Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/1/34352e362e3231362e302f32322d3233203d3e20323636323437.roa
File: 34352e362e3231362e302f32322d3233203d3e20323636323437.roa (raw, json)
Hash identifier: HGmT+dSyN0Apyv0POnjpvpSTEfD4qGi7uFNG4cqYXOk=
Subject key identifier: D4:03:2D:31:2D:04:DE:2B:E6:02:A9:E8:A8:D4:87:C3:67:FE:64:00
Certificate issuer: /CN=52BE29BC0096E62456D6790E66D2973E9E0C1018
Certificate serial: 4F0D7A938522832BDBC998DA783D62487FB0B661
Authority key identifier: 52:BE:29:BC:00:96:E6:24:56:D6:79:0E:66:D2:97:3E:9E:0C:10:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52BE29BC0096E62456D6790E66D2973E9E0C1018.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/1/34352e362e3231362e302f32322d3233203d3e20323636323437.roa
Signing time: Thu 06 Mar 2025 09:09:49 +0000
ROA not before: Thu 06 Mar 2025 09:04:49 +0000
ROA not after: Thu 05 Mar 2026 09:09:49 +0000
asID: 266247
IP address blocks: 45.6.216.0/22 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0d:7a:93:85:22:83:2b:db:c9:98:da:78:3d:62:48:7f:b0:b6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52BE29BC0096E62456D6790E66D2973E9E0C1018
Validity
Not Before: Mar 6 09:04:49 2025 GMT
Not After : Mar 5 09:09:49 2026 GMT
Subject: CN=D4032D312D04DE2BE602A9E8A8D487C367FE6400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:5c:72:e7:6f:36:3b:1d:20:66:04:33:ad:
6e:d6:db:f6:7f:16:e6:7d:b6:b6:85:af:5f:f9:7c:
21:5b:16:75:e4:42:ea:34:d5:c6:53:8f:e0:2f:1b:
3b:8c:b6:7c:e2:9b:ac:41:06:52:59:11:fd:ba:78:
5c:94:bd:07:b1:23:f7:1c:e2:fa:4a:27:61:65:51:
c2:5e:6b:b0:ab:e9:4a:9c:ad:79:83:35:57:fc:34:
8e:b2:6d:d5:37:e8:2d:8c:a1:f5:a9:53:1f:36:c0:
b4:a9:54:a7:fd:e0:95:17:32:4d:c3:0a:db:8c:4f:
2f:0d:8c:bd:87:3c:bd:38:68:1c:3a:a5:9f:c1:92:
fc:8d:ef:4e:84:04:2f:4a:b7:79:3d:6d:47:75:e1:
87:fe:b4:3b:1b:43:48:55:7d:a3:cf:9a:58:7f:a2:
d0:4a:d5:a0:73:ae:1c:0d:a5:f4:f4:2e:ba:ed:ce:
1a:c2:3d:47:91:4f:ff:b5:a7:c7:9f:3c:0f:9a:88:
e9:83:41:d0:bd:1c:71:0c:de:58:de:ed:0a:ce:6c:
7b:8f:8b:e3:c8:04:32:b1:99:f4:df:a6:13:44:15:
81:7c:63:55:6c:4f:b3:2b:16:63:7f:a6:1d:fb:95:
b4:66:73:f5:d9:f4:59:d1:f1:fd:58:4b:2c:58:b2:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:03:2D:31:2D:04:DE:2B:E6:02:A9:E8:A8:D4:87:C3:67:FE:64:00
X509v3 Authority Key Identifier:
keyid:52:BE:29:BC:00:96:E6:24:56:D6:79:0E:66:D2:97:3E:9E:0C:10:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/1/52BE29BC0096E62456D6790E66D2973E9E0C1018.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52BE29BC0096E62456D6790E66D2973E9E0C1018.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/1/34352e362e3231362e302f32322d3233203d3e20323636323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.216.0/22
Signature Algorithm: sha256WithRSAEncryption
44:c7:17:01:07:61:f7:bc:5b:10:63:08:4d:52:79:1f:f7:dc:
63:d7:1f:4b:fe:bb:4f:54:39:4b:fa:96:57:b4:6d:c7:2e:7c:
73:48:d3:19:3c:ca:be:7d:7f:65:a2:de:18:c2:ed:78:47:64:
85:50:be:c7:2d:5f:31:94:cb:ac:90:3b:ca:71:5c:59:13:02:
53:2f:26:c7:0e:a4:c2:ff:e8:08:a7:89:b1:3a:56:2a:15:25:
d9:45:e4:ae:7d:49:c2:ec:f6:7f:c7:4e:97:7b:71:3c:bc:67:
33:9e:65:6c:cd:35:f1:36:e9:72:9e:8e:7a:d8:ed:16:5a:36:
a1:2d:de:4c:3e:d4:53:25:3a:83:c7:55:24:f6:30:87:19:c6:
19:2a:8b:56:39:ef:38:27:a2:e5:c7:ea:58:04:91:f1:31:8b:
1c:fd:f7:bf:af:58:3e:75:87:da:37:11:cd:b5:8a:0e:f4:5c:
41:4c:e7:2d:2e:49:89:72:65:d9:33:4c:6e:7e:a7:c7:00:f5:
0c:56:b6:a0:40:ac:ea:f2:28:9f:0e:4f:05:5a:02:42:dc:9c:
b7:59:cb:e3:9e:ba:1b:0d:8c:b8:a4:90:c0:98:c0:45:eb:24:
5c:b9:d2:99:b8:83:0b:8e:0f:71:9b:bb:86:e0:7c:d8:3a:47:
f9:6d:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:59 2025 by rpki-client