Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa
File: 34352e3137322e34342e302f32322d3332203d3e20323638373432.roa (raw, json)
Hash identifier: zWuECYADm9G+eAkg1X/96UEhSnc92ChJ0/G7e1EbA04=
Subject key identifier: BE:F1:6D:BB:C9:DE:D8:FF:FA:16:78:5F:03:15:E7:C1:7E:3E:03:8E
Certificate issuer: /CN=F753F4559D7D422450AFB88DE56CC42BC873A465
Certificate serial: 5FA157B57DBFE453C037742531919F2D57E998DE
Authority key identifier: F7:53:F4:55:9D:7D:42:24:50:AF:B8:8D:E5:6C:C4:2B:C8:73:A4:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa
Signing time: Thu 06 Mar 2025 10:22:11 +0000
ROA not before: Thu 06 Mar 2025 10:17:11 +0000
ROA not after: Thu 05 Mar 2026 10:22:11 +0000
asID: 268742
IP address blocks: 45.172.44.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a1:57:b5:7d:bf:e4:53:c0:37:74:25:31:91:9f:2d:57:e9:98:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F753F4559D7D422450AFB88DE56CC42BC873A465
Validity
Not Before: Mar 6 10:17:11 2025 GMT
Not After : Mar 5 10:22:11 2026 GMT
Subject: CN=BEF16DBBC9DED8FFFA16785F0315E7C17E3E038E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:20:73:30:2f:b9:fa:bd:55:33:f9:25:6f:
f9:c4:8e:d8:6b:55:1f:da:84:fc:b8:9c:35:7e:12:
ee:19:39:cb:1e:89:7f:d4:5a:89:ee:ab:88:e5:83:
ee:fd:ce:77:e7:47:f3:52:60:3e:28:97:e5:7e:f5:
c3:9a:d4:4a:57:9d:41:79:37:3c:c9:41:0a:69:47:
5b:db:08:f8:c7:47:53:a9:54:16:1e:3d:a9:d4:0a:
5f:36:01:e9:f5:5c:96:ee:46:0a:65:56:cb:b2:6f:
5d:89:2c:60:95:d8:63:37:04:ac:00:e7:8a:b6:5c:
fa:0b:47:11:af:d4:7d:b2:be:87:63:48:ae:e7:54:
08:1d:35:d9:4b:75:d0:91:94:79:d0:65:4d:2b:a3:
99:9d:63:30:17:85:45:70:b6:d3:4c:eb:76:02:c0:
6a:db:fd:12:03:ad:af:3d:53:e1:be:c9:8e:b0:2c:
89:19:49:e7:ca:94:05:92:c9:1d:b3:da:80:3c:5e:
28:6d:98:c2:b7:4f:94:e4:f7:ab:a0:cf:0f:72:de:
8b:67:0c:ca:07:eb:93:e1:76:b2:ee:9e:3c:41:51:
b9:5b:c7:c3:f6:2c:bf:b0:62:c8:db:98:42:63:b3:
61:d6:49:4d:c3:67:86:26:c0:2a:25:f8:0b:d2:4f:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F1:6D:BB:C9:DE:D8:FF:FA:16:78:5F:03:15:E7:C1:7E:3E:03:8E
X509v3 Authority Key Identifier:
keyid:F7:53:F4:55:9D:7D:42:24:50:AF:B8:8D:E5:6C:C4:2B:C8:73:A4:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/34352e3137322e34342e302f32322d3332203d3e20323638373432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.44.0/22
Signature Algorithm: sha256WithRSAEncryption
90:3a:58:36:9f:33:2b:0c:83:6f:fa:75:39:d8:aa:28:b0:a8:
6d:8b:a0:8a:51:95:ad:cd:52:89:70:37:2f:d4:90:9c:ee:8e:
cf:85:a7:20:e6:58:25:50:f7:94:09:c7:ba:bf:d5:c9:d0:40:
0b:3d:d2:da:c7:54:75:e3:c4:90:80:5c:56:05:bb:50:ff:b8:
08:61:46:50:13:b1:c5:f8:da:3c:1f:c8:2e:14:90:bc:5f:17:
5f:79:cd:db:08:00:bf:ed:1e:63:d1:f6:3f:48:ca:aa:9d:9e:
4a:41:cd:a6:8c:fe:60:c7:4d:9d:b9:d5:a2:e4:6b:75:dc:23:
d7:f7:9e:28:0a:d3:11:76:69:67:0b:46:72:e4:3b:69:dc:64:
b5:1e:b6:9e:1e:88:9a:ac:3f:22:3f:51:2a:72:84:c7:58:df:
70:ea:43:bb:62:e6:2e:68:aa:45:10:9d:87:89:bb:30:72:ef:
b4:bb:1f:f6:04:54:0f:21:be:01:34:c8:70:ea:1d:c8:cc:99:
e6:f6:49:8f:b5:9b:28:1d:d5:95:ce:ce:2f:2b:c2:e1:f5:84:
4d:f4:4a:a9:5d:5b:8e:e7:f4:2f:6f:1f:59:66:00:2d:11:e1:
98:78:6d:b3:b8:4d:40:24:ff:f5:4d:10:7d:e0:41:66:95:e5:
65:9a:e7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:27:23 2025 by rpki-client