Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3137342e3134302e302f32322d3234203d3e20323633303437.roa
File: 34352e3137342e3134302e302f32322d3234203d3e20323633303437.roa (raw, json)
Hash identifier: fsXg7CSzcjQlt0tc6dpPvsXHabb+Etqrtuc7Q+fx69A=
Subject key identifier: B4:10:9C:0C:43:0A:DA:D0:50:27:2C:58:B6:0D:37:90:DB:46:DF:0C
Certificate issuer: /CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Certificate serial: 5DF7933BBC7FE7F6532F574AB83F0A2442C5B512
Authority key identifier: 99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3137342e3134302e302f32322d3234203d3e20323633303437.roa
Signing time: Fri 24 Oct 2025 16:24:16 +0000
ROA not before: Fri 24 Oct 2025 16:19:16 +0000
ROA not after: Fri 23 Oct 2026 16:24:16 +0000
asID: 263047
IP address blocks: 45.174.140.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f7:93:3b:bc:7f:e7:f6:53:2f:57:4a:b8:3f:0a:24:42:c5:b5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Validity
Not Before: Oct 24 16:19:16 2025 GMT
Not After : Oct 23 16:24:16 2026 GMT
Subject: CN=B4109C0C430ADAD050272C58B60D3790DB46DF0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:89:63:c9:3c:db:8f:6b:3c:0d:10:76:07:
5c:b8:96:27:74:08:a3:f0:51:bb:49:a3:7c:5e:34:
2f:f1:39:f1:34:ef:e8:2c:90:a8:11:fa:bc:15:81:
4b:46:ca:d1:9d:7a:69:22:ba:d3:07:2d:3f:23:d4:
a1:f6:2f:49:e2:ed:b2:77:9d:20:01:d8:28:99:fe:
f1:51:f3:8f:9e:43:18:6c:f2:f3:89:02:65:18:31:
f9:6b:ca:88:4f:63:58:90:93:c9:8e:12:48:98:a9:
ee:e3:a5:79:d0:69:9c:75:29:73:a3:57:bf:37:03:
3d:1b:9f:13:34:9d:e0:b1:7c:90:a3:24:89:92:7d:
3d:61:af:79:fd:b9:83:ce:d2:32:a4:0a:c6:b3:d3:
9c:a3:90:8c:15:6d:1e:a9:ff:77:f4:e5:ea:9d:0d:
e0:03:11:11:cc:6e:d1:e9:c3:75:0e:05:38:a7:dc:
38:90:27:dc:99:12:e5:0c:d7:53:c2:2d:f9:05:8b:
36:38:73:8b:ae:70:97:f6:16:cd:5b:f2:f8:6b:2b:
7b:9d:6b:bc:a6:1f:2e:05:54:d2:2a:10:98:15:ee:
8b:4c:ac:8f:b2:37:f5:f4:bf:d0:4c:84:9b:dd:e8:
da:94:a7:a4:66:bc:67:15:b7:ac:97:7c:0f:b6:ea:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:9C:0C:43:0A:DA:D0:50:27:2C:58:B6:0D:37:90:DB:46:DF:0C
X509v3 Authority Key Identifier:
keyid:99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3137342e3134302e302f32322d3234203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:62:63:c0:7e:6c:9b:a4:41:60:fe:ea:3e:ec:c1:63:76:d6:
f1:4c:6d:00:51:97:33:9d:5f:3c:ac:98:ac:90:5d:1e:78:f6:
f0:91:f3:e9:65:bd:ed:07:ed:f1:69:35:cb:2c:7a:5b:a0:b7:
12:56:7b:e0:cb:48:db:92:b8:4b:14:b0:11:89:9a:83:08:cc:
bd:28:ea:cc:75:27:5f:e0:21:b2:2a:ef:90:27:9f:93:59:d7:
ec:7b:c6:41:d6:d3:0d:9e:1d:a3:bf:3f:4f:37:88:61:93:af:
81:0d:b1:b8:16:b5:3e:39:f6:11:07:b2:bc:87:c0:8b:9d:e5:
da:a0:de:ea:96:a2:2e:18:41:69:7d:48:c7:53:57:20:5e:ed:
2c:46:e2:ee:9f:ed:f5:02:51:dd:4e:5e:13:61:b2:fd:52:ec:
ac:16:9a:13:62:33:fa:a2:4c:c7:3c:66:1f:7b:56:ea:6c:a6:
c8:fb:df:b5:95:f8:6c:ca:aa:c7:14:c1:b1:38:b1:ce:9e:3a:
45:11:4e:ef:34:59:d5:a3:e8:eb:c6:ee:98:3d:2e:61:32:7d:
1f:b6:9d:21:57:e9:27:cc:aa:00:d5:00:51:c1:9e:28:ec:94:
f7:bf:ab:f8:e5:4e:49:3a:7b:80:ae:28:cf:3c:23:d6:77:64:
31:d0:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:56:28 2025 by rpki-client