Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
File: 34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa (raw, json)
Hash identifier: mhs/Ed45mpqkp6OgwkXMQU0tmr2i2dXIjqhXQgauvS4=
Subject key identifier: 35:92:47:49:B4:E7:95:36:BA:84:D5:78:15:7C:7F:7F:30:17:01:D7
Certificate issuer: /CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Certificate serial: 1BBCC51834B0989AE71176B55A53A2D9EBAD6C37
Authority key identifier: 01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
Signing time: Mon 28 Sep 2026 15:07:45 +0000
ROA not before: Mon 28 Sep 2026 15:02:45 +0000
ROA not after: Mon 27 Sep 2027 15:07:45 +0000
asID: 268296
IP address blocks: 45.237.244.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bc:c5:18:34:b0:98:9a:e7:11:76:b5:5a:53:a2:d9:eb:ad:6c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Validity
Not Before: Sep 28 15:02:45 2026 GMT
Not After : Sep 27 15:07:45 2027 GMT
Subject: CN=35924749B4E79536BA84D578157C7F7F301701D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:c4:9f:c6:f1:f0:ef:c9:0d:cd:01:a1:42:
7a:68:bd:26:4d:30:6c:7b:32:d4:ce:b3:87:70:31:
f1:44:3e:98:55:76:01:96:75:06:06:54:e6:af:4d:
75:69:67:a5:fd:07:55:c0:9a:57:85:7e:d9:e0:cc:
a8:23:a0:77:aa:34:f2:7d:ca:ed:2c:b1:47:da:d0:
42:d2:f1:6e:4e:83:5a:f1:02:57:7d:b6:cd:6d:8a:
e8:16:40:79:d8:df:4a:9c:43:06:9d:fe:60:2d:fd:
b7:ec:95:f4:c7:f2:d6:ee:81:66:db:35:c9:c5:11:
7c:d9:7a:91:29:67:7c:8d:d5:38:d1:4e:31:7c:61:
4a:ca:d4:b1:ca:7b:6b:8b:69:61:5b:a5:c7:4f:d0:
3e:f2:83:d2:bd:40:b6:0a:26:3d:68:7b:37:3c:5e:
b2:a6:07:ac:8b:5a:5e:c6:c3:86:47:07:e2:c0:a7:
79:e8:8d:d4:8e:3b:07:0e:6a:2f:46:d7:e8:6c:98:
8e:53:1d:6e:ba:46:df:3b:fa:f6:c1:04:a7:48:07:
07:b8:5e:07:c0:57:83:c6:e4:e9:25:1a:11:87:48:
35:ee:ee:21:08:18:fe:c6:31:9e:6d:73:b8:bf:6c:
6b:d2:1c:3e:a1:d3:d7:75:a1:f6:3a:ba:1a:b7:f4:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:92:47:49:B4:E7:95:36:BA:84:D5:78:15:7C:7F:7F:30:17:01:D7
X509v3 Authority Key Identifier:
keyid:01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234342e302f32332d3233203d3e20323638323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.244.0/23
Signature Algorithm: sha256WithRSAEncryption
33:7d:50:33:de:06:2d:03:94:b2:3b:dd:5d:7a:16:0b:ed:44:
48:c3:8b:5a:9f:44:15:39:d7:58:b4:b9:c3:f9:9f:fe:b2:3a:
69:c8:92:93:a1:16:6f:e2:a5:d3:55:5e:5a:ab:0a:6f:db:be:
47:ee:60:c0:23:8f:77:c3:99:1a:dd:85:b4:73:e7:5e:99:9a:
0d:55:46:3a:55:2b:63:4d:00:7b:48:da:60:28:c6:09:9b:f8:
76:65:05:ac:93:f8:32:80:0a:cd:c7:a1:93:1a:95:5f:50:b6:
37:9d:df:9c:22:59:ee:03:7d:25:e9:e2:f3:8f:34:7f:48:a7:
a4:67:87:a5:c7:b9:8d:a3:db:a4:64:aa:72:a7:31:8c:01:1f:
f3:e4:c6:23:56:a4:3c:72:37:87:9b:26:fe:6b:78:80:d7:14:
5e:75:32:b0:65:26:80:36:8b:58:07:63:d3:37:86:c8:63:a2:
e3:7e:06:69:c1:a0:37:1f:ac:d7:8b:ba:e6:02:08:14:06:d9:
8c:9f:54:70:f6:b2:dd:82:42:85:75:56:a1:02:64:11:b2:b2:
38:5a:f0:31:73:2d:1e:9f:57:85:2c:6d:ee:4d:7b:97:47:ae:
d9:5d:b8:c0:b9:dc:bd:85:27:59:8f:3b:3f:f9:67:01:99:0a:
43:53:28:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG7zFGDSwmJrnEXa1WlOi2eutbDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE0QjE5OTBFOTk3M0ZBMEI2RkE4RENBNzdDRDhBMDcx
MUJCMEQ4RjAeFw0yNjA5MjgxNTAyNDVaFw0yNzA5MjcxNTA3NDVaMDMxMTAvBgNV
BAMTKDM1OTI0NzQ5QjRFNzk1MzZCQTg0RDU3ODE1N0M3RjdGMzAxNzAxRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAsSfxvHw78kNzQGhQnpovSZN
MGx7MtTOs4dwMfFEPphVdgGWdQYGVOavTXVpZ6X9B1XAmleFftngzKgjoHeqNPJ9
yu0ssUfa0ELS8W5Og1rxAld9ts1tiugWQHnY30qcQwad/mAt/bfslfTH8tbugWbb
NcnFEXzZepEpZ3yN1TjRTjF8YUrK1LHKe2uLaWFbpcdP0D7yg9K9QLYKJj1oezc8
XrKmB6yLWl7Gw4ZHB+LAp3nojdSOOwcOai9G1+hsmI5THW66Rt87+vbBBKdIBwe4
XgfAV4PG5OklGhGHSDXu7iEIGP7GMZ5tc7i/bGvSHD6h09d1ofY6uhq39IAhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNZJHSbTnlTa6hNV4FXx/fzAXAdcwHwYDVR0j
BBgwFoAUAUsZkOmXP6C2+o3Kd82KBxG7DY8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC8wMTRCMTk5MEU5OTczRkEwQjZGQThEQ0E3N0NEOEEwNzExQkIwRDhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNEIxOTkwRTk5NzNGQTBC
NkZBOERDQTc3Q0Q4QTA3MTFCQjBEOEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzQzNTJlMzIzMzM3MmUzMjM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7fQwDQYJKoZIhvcNAQELBQADggEBADN9UDPe
Bi0DlLI73V16FgvtREjDi1qfRBU511i0ucP5n/6yOmnIkpOhFm/ipdNVXlqrCm/b
vkfuYMAjj3fDmRrdhbRz516Zmg1VRjpVK2NNAHtI2mAoxgmb+HZlBayT+DKACs3H
oZMalV9Qtjed35wiWe4DfSXp4vOPNH9Ip6Rnh6XHuY2j26RkqnKnMYwBH/PkxiNW
pDxyN4ebJv5reIDXFF51MrBlJoA2i1gHY9M3hshjouN+BmnBoDcfrNeLuuYCCBQG
2YyfVHD2st2CQoV1VqECZBGysjha8DFzLR6fV4Usbe5Ne5dHrtlduMC53L2FJ1mP
Oz/5ZwGZCkNTKNE=
-----END CERTIFICATE-----
Generated at Mon Oct 12 12:50:55 2026 by rpki-client