Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32342d3332203d3e20323638353738.roa
File: 34352e3136332e3137362e302f32342d3332203d3e20323638353738.roa (raw, json)
Hash identifier: XnKlTOzofcq7tVnxwDCpdl+kUFN3R5ITmDVVuer6dBw=
Subject key identifier: 8F:E7:4F:E4:00:41:40:CC:10:6F:D2:B0:5D:DF:72:C0:2D:56:C3:DE
Certificate issuer: /CN=BEB27A277D8B16F1123CEC9812B7FC669378A517
Certificate serial: 04373D3C68F649DDC2ABD60F9F1759664855A3E0
Authority key identifier: BE:B2:7A:27:7D:8B:16:F1:12:3C:EC:98:12:B7:FC:66:93:78:A5:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEB27A277D8B16F1123CEC9812B7FC669378A517.cer
Subject info access: rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32342d3332203d3e20323638353738.roa
Signing time: Fri 23 May 2025 12:32:05 +0000
ROA not before: Fri 23 May 2025 12:27:05 +0000
ROA not after: Fri 22 May 2026 12:32:05 +0000
asID: 268578
IP address blocks: 45.163.176.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:37:3d:3c:68:f6:49:dd:c2:ab:d6:0f:9f:17:59:66:48:55:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEB27A277D8B16F1123CEC9812B7FC669378A517
Validity
Not Before: May 23 12:27:05 2025 GMT
Not After : May 22 12:32:05 2026 GMT
Subject: CN=8FE74FE4004140CC106FD2B05DDF72C02D56C3DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:5e:04:c7:be:e4:b6:39:2c:8a:b2:42:91:
cb:25:0e:78:e2:e3:3a:5f:7a:64:06:c4:5e:c1:a7:
95:4b:66:c9:bf:db:63:16:15:8b:b4:95:9c:48:d8:
ce:86:54:ee:e1:a9:fd:39:1a:09:41:48:4c:d7:5a:
2c:bc:c5:35:47:a8:85:95:43:fa:2d:a3:29:e5:af:
f6:7d:c3:37:65:1b:57:e2:ba:b8:97:b0:bb:ef:7a:
40:d5:59:62:76:1f:5b:db:9f:e4:af:4a:36:10:1a:
51:e2:63:bf:23:92:a9:4b:4f:f7:c2:46:9d:f5:0f:
ac:43:1b:e2:d4:19:d1:12:d2:0c:86:f7:eb:98:0a:
39:10:9f:a8:b1:d4:90:c8:7d:7c:71:86:fd:64:b3:
5f:6f:a6:af:dd:b4:1b:11:1d:81:54:c4:54:39:d8:
7e:be:49:da:1d:4f:2a:80:15:f8:44:2f:2e:40:a1:
a4:23:85:75:31:4a:ea:d1:b7:fa:6a:d4:9a:af:fe:
c4:0f:35:35:97:04:24:54:9c:5a:80:2e:29:db:be:
74:6e:d9:f7:9e:4f:f3:e1:46:13:16:65:84:01:db:
12:01:56:d7:44:8f:f3:28:fe:ad:03:60:a1:81:f7:
1e:b5:3c:4e:7f:c3:45:f2:8a:c6:71:8a:34:c1:ac:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E7:4F:E4:00:41:40:CC:10:6F:D2:B0:5D:DF:72:C0:2D:56:C3:DE
X509v3 Authority Key Identifier:
keyid:BE:B2:7A:27:7D:8B:16:F1:12:3C:EC:98:12:B7:FC:66:93:78:A5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/BEB27A277D8B16F1123CEC9812B7FC669378A517.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEB27A277D8B16F1123CEC9812B7FC669378A517.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137362e302f32342d3332203d3e20323638353738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.176.0/24
Signature Algorithm: sha256WithRSAEncryption
14:19:09:38:d4:ed:b7:29:e7:b5:7c:53:82:2d:ad:84:ac:7d:
38:c6:a2:01:d9:c1:6f:47:80:55:c2:fc:69:d9:22:e6:cb:cf:
4a:54:2d:f7:99:b3:12:eb:93:ad:8b:68:a5:62:f3:ab:fd:a6:
94:09:38:a8:66:f0:fb:de:d4:b8:fa:c4:b0:aa:c1:79:81:5a:
3e:6b:61:0e:0d:2c:d0:e4:cf:9c:70:bc:c5:12:95:f2:24:dc:
bc:e7:80:a2:69:64:7f:2f:a9:eb:e3:21:b3:74:33:e8:c8:01:
be:9d:78:38:04:29:25:57:d0:eb:c5:89:47:0c:ad:9b:c8:f2:
48:38:2d:7c:26:51:a2:a6:74:e0:72:d0:7c:f5:e3:d8:9b:e9:
9e:23:57:f8:e3:d1:a8:81:c3:05:1e:94:29:39:59:09:b2:c3:
d2:64:79:f2:e2:7c:c7:e6:f7:9d:9e:03:81:22:1d:96:05:a1:
2d:0e:1c:ee:ff:8b:4d:9a:43:dc:31:42:50:ec:7b:5f:c9:27:
b4:64:25:10:c6:e6:c8:2b:9f:7d:31:8b:a2:63:31:bb:57:39:
ce:6e:30:ad:2e:9c:12:7c:be:a7:3a:41:7a:1f:9e:63:da:a2:
02:f1:41:2e:54:b5:0a:ad:cd:b0:23:c4:fe:d9:44:f9:14:dd:
61:4e:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:07:56 2025 by rpki-client