20:08:94:94:9e:6a:80:64:31:
4d:21:74:11:fe:f3:bc:d4:bd:9f:0b:e1:86:5d:cd:
f8:ae:9e:93:74:ab:ab:e3:c4:d4:8a:01:06:ed:c6:
98:1f:79:79:6b:75:50:73:b8:ed:df:8e:12:24:92:
e3:97:c2:77:ef:4b:34:e2:4a:91:13:4a:88:b1:2c:
f0:98:d2:0f:39:7b:77:ba:b5:e4:99:5a:fc:43:22:
c5:73:29:98:81:8e:3e:0b:a9:b3:a8:66:80:0d:29:
dd:22:16:93:56:22:da:96:86:eb:fa:b2:9c:30:0a:
c8:08:f5:e9:5e:64:f7:01:5c:6b:86:ca:99:6d:05:
37:81:f9:07:8d:82:50:6e:73:47:4a:db:d5:9c:de:
51:c7:5f:fe:42:31:01:54:ab:79:ab:fe:90:56:ba:
69:63:c6:d8:47:23:ff:b7:f1:1a:bd:08:c5:76:e0:
2b:ab:c5:e7:22:f5:da:da:ca:ed:b8:cb:7a:2e:ff:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:57:70:41:66:F5:75:7E:8C:B6:82:AE:B8:A2:75:94:45:C8:DD
X509v3 Authority Key Identifier:
keyid:E2:06:33:32:53:C6:E7:3C:43:79:D5:34:0F:89:DA:62:10:2A:6E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/E206333253C6E73C4379D5340F89DA62102A6EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E206333253C6E73C4379D5340F89DA62102A6EDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3130382e302f32322d3332203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:f0:4e:10:12:73:09:c9:21:95:03:b1:3b:6b:29:de:a9:f8:
cb:dd:2c:89:3d:df:6b:9a:4c:03:8c:11:35:f2:11:2c:93:c2:
21:17:4e:2f:4a:4a:d7:dc:a7:b4:9b:31:8a:66:40:73:b8:14:
7e:38:09:76:c8:5c:23:15:21:a8:28:45:b6:40:5e:c0:fd:4b:
e6:a4:29:6f:97:ed:0f:d3:6f:1a:7a:44:8b:56:13:54:f3:40:
e7:03:4e:ff:1b:4a:c1:02:84:10:b7:6a:6c:81:fc:0d:5c:25:
f7:8b:e2:5e:33:97:81:77:4e:c7:9c:8c:32:79:80:83:67:ec:
42:f2:95:ea:84:32:c3:0e:fb:e5:03:33:b4:8b:42:b4:16:13:
e0:7d:38:0c:dd:4c:89:be:54:6c:c8:8c:bb:97:72:a7:8a:40:
93:d6:9d:e9:44:fb:17:21:9c:c2:56:95:08:cd:1b:f0:e5:70:
5c:cf:df:52:ee:11:ce:8b:aa:17:20:06:4b:28:cf:a3:77:89:
3a:6f:53:d6:b0:77:16:5d:bf:59:9a:c8:28:ed:c1:b6:43:31:
dc:38:e2:8e:2a:1d:25:b3:a2:84:16:79:a3:cb:0d:18:89:dd:
c2:c3:cd:0c:26:c8:62:ad:9c:9a:bd:66:6b:19:d4:03:bf:b4:
3c:31:fb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:40:18 2025 by rpki-client