Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32332d3233203d3e20323637343039.roa
File: 34352e3233352e37322e302f32332d3233203d3e20323637343039.roa (raw, json)
Hash identifier: Q1VNxTm1SZWtVZVFghjh2CgLLEppQWyWM/CYEw9TnhA=
Subject key identifier: E7:15:46:A1:DA:BC:CD:AD:A7:C9:AC:F1:1B:F7:DA:27:9D:17:CA:51
Certificate issuer: /CN=F45FEF456D7F85034F083B392724775024917F0C
Certificate serial: 425B8F7747CDF861FD6FDA20DCCC9CA855A3F9D9
Authority key identifier: F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32332d3233203d3e20323637343039.roa
Signing time: Fri 16 May 2025 17:21:14 +0000
ROA not before: Fri 16 May 2025 17:16:14 +0000
ROA not after: Fri 15 May 2026 17:21:14 +0000
asID: 267409
IP address blocks: 45.235.72.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5b:8f:77:47:cd:f8:61:fd:6f:da:20:dc:cc:9c:a8:55:a3:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F45FEF456D7F85034F083B392724775024917F0C
Validity
Not Before: May 16 17:16:14 2025 GMT
Not After : May 15 17:21:14 2026 GMT
Subject: CN=E71546A1DABCCDADA7C9ACF11BF7DA279D17CA51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:8f:1d:b0:9c:47:6a:44:12:07:3d:0b:c0:
e3:ed:91:ca:03:92:f5:0f:e8:73:11:e1:88:f0:90:
52:33:7e:13:4f:22:4a:4f:91:a3:66:8e:bc:88:d4:
77:a4:ae:19:8f:ce:da:fa:8c:4b:82:00:2c:e0:d4:
54:e3:07:b8:1b:a2:9f:c9:4a:d5:55:2a:65:e2:66:
cc:d4:42:a3:b9:34:13:d2:f0:cd:da:a9:b8:30:37:
6a:3b:96:06:05:1c:2a:9b:d1:31:72:58:c8:48:08:
a4:38:e1:64:5a:b9:6f:c1:a4:b5:99:29:ea:e8:65:
09:13:53:8c:2d:f5:39:0d:dc:b7:f2:0d:ee:2f:f0:
38:3e:aa:2a:7b:50:e0:31:76:a8:0f:e1:4d:bc:26:
37:27:fe:af:16:0e:4f:53:53:3b:47:4e:7e:82:65:
10:21:5a:35:16:95:b8:b9:32:8a:7f:6e:4d:5b:a5:
12:05:91:7a:74:32:03:04:27:38:14:bf:b7:a1:cf:
4b:d7:2b:32:60:67:ba:f1:7e:96:e2:62:f3:ef:78:
e9:bb:54:cc:e6:77:0c:67:1c:21:9a:6e:e7:36:50:
35:2d:88:97:13:11:0b:ce:e2:94:0c:ff:89:13:1a:
2c:bf:b7:5c:80:eb:ed:e8:bc:18:3c:23:4e:ee:68:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:15:46:A1:DA:BC:CD:AD:A7:C9:AC:F1:1B:F7:DA:27:9D:17:CA:51
X509v3 Authority Key Identifier:
keyid:F4:5F:EF:45:6D:7F:85:03:4F:08:3B:39:27:24:77:50:24:91:7F:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/F45FEF456D7F85034F083B392724775024917F0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F45FEF456D7F85034F083B392724775024917F0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32332d3233203d3e20323637343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.72.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ce:02:c0:bf:93:9a:5d:2f:61:09:d8:ce:c2:d8:21:5e:14:
a6:95:e3:5a:84:79:3f:cb:55:95:1c:f6:1d:74:e1:54:58:7d:
11:e5:3f:9d:6d:6e:bd:5e:ba:11:a2:32:43:07:b7:8e:b8:cb:
ef:73:d0:69:d7:5f:79:2b:37:66:79:5d:37:7e:bc:54:f3:1d:
aa:e6:4b:88:4a:59:f1:ff:27:3e:d3:b4:62:a2:c5:c6:da:a8:
c7:ee:7c:78:62:e7:e1:b0:ff:89:5a:7b:5e:5e:1c:67:4a:42:
19:21:e0:0c:00:e8:e6:c0:03:b3:c0:b8:b3:12:05:79:78:f8:
3d:2e:d8:8c:dd:83:fd:a1:a3:46:18:05:a6:ec:8f:11:10:2b:
4d:83:fc:c3:37:70:16:75:7f:fe:2f:5e:18:b7:ff:4c:49:66:
b3:1b:30:34:38:f7:e8:6a:28:c7:a3:83:8f:2e:97:f0:0f:be:
67:4a:95:b5:62:9a:91:49:2d:4a:f3:92:ba:c1:81:43:73:02:
58:8c:50:33:f8:69:ba:10:e1:bf:e9:8f:5a:19:e9:d5:88:1c:
f7:90:f1:65:f6:12:13:f0:b8:83:e8:96:f2:d7:c2:3c:98:3c:
8e:dc:cd:6e:46:5c:0f:1a:4e:52:cd:cb:1f:8e:d6:cc:45:e9:
02:84:af:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:55:02 2025 by rpki-client