Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa
File: 34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa (raw, json)
Hash identifier: trkZ3nPBcmPAxkhlUTE3yzgqmAcDQpxSrf3TfDMx3w0=
Subject key identifier: 7F:3F:C2:D5:A7:81:A4:C4:EA:53:F7:6C:13:EB:56:E0:E2:32:08:03
Certificate issuer: /CN=FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885
Certificate serial: 1B8915C73198494666F1AB069FB56FC5C67DEDE3
Authority key identifier: FF:D6:8C:C4:BE:F4:9F:85:D6:EE:0A:8F:DD:D4:A7:70:AE:D8:18:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa
Signing time: Sun 25 May 2025 03:58:03 +0000
ROA not before: Sun 25 May 2025 03:53:03 +0000
ROA not after: Sun 24 May 2026 03:58:03 +0000
asID: 268869
IP address blocks: 45.174.220.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:89:15:c7:31:98:49:46:66:f1:ab:06:9f:b5:6f:c5:c6:7d:ed:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885
Validity
Not Before: May 25 03:53:03 2025 GMT
Not After : May 24 03:58:03 2026 GMT
Subject: CN=7F3FC2D5A781A4C4EA53F76C13EB56E0E2320803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:cf:6d:38:01:67:79:59:94:1a:9b:69:14:
ef:a2:93:29:95:fb:bd:31:47:51:57:68:ec:c0:62:
a3:e4:60:4a:da:ac:04:1a:8b:a9:6a:d3:08:22:4f:
84:06:a7:5e:97:43:c8:c0:8b:6f:9c:01:58:12:64:
52:60:42:d8:e1:96:81:7a:1b:db:f0:3f:28:e2:a1:
5b:34:41:21:f3:4e:0e:c9:53:43:30:08:96:e4:b7:
47:8b:c9:6f:d4:f7:bd:f8:e7:6f:ec:73:7d:0f:af:
63:36:34:a0:7b:6b:07:72:45:ee:92:dd:ff:ca:e2:
a6:ed:5d:db:b0:8c:5e:5c:f1:85:a3:cd:3c:ea:40:
77:11:39:66:73:c3:c0:9e:9f:da:5f:c5:11:22:e2:
f4:fe:de:b9:ff:09:63:8b:1b:b0:ac:da:2a:64:0f:
79:3f:c9:7b:03:2f:c2:57:92:aa:f0:20:a7:c9:2f:
a3:81:a9:35:85:a9:22:3d:20:d2:d3:bc:da:07:9d:
36:23:f8:60:3b:09:96:b0:b3:30:ba:01:cd:42:5c:
81:ec:12:54:1c:2a:b7:09:15:d8:89:dc:3b:71:b0:
09:f4:44:a7:50:fb:56:30:31:d7:bb:8a:45:4f:06:
8c:4b:93:25:a8:cb:f6:e1:3e:8d:2e:ad:48:1a:24:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3F:C2:D5:A7:81:A4:C4:EA:53:F7:6C:13:EB:56:E0:E2:32:08:03
X509v3 Authority Key Identifier:
keyid:FF:D6:8C:C4:BE:F4:9F:85:D6:EE:0A:8F:DD:D4:A7:70:AE:D8:18:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/34352e3137342e3232302e302f32322d3234203d3e20323638383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.220.0/22
Signature Algorithm: sha256WithRSAEncryption
13:be:dd:2c:8c:58:1a:1a:21:86:86:d1:c1:d1:ca:c8:b9:47:
8a:5d:df:b1:ec:9c:02:1a:9e:4a:0e:41:2b:da:bb:cb:37:c6:
99:2f:c3:bf:78:31:52:67:a2:75:bb:86:8b:aa:a8:dc:0c:d8:
fe:1a:5d:03:f7:0a:cf:76:be:4c:eb:ef:23:c9:35:b5:be:d4:
42:44:23:91:40:2d:9f:0e:e3:46:cb:b3:02:f3:ee:68:3f:dc:
5c:d4:d0:52:de:2f:86:2f:b5:f7:60:b8:ee:9a:a2:33:00:39:
0e:eb:2b:b0:dd:02:82:c0:16:8a:16:80:bb:3f:5c:90:1b:8b:
e4:97:b2:79:e9:85:cc:a1:da:46:1f:c7:0e:0f:a8:f7:8d:0b:
2b:5e:79:14:57:aa:cb:eb:0c:24:a9:3d:90:fa:bd:37:dc:4a:
16:71:da:a4:81:24:80:84:2f:53:ad:0c:17:c4:b0:68:04:40:
f2:36:f9:7d:80:5f:cb:a5:3c:3d:df:b1:03:6e:66:1f:cf:48:
ef:73:4f:11:de:84:8f:4a:ce:3d:48:dd:56:c8:80:49:21:f0:
47:0f:f8:b3:e9:8e:ac:e5:d8:50:67:01:4b:d2:b5:d9:ad:b4:
37:9e:3c:d7:6d:30:b6:d9:c5:4f:1f:74:33:21:17:47:65:b6:
ca:0c:0f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:36 2025 by rpki-client