Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233302e302f32342d3234203d3e20323632363137.roa
File: 34352e36352e3233302e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier: EHPWO0K1njxDglxNvqSIAdfWLt5o+nw/5IM9S52LDKQ=
Subject key identifier: B3:BB:EE:91:8B:13:94:DB:61:1F:77:D8:66:36:60:6D:E9:BA:AE:10
Certificate issuer: /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial: 4CF1D18A8195DC61D88E77964C3D92229E18B9B7
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233302e302f32342d3234203d3e20323632363137.roa
Signing time: Thu 06 Mar 2025 18:36:39 +0000
ROA not before: Thu 06 Mar 2025 18:31:39 +0000
ROA not after: Thu 05 Mar 2026 18:36:39 +0000
asID: 262617
IP address blocks: 45.65.230.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f1:d1:8a:81:95:dc:61:d8:8e:77:96:4c:3d:92:22:9e:18:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
Validity
Not Before: Mar 6 18:31:39 2025 GMT
Not After : Mar 5 18:36:39 2026 GMT
Subject: CN=B3BBEE918B1394DB611F77D86636606DE9BAAE10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:a0:58:11:eb:86:e8:a7:12:fd:89:5e:73:
d6:90:fa:61:32:54:35:ff:15:49:d5:0e:c6:8a:31:
33:c0:81:c7:96:95:4e:77:9f:62:e8:4f:16:cd:11:
69:f6:92:ab:8c:95:e2:d7:1f:58:09:15:5c:5f:cd:
65:e8:a5:e5:a8:82:72:ab:ce:54:ff:2a:92:4f:87:
37:3d:7b:f7:34:6f:bd:48:c5:6d:18:62:97:95:c6:
f3:ca:81:e6:56:64:ab:0d:c3:6e:d7:4d:7c:f6:1a:
b9:e2:8d:e0:6e:25:62:4c:0a:0b:a4:ab:d4:27:c6:
65:d7:55:e3:43:54:8c:ae:84:73:7b:29:55:61:8f:
ed:6a:f5:2c:f0:92:a2:1e:5d:22:2b:6b:05:98:2f:
60:c1:68:af:2e:64:f3:96:e1:71:d7:f8:51:6e:18:
70:b6:52:06:a3:7f:a6:6d:39:ed:ad:4a:3f:30:5e:
96:33:28:02:bd:19:1c:da:d2:5b:f8:8a:df:af:f8:
a7:ed:84:3b:6c:bd:69:41:71:25:14:dc:37:e9:43:
04:c7:a3:97:22:d1:7c:cc:26:45:38:43:08:71:67:
51:c9:27:dd:21:85:31:54:87:80:47:ee:0c:dc:37:
b8:d2:c9:15:0e:77:a5:71:ef:23:21:23:17:a9:d5:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:EE:91:8B:13:94:DB:61:1F:77:D8:66:36:60:6D:E9:BA:AE:10
X509v3 Authority Key Identifier:
keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/34352e36352e3233302e302f32342d3234203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:35:dd:0a:67:67:68:81:33:d1:54:4f:79:c1:4f:6a:83:22:
aa:d3:73:c8:a2:9a:7a:5a:84:b5:3b:fc:dc:b0:23:0a:dc:17:
a0:43:58:01:6a:41:89:1c:cf:72:d7:24:c3:a0:f9:cd:f0:0d:
e8:c6:55:36:2f:88:01:d2:57:52:a4:ba:e0:1f:b5:a6:a6:c0:
bc:07:1e:ae:b8:8e:0a:13:7b:10:97:ad:e2:3d:48:1a:fa:a4:
d3:b6:f6:ae:98:bf:fb:00:86:b3:da:13:f5:20:5b:1c:65:2d:
4d:0a:9e:aa:d6:4d:a4:a0:5c:cd:39:03:01:19:6c:0d:1b:0f:
6c:64:15:4b:88:19:21:84:62:39:41:75:68:ea:41:4d:12:a2:
62:9e:f2:b3:7a:82:db:ad:96:6a:49:4a:a5:b5:89:da:63:da:
98:12:c8:00:ab:a1:27:b5:73:39:15:d4:db:8e:16:94:00:83:
eb:48:65:50:30:3c:b0:7f:68:4e:f1:97:9b:87:6b:9f:2a:1b:
c4:7c:a2:f3:35:1a:79:f0:5a:b9:77:b8:75:03:f8:b9:69:c9:
a0:f9:c4:db:27:64:2b:88:4c:32:d2:d8:5b:e5:31:b5:59:0e:
70:83:a5:20:88:f9:81:2c:56:a8:86:9d:96:92:bb:96:a7:29:
83:8b:1d:88
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTPHRioGV3GHYjneWTD2SIp4YubcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyQUVCRjc0MjczNzIzQjc2Njg0NTgwNTYyQjE3QTc3
Q0RFRjA0MjAeFw0yNTAzMDYxODMxMzlaFw0yNjAzMDUxODM2MzlaMDMxMTAvBgNV
BAMTKEIzQkJFRTkxOEIxMzk0REI2MTFGNzdEODY2MzY2MDZERTlCQUFFMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUb6BYEeuG6KcS/Ylec9aQ+mEy
VDX/FUnVDsaKMTPAgceWlU53n2LoTxbNEWn2kquMleLXH1gJFVxfzWXopeWognKr
zlT/KpJPhzc9e/c0b71IxW0YYpeVxvPKgeZWZKsNw27XTXz2GrnijeBuJWJMCguk
q9QnxmXXVeNDVIyuhHN7KVVhj+1q9SzwkqIeXSIrawWYL2DBaK8uZPOW4XHX+FFu
GHC2Ugajf6ZtOe2tSj8wXpYzKAK9GRza0lv4it+v+KfthDtsvWlBcSUU3DfpQwTH
o5ci0XzMJkU4QwhxZ1HJJ90hhTFUh4BH7gzcN7jSyRUOd6Vx7yMhIxep1RqHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs7vukYsTlNthH3fYZjZgbem6rhAwHwYDVR0j
BBgwFoAUOSrr90Jzcjt2aEWAVisXp3ze8EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMS8zOTJBRUJGNzQyNzM3MjNCNzY2ODQ1ODA1NjJCMTdBNzdDREVGMDQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MkFFQkY3NDI3MzcyM0I3
NjY4NDU4MDU2MkIxN0E3N0NERUYwNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzEv
MzQzNTJlMzYzNTJlMzIzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzYzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUHmMA0GCSqGSIb3DQEBCwUAA4IBAQBMNd0KZ2do
gTPRVE95wU9qgyKq03PIopp6WoS1O/zcsCMK3BegQ1gBakGJHM9y1yTDoPnN8A3o
xlU2L4gB0ldSpLrgH7WmpsC8Bx6uuI4KE3sQl63iPUga+qTTtvaumL/7AIaz2hP1
IFscZS1NCp6q1k2koFzNOQMBGWwNGw9sZBVLiBkhhGI5QXVo6kFNEqJinvKzeoLb
rZZqSUqltYnaY9qYEsgAq6EntXM5FdTbjhaUAIPrSGVQMDywf2hO8Zebh2ufKhvE
fKLzNRp58Fq5d7h1A/i5acmg+cTbJ2QriEwy0thb5TG1WQ5wg6UgiPmBLFaohp2W
kruWpymDix2I
-----END CERTIFICATE-----
Generated at Thu Sep 18 09:12:11 2025 by rpki-client