Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32332d3233203d3e20323639363634.roa
File: 34352e3139312e32302e302f32332d3233203d3e20323639363634.roa (raw, json)
Hash identifier: bBFRyfwnxtaXAe8GqhookLXstjZmpMH6HMYqmmNPS4I=
Subject key identifier: 12:6B:92:16:36:34:AE:2D:B4:5C:57:D2:E9:5D:0B:D3:B1:2E:9C:B9
Certificate issuer: /CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Certificate serial: 5D2D1B9263364973D913CDE132E812E38F254924
Authority key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32332d3233203d3e20323639363634.roa
Signing time: Mon 07 Apr 2025 19:56:50 +0000
ROA not before: Mon 07 Apr 2025 19:51:50 +0000
ROA not after: Mon 06 Apr 2026 19:56:50 +0000
asID: 269664
IP address blocks: 45.191.20.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:2d:1b:92:63:36:49:73:d9:13:cd:e1:32:e8:12:e3:8f:25:49:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Validity
Not Before: Apr 7 19:51:50 2025 GMT
Not After : Apr 6 19:56:50 2026 GMT
Subject: CN=126B92163634AE2DB45C57D2E95D0BD3B12E9CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:2b:85:19:9d:0b:53:cf:1e:73:38:59:17:
84:5d:da:40:fb:23:e3:c8:5d:38:72:aa:68:9b:5c:
65:c7:b8:fc:6e:dd:df:ed:0d:46:50:d6:16:dd:0e:
e1:21:44:41:d7:8e:94:15:fa:9d:be:82:55:49:2e:
ea:82:03:91:1a:18:21:1c:68:7c:f6:19:64:74:52:
aa:48:79:15:e2:e8:10:f2:c3:e7:3f:ea:dd:2b:0e:
62:e3:60:c7:d0:ab:4d:e1:fa:b8:75:a9:bc:aa:ef:
8e:d4:59:f0:40:57:59:36:b4:c6:e4:37:05:17:27:
cb:69:9a:8f:cf:e0:0b:68:a6:71:11:cc:b3:bc:f2:
fa:26:a3:ae:81:03:71:fb:17:ac:22:d4:bf:12:5e:
67:90:ac:66:d0:75:28:fa:ae:ad:d4:49:5c:6a:a5:
c2:a3:f5:43:71:ed:00:08:3c:1a:0d:b3:9f:af:6a:
8b:5f:4a:5b:c8:09:7c:e2:e0:47:34:97:fb:fd:39:
4b:54:bc:ea:66:af:5d:3a:dd:7e:f4:3b:fc:92:18:
b5:8c:c5:9e:d6:cd:cd:c7:18:b6:4f:3d:4c:2b:20:
70:94:40:05:f0:ed:8c:42:0e:60:a5:f4:a5:65:cb:
54:6d:c9:a7:db:24:76:6a:d1:db:07:a6:22:b1:d3:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6B:92:16:36:34:AE:2D:B4:5C:57:D2:E9:5D:0B:D3:B1:2E:9C:B9
X509v3 Authority Key Identifier:
keyid:4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32332d3233203d3e20323639363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.20.0/23
Signature Algorithm: sha256WithRSAEncryption
10:1f:a5:36:0d:99:27:48:aa:e7:ad:27:cc:9c:29:36:d0:32:
2b:89:04:ab:30:35:0b:9e:7c:65:f2:e0:c0:65:24:0d:29:bb:
19:1d:76:68:3f:6c:82:91:98:c4:a2:92:81:e0:2d:78:5f:36:
0f:ca:a2:ee:c2:08:e0:cc:2c:35:59:b3:4c:9f:96:3d:48:78:
d8:80:f4:d5:00:a4:ce:d1:4a:e3:4f:1f:c7:d1:de:ef:7e:fd:
fc:9d:1c:e1:7b:22:12:9d:61:8b:1e:37:94:27:1b:7c:15:2a:
18:0f:5a:00:d8:ba:b3:90:e5:21:f9:90:a3:1b:d4:c1:3b:28:
0d:c9:ea:4b:ac:65:7c:24:de:13:b4:8d:7c:a6:5b:4c:f0:9f:
f1:91:fe:50:09:5c:7a:88:1f:13:21:be:9a:0e:f8:45:9e:f0:
70:2c:14:f9:2b:a1:95:5e:2b:44:7c:90:6d:e5:66:68:81:64:
d6:b5:57:ce:25:54:2f:94:45:59:52:09:a7:fb:c9:56:bf:07:
e5:3f:ef:de:dd:e4:bd:f3:2c:4e:18:e4:22:55:00:72:ab:bf:
b9:d1:12:0a:44:b2:08:23:64:82:65:8e:ea:e1:9a:82:25:9c:
74:60:a7:12:2b:37:17:57:b3:29:c2:5a:64:76:ad:22:b0:67:
a0:e7:c4:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXS0bkmM2SXPZE83hMugS448lSSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEYzNjYwNThFOEM4RENFOEUyNEMxQ0JCOEQ4RjhBMjgy
QTZGRTU5RDAeFw0yNTA0MDcxOTUxNTBaFw0yNjA0MDYxOTU2NTBaMDMxMTAvBgNV
BAMTKDEyNkI5MjE2MzYzNEFFMkRCNDVDNTdEMkU5NUQwQkQzQjEyRTlDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZSuFGZ0LU88eczhZF4Rd2kD7
I+PIXThyqmibXGXHuPxu3d/tDUZQ1hbdDuEhREHXjpQV+p2+glVJLuqCA5EaGCEc
aHz2GWR0UqpIeRXi6BDyw+c/6t0rDmLjYMfQq03h+rh1qbyq747UWfBAV1k2tMbk
NwUXJ8tpmo/P4AtopnERzLO88vomo66BA3H7F6wi1L8SXmeQrGbQdSj6rq3USVxq
pcKj9UNx7QAIPBoNs5+vaotfSlvICXzi4Ec0l/v9OUtUvOpmr1063X70O/ySGLWM
xZ7Wzc3HGLZPPUwrIHCUQAXw7YxCDmCl9KVly1RtyafbJHZq0dsHpiKx071zAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEmuSFjY0ri20XFfS6V0L07EunLkwHwYDVR0j
BBgwFoAUTzZgWOjI3OjiTBy7jY+KKCpv5Z0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdMWlVLN3dhVFpqQ2pTblpidndqSkdQMXlMazhpZldvaTMxSEpxajF1
NzQvMC80RjM2NjA1OEU4QzhEQ0U4RTI0QzFDQkI4RDhGOEEyODJBNkZFNTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGMzY2MDU4RThDOERDRThF
MjRDMUNCQjhEOEY4QTI4MkE2RkU1OUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3TFpVSzd3YVRaakNqU25aYnZ3akpHUDF5TGs4aWZXb2kzMUhKcWoxdTc0LzAv
MzQzNTJlMzEzOTMxMmUzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLb8UMA0GCSqGSIb3DQEBCwUAA4IBAQAQH6U2DZkn
SKrnrSfMnCk20DIriQSrMDULnnxl8uDAZSQNKbsZHXZoP2yCkZjEopKB4C14XzYP
yqLuwgjgzCw1WbNMn5Y9SHjYgPTVAKTO0UrjTx/H0d7vfv38nRzheyISnWGLHjeU
Jxt8FSoYD1oA2LqzkOUh+ZCjG9TBOygNyepLrGV8JN4TtI18pltM8J/xkf5QCVx6
iB8TIb6aDvhFnvBwLBT5K6GVXitEfJBt5WZogWTWtVfOJVQvlEVZUgmn+8lWvwfl
P+/e3eS98yxOGOQiVQByq7+50RIKRLIII2SCZY7q4ZqCJZx0YKcSKzcXV7Mpwlpk
dq0isGeg58S2
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:11:58 2025 by rpki-client