Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137382e302f32342d3332203d3e20323638353738.roa
File: 34352e3136332e3137382e302f32342d3332203d3e20323638353738.roa (raw, json)
Hash identifier: RPsGexXsyFKsGSX2wxfoVKmGylylZU4KVm00HiXPyOA=
Subject key identifier: 8F:60:A7:B7:67:8E:13:D4:5E:A9:7C:CD:9D:53:64:8B:E5:C6:91:2F
Certificate issuer: /CN=BEB27A277D8B16F1123CEC9812B7FC669378A517
Certificate serial: 1DD991DCC7FA8231C2EF31995A0C054A0D17E946
Authority key identifier: BE:B2:7A:27:7D:8B:16:F1:12:3C:EC:98:12:B7:FC:66:93:78:A5:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEB27A277D8B16F1123CEC9812B7FC669378A517.cer
Subject info access: rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137382e302f32342d3332203d3e20323638353738.roa
Signing time: Fri 23 May 2025 12:32:17 +0000
ROA not before: Fri 23 May 2025 12:27:17 +0000
ROA not after: Fri 22 May 2026 12:32:17 +0000
asID: 268578
IP address blocks: 45.163.178.0/24 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d9:91:dc:c7:fa:82:31:c2:ef:31:99:5a:0c:05:4a:0d:17:e9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEB27A277D8B16F1123CEC9812B7FC669378A517
Validity
Not Before: May 23 12:27:17 2025 GMT
Not After : May 22 12:32:17 2026 GMT
Subject: CN=8F60A7B7678E13D45EA97CCD9D53648BE5C6912F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:90:6f:12:a6:a1:64:a3:a1:64:35:0b:fd:
98:d6:7c:ec:5d:68:3f:52:86:8f:09:2b:96:aa:2d:
1e:b0:26:bb:1f:3b:76:70:70:42:8e:4b:47:d8:d4:
f9:32:de:8c:c1:09:ed:56:3d:57:35:ec:ee:1b:0a:
1b:51:01:78:72:1a:fd:30:01:fc:bc:ca:95:91:17:
03:62:41:60:02:2d:01:eb:e3:49:85:65:b1:1a:29:
10:b2:c6:3a:3b:21:fc:3f:d9:4f:9b:ac:da:c1:a3:
d3:70:0e:f1:8d:95:d4:cd:4a:f6:b2:85:56:b6:46:
2f:be:dc:0a:ad:68:47:5a:a6:46:4d:f9:bf:2c:16:
41:4c:d8:df:1b:1d:38:22:58:e8:dc:cc:48:12:e4:
32:ef:ab:48:cc:b5:26:f4:ee:09:5d:d6:46:64:56:
c3:74:f3:df:69:59:16:5d:7d:00:05:c2:f4:d2:44:
cd:89:b9:42:31:e1:3f:07:24:b3:82:43:57:5f:b0:
b3:ec:2a:e4:1a:55:1e:78:38:00:12:ad:ff:09:3e:
31:f4:8e:b0:3f:66:ab:60:3d:4a:fb:b9:c6:1d:17:
55:76:ca:9d:22:a3:ef:5e:4e:77:86:a0:1e:e8:8b:
d4:f8:af:60:b8:f1:96:f4:f6:e5:f4:30:9e:67:3c:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:60:A7:B7:67:8E:13:D4:5E:A9:7C:CD:9D:53:64:8B:E5:C6:91:2F
X509v3 Authority Key Identifier:
keyid:BE:B2:7A:27:7D:8B:16:F1:12:3C:EC:98:12:B7:FC:66:93:78:A5:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/BEB27A277D8B16F1123CEC9812B7FC669378A517.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEB27A277D8B16F1123CEC9812B7FC669378A517.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137382e302f32342d3332203d3e20323638353738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.178.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:c8:dc:af:f2:dd:77:dd:83:71:53:eb:87:d1:2d:40:02:2f:
f2:b4:e5:da:0a:f5:4f:56:57:da:2a:48:d3:4e:df:4c:01:bb:
9c:7c:91:f4:b6:81:62:56:d5:26:5c:f9:da:ed:02:18:41:c1:
9c:c3:c0:2f:cc:48:a8:49:2e:55:90:dd:24:21:68:c6:6b:8c:
6a:5b:ec:fc:cc:c4:94:59:b5:4b:93:dc:39:39:2c:04:30:3a:
1f:55:f4:e0:6f:19:62:df:2f:06:fc:7f:99:9a:84:8d:2d:a7:
84:a6:a6:1e:53:5e:13:b9:15:4c:1f:34:01:3e:65:a4:87:a7:
8f:89:7f:60:a2:2b:c8:1f:04:ce:4d:df:02:89:48:7b:9d:e1:
13:f2:f0:76:2b:3f:37:cc:ef:e3:f9:9d:62:c2:bc:22:4a:31:
6d:17:dd:68:3c:99:65:2c:d7:d1:d9:61:6a:70:69:dc:f1:92:
3a:9f:92:5e:15:ed:58:ae:1b:db:89:07:8f:e7:28:7c:3d:e2:
2c:df:41:49:72:1d:f6:97:ea:9e:6c:71:b3:aa:76:04:d0:77:
d0:47:fd:f1:2d:b3:41:2d:64:da:73:21:41:cc:1a:21:f5:f1:
73:64:29:f6:e5:12:7d:bf:b5:b6:38:cb:4c:e2:2b:af:c5:f8:
85:77:23:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:09:40 2025 by rpki-client