Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa
File: 34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa (raw, json)
Hash identifier: WKC1ExnMYtvma951C8FedUCa5sIKuwKzFY+vVbAREmI=
Subject key identifier: 61:A5:2C:6E:A1:3F:70:7B:0C:6F:D4:22:93:12:E5:54:AE:E6:42:0C
Certificate issuer: /CN=E2518D35F2E906725804C9906EB7F7CA9E723225
Certificate serial: 487FCAAEA2803C9E0770A3645039AB0CB6DEAE27
Authority key identifier: E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa
Signing time: Wed 24 Dec 2025 20:46:22 +0000
ROA not before: Wed 24 Dec 2025 20:41:22 +0000
ROA not after: Wed 23 Dec 2026 20:46:22 +0000
asID: 268684
IP address blocks: 45.165.172.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7f:ca:ae:a2:80:3c:9e:07:70:a3:64:50:39:ab:0c:b6:de:ae:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2518D35F2E906725804C9906EB7F7CA9E723225
Validity
Not Before: Dec 24 20:41:22 2025 GMT
Not After : Dec 23 20:46:22 2026 GMT
Subject: CN=61A52C6EA13F707B0C6FD4229312E554AEE6420C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:b3:8c:f9:e3:4a:8a:cb:e2:84:93:3b:65:
51:0a:2a:2a:0e:a9:f9:bd:e6:1d:48:48:fe:5d:82:
03:7d:bd:b4:fb:77:d7:08:5c:32:00:f9:c2:cc:c0:
6a:28:8c:f5:42:a9:62:3a:65:40:be:18:b4:13:19:
fb:82:14:73:34:3f:87:c2:99:81:9e:24:f0:9b:60:
b3:70:bf:89:59:c6:d1:11:ec:19:80:00:c2:7f:71:
b1:94:de:3c:df:d6:4d:4b:b6:2a:b0:f8:54:62:dd:
a3:1a:9e:e1:00:2c:bc:c5:2d:93:86:f6:98:2a:f6:
ec:d9:b3:a4:44:04:d5:60:e6:d4:6d:c3:93:86:3e:
81:ba:2c:3a:2a:51:e0:71:cd:c4:64:bd:3a:64:7f:
1f:db:39:de:35:a1:9b:bb:8f:87:cb:9f:13:4f:4e:
c0:f4:45:94:07:70:5e:d7:93:81:28:74:4e:e0:55:
63:e2:42:f6:60:fa:39:49:5d:0d:92:a8:e4:96:af:
83:64:41:ec:32:20:36:83:01:c0:c0:b7:9d:29:f6:
ea:0e:df:70:63:a3:96:d6:00:3c:3c:17:d3:be:ee:
2e:31:02:99:69:5b:4b:3f:26:a4:45:41:50:21:60:
c0:55:ff:80:12:23:06:55:64:11:22:c6:f0:9c:4c:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A5:2C:6E:A1:3F:70:7B:0C:6F:D4:22:93:12:E5:54:AE:E6:42:0C
X509v3 Authority Key Identifier:
keyid:E2:51:8D:35:F2:E9:06:72:58:04:C9:90:6E:B7:F7:CA:9E:72:32:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/E2518D35F2E906725804C9906EB7F7CA9E723225.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2518D35F2E906725804C9906EB7F7CA9E723225.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/34352e3136352e3137322e302f32342d3234203d3e20323638363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.172.0/24
Signature Algorithm: sha256WithRSAEncryption
31:aa:dd:94:46:d4:2f:01:67:b8:c8:72:51:3a:22:38:b9:1d:
c3:5e:4e:7f:11:6a:94:cb:1d:4c:8f:66:ad:86:f4:dd:cb:b3:
f1:da:c8:bf:d5:60:0d:f0:3d:a3:de:d1:31:02:76:34:b9:40:
cc:31:63:7a:b9:7c:56:19:fc:39:81:c5:e0:5c:a5:a2:0d:d1:
72:4a:91:bc:27:d1:21:32:4f:6c:42:de:dc:bd:43:18:27:a9:
26:fb:81:1e:2e:34:6a:f1:e4:7d:b3:97:9f:6c:4a:2a:ae:98:
7d:94:4a:59:e0:2e:69:3c:4d:bc:76:f1:cd:5d:fe:c7:4e:2f:
92:60:f0:67:d4:a7:7b:99:fb:71:fc:81:83:6e:81:cb:a9:24:
ef:e8:d4:c0:e5:d1:54:14:fc:89:9e:4d:99:f3:a5:4a:87:31:
ff:11:83:0d:85:2d:2b:70:a9:8d:2e:81:75:bc:14:29:aa:62:
28:01:0b:0d:38:e6:e4:70:fb:5b:7b:a0:dc:78:c3:b4:a0:fd:
0a:83:f5:a9:bb:81:4c:62:af:15:60:91:68:32:0d:b3:b4:bb:
88:bf:1e:6b:71:5d:7e:e6:ec:11:82:dc:fc:b8:f3:e3:58:c8:
bd:37:1a:51:a0:6d:77:8f:ae:c7:5e:4a:04:b3:e0:24:8f:6e:
53:ba:ff:65
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSH/KrqKAPJ4HcKNkUDmrDLbericwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI1MThEMzVGMkU5MDY3MjU4MDRDOTkwNkVCN0Y3Q0E5
RTcyMzIyNTAeFw0yNTEyMjQyMDQxMjJaFw0yNjEyMjMyMDQ2MjJaMDMxMTAvBgNV
BAMTKDYxQTUyQzZFQTEzRjcwN0IwQzZGRDQyMjkzMTJFNTU0QUVFNjQyMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYhbOM+eNKisvihJM7ZVEKKioO
qfm95h1ISP5dggN9vbT7d9cIXDIA+cLMwGoojPVCqWI6ZUC+GLQTGfuCFHM0P4fC
mYGeJPCbYLNwv4lZxtER7BmAAMJ/cbGU3jzf1k1Ltiqw+FRi3aManuEALLzFLZOG
9pgq9uzZs6REBNVg5tRtw5OGPoG6LDoqUeBxzcRkvTpkfx/bOd41oZu7j4fLnxNP
TsD0RZQHcF7Xk4EodE7gVWPiQvZg+jlJXQ2SqOSWr4NkQewyIDaDAcDAt50p9uoO
33Bjo5bWADw8F9O+7i4xAplpW0s/JqRFQVAhYMBV/4ASIwZVZBEixvCcTIC5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYaUsbqE/cHsMb9QikxLlVK7mQgwwHwYDVR0j
BBgwFoAU4lGNNfLpBnJYBMmQbrf3yp5yMiUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZMYXU5eEdhM3hNRU1Od0pQQnRjVmRmeDd5QzE2TGV3Um1aNk5TWUhS
R1ovMC9FMjUxOEQzNUYyRTkwNjcyNTgwNEM5OTA2RUI3RjdDQTlFNzIzMjI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyNTE4RDM1RjJFOTA2NzI1
ODA0Qzk5MDZFQjdGN0NBOUU3MjMyMjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhmTGF1OXhHYTN4TUVNTndKUEJ0Y1ZkZng3eUMxNkxld1JtWjZOU1lIUkdaLzAv
MzQzNTJlMzEzNjM1MmUzMTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpawwDQYJKoZIhvcNAQELBQADggEBADGq3ZRG
1C8BZ7jIclE6Iji5HcNeTn8RapTLHUyPZq2G9N3Ls/HayL/VYA3wPaPe0TECdjS5
QMwxY3q5fFYZ/DmBxeBcpaIN0XJKkbwn0SEyT2xC3ty9QxgnqSb7gR4uNGrx5H2z
l59sSiqumH2USlngLmk8Tbx28c1d/sdOL5Jg8GfUp3uZ+3H8gYNugcupJO/o1MDl
0VQU/ImeTZnzpUqHMf8Rgw2FLStwqY0ugXW8FCmqYigBCw045uRw+1t7oNx4w7Sg
/QqD9am7gUxirxVgkWgyDbO0u4i/HmtxXX7m7BGC3Py48+NYyL03GlGgbXePrsde
SgSz4CSPblO6/2U=
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:06:08 2026 by rpki-client