![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa
File: 34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa (raw, json)
Hash identifier: XbpCLQ1s6roXFcWZ6ZbCavWzvIBDDMuhGKHhhTCZN9U=
Subject key identifier: 99:89:13:DE:94:44:C2:56:74:F5:52:50:EE:30:C0:D3:D5:C0:E5:3F
Certificate issuer: /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial: 4595E53D23DBE6A58003BCCE9265656AA52213EC
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa
Signing time: Sat 06 Jul 2024 01:41:17 +0000
ROA not before: Sat 06 Jul 2024 01:36:17 +0000
ROA not after: Sat 05 Jul 2025 01:41:17 +0000
asID: 267350
IP address blocks: 45.233.231.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:95:e5:3d:23:db:e6:a5:80:03:bc:ce:92:65:65:6a:a5:22:13:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Validity
Not Before: Jul 6 01:36:17 2024 GMT
Not After : Jul 5 01:41:17 2025 GMT
Subject: CN=998913DE9444C25674F55250EE30C0D3D5C0E53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:95:84:f5:44:5b:d1:5c:f3:59:90:dd:70:
d1:29:30:96:24:6c:44:65:ab:71:92:36:3f:01:fb:
54:ab:7f:be:db:83:c4:0f:80:1f:b1:b7:11:3c:3d:
fe:39:bf:3d:82:fb:f8:6a:c5:24:36:4a:89:70:e6:
b8:90:9d:36:b2:63:c8:90:71:82:5b:2d:f0:38:19:
1c:ce:81:80:33:54:7f:d2:43:74:6d:36:7e:79:93:
bc:cc:2a:80:16:04:6f:da:82:75:74:c9:2c:d2:70:
87:fc:70:be:f9:f0:96:99:1d:14:0e:0d:fd:a2:9b:
c1:56:1a:0f:42:d6:2e:3d:d1:96:3f:06:7c:e5:24:
b9:ba:d1:8e:4b:a9:72:7c:47:72:eb:2c:76:bd:dc:
e0:21:30:82:eb:85:d3:ed:49:8a:4b:d7:fe:62:12:
f9:e8:b7:93:08:c3:1b:58:43:0f:03:b6:06:35:33:
cc:84:a8:47:a9:e8:7c:42:64:43:d1:86:f5:d1:5c:
2e:91:2b:1d:3d:36:37:76:44:75:a1:fe:fc:99:d9:
45:54:07:ea:e2:dd:9d:49:2e:2b:80:15:ee:96:94:
e6:b7:88:87:c0:b0:f0:12:0e:53:9c:3a:0e:bc:66:
a9:04:5b:c4:0b:20:8f:ee:77:f0:27:63:8d:72:9b:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:13:DE:94:44:C2:56:74:F5:52:50:EE:30:C0:D3:D5:C0:E5:3F
X509v3 Authority Key Identifier:
keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.231.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a8:38:73:0d:c8:23:e6:f0:6c:7f:2b:18:7c:a3:89:29:92:
5e:85:04:07:9c:69:80:fa:80:b3:e1:2e:ea:34:1a:01:e3:91:
2b:3b:8e:3b:6d:ce:55:8e:14:79:b8:18:cb:ae:ca:dc:41:b1:
af:ab:7a:b3:90:e4:05:04:41:9f:6e:31:b0:91:4b:8c:94:55:
15:b9:c5:7e:a7:8a:37:bd:d2:48:34:8f:36:da:1b:e6:34:29:
15:2a:d6:af:da:15:5f:b2:79:5c:78:f4:d4:8f:4e:9f:d6:a6:
60:93:1b:30:4e:61:8a:c1:8c:bd:cb:4c:78:e9:3f:0a:b9:f7:
32:67:74:c9:15:39:34:7f:10:f3:e6:53:02:d6:d3:95:4d:34:
7b:e6:38:c6:a0:e2:10:6d:94:c4:1a:44:ab:56:fc:dc:14:fc:
bf:ba:fc:a7:d8:bd:90:9e:d9:e9:ed:f9:a4:66:a8:d9:9a:29:
25:27:8c:f5:88:d2:9b:59:5f:de:42:f0:b0:57:8c:29:7d:0d:
1f:1f:b6:ad:0b:9b:22:7f:1a:63:d2:c3:cf:4a:05:00:09:b8:
83:c3:48:7f:4d:3f:15:8b:78:a6:2c:45:37:44:38:3d:37:e5:
62:0d:f4:d7:2c:3a:77:aa:73:2e:3f:1a:b4:1e:6b:85:0e:59:
3c:09:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:39 2025 by rpki-client