Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
File: 34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa (raw, json)
Hash identifier: 2oQNq0bhbEmjZW/R5vOAOwdfjPqWsudpVRa0dE93Lik=
Subject key identifier: 48:1E:9F:58:A9:7C:A6:F0:59:1D:88:11:29:FB:A2:D9:46:77:D2:77
Certificate issuer: /CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Certificate serial: 385D477B35121B96AB6A0460566DC580C7CFF4AD
Authority key identifier: 01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
Signing time: Mon 28 Sep 2026 15:07:46 +0000
ROA not before: Mon 28 Sep 2026 15:02:46 +0000
ROA not after: Mon 27 Sep 2027 15:07:46 +0000
asID: 268296
IP address blocks: 45.237.244.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:5d:47:7b:35:12:1b:96:ab:6a:04:60:56:6d:c5:80:c7:cf:f4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Validity
Not Before: Sep 28 15:02:46 2026 GMT
Not After : Sep 27 15:07:46 2027 GMT
Subject: CN=481E9F58A97CA6F0591D881129FBA2D94677D277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:06:24:a4:2b:c0:c2:92:43:b6:59:8e:af:
77:bf:65:18:14:10:1f:21:b0:51:0f:c5:23:f7:2a:
b0:ec:33:49:d4:e3:fa:4b:f1:ba:d1:da:4b:98:85:
75:9f:26:b0:4a:b8:11:21:a6:1f:b5:bc:89:b0:58:
1b:da:a7:b4:c7:5a:2f:f5:dc:03:a9:ea:8c:e2:74:
5b:7f:8a:2e:b6:f3:30:7f:00:e3:2e:22:b1:91:0f:
87:46:aa:6b:5d:96:64:39:08:bb:d3:1f:30:4a:ef:
df:fe:09:b4:2f:9d:be:16:29:f2:50:97:7b:f9:27:
b9:46:d1:c8:25:11:1e:bf:57:6e:af:d9:2a:00:36:
68:5f:cc:ce:37:7a:88:6a:d1:3f:f4:ea:d0:da:0b:
ba:10:bf:49:90:ee:9a:56:35:19:f8:17:2e:cd:fa:
5b:dd:fd:e9:ca:e0:45:17:13:92:56:2b:8a:72:aa:
1f:d2:5e:e2:92:6a:e7:b7:8a:8b:15:93:1c:fd:fc:
6b:a9:e5:04:2f:91:81:59:1b:df:a8:1a:5c:05:7b:
15:c1:8a:18:12:43:c6:ef:54:96:5f:fb:bb:e6:da:
d1:a1:fe:ad:04:40:e5:47:0a:22:ca:cc:2f:84:ff:
14:c9:de:d6:0c:35:88:0c:18:0a:bf:8e:f4:ec:7c:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1E:9F:58:A9:7C:A6:F0:59:1D:88:11:29:FB:A2:D9:46:77:D2:77
X509v3 Authority Key Identifier:
keyid:01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32322d3232203d3e20323638323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.244.0/22
Signature Algorithm: sha256WithRSAEncryption
17:a7:96:59:2c:b9:86:2f:64:2c:21:f2:8e:bd:50:7d:b6:cc:
aa:ec:2d:c9:2d:f3:dd:6f:31:8c:08:fe:9f:c3:b8:3a:9c:40:
10:38:1e:59:96:f8:6f:63:c6:af:16:4a:9d:b2:c6:df:ff:f9:
01:fa:ba:be:4a:08:e0:dc:61:d7:00:16:98:f2:b7:05:33:41:
18:1f:f8:f4:16:c9:f0:16:1d:a9:0e:c1:f3:65:bc:7c:9e:11:
5b:16:74:be:ad:9f:94:47:8e:1f:0e:37:07:fd:f2:88:4f:40:
8f:de:0d:f2:e8:2c:35:b6:03:df:8e:85:60:c6:54:17:41:31:
6b:7e:f7:23:7f:5a:ba:0f:18:0b:56:cf:66:f2:3f:4a:81:13:
45:42:de:85:4a:bc:87:65:fa:46:a7:cc:6b:22:e9:ee:11:99:
39:52:60:9a:42:06:4f:7c:7b:6f:7e:7c:bd:5c:dd:71:73:5a:
94:bd:cc:00:51:d4:b6:49:b3:91:a6:5f:78:f4:e4:19:d2:d0:
e4:fa:77:c0:69:e4:6e:71:49:0f:b4:ec:9c:00:15:b9:e4:c7:
a0:50:aa:90:09:07:b1:12:47:40:7d:27:a3:ba:3e:51:7f:7b:
e7:a9:43:d0:23:94:e2:7d:5c:5d:7c:7d:eb:c8:90:a5:2d:c9:
ae:9f:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:07:58 2026 by rpki-client