Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa
File: 34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa (raw, json)
Hash identifier: UWtLfp68Rzi6LML2YroqQNe9Ib2jl6xz7IuH2d8Pimw=
Subject key identifier: C5:4B:F8:4C:5F:15:D8:1A:21:3F:E3:E8:C2:26:AB:AA:26:57:67:78
Certificate issuer: /CN=2114B3B965382FA7393E772A6837B5B8D7173834
Certificate serial: 77663275999A0D83941347558E8908282FD78094
Authority key identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa
Signing time: Tue 22 Apr 2025 14:38:51 +0000
ROA not before: Tue 22 Apr 2025 14:33:51 +0000
ROA not after: Tue 21 Apr 2026 14:38:51 +0000
asID: 271657
IP address blocks: 45.225.115.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:66:32:75:99:9a:0d:83:94:13:47:55:8e:89:08:28:2f:d7:80:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2114B3B965382FA7393E772A6837B5B8D7173834
Validity
Not Before: Apr 22 14:33:51 2025 GMT
Not After : Apr 21 14:38:51 2026 GMT
Subject: CN=C54BF84C5F15D81A213FE3E8C226ABAA26576778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:df:89:be:ff:29:25:0b:eb:a1:f0:17:0f:
2a:0f:21:3e:a5:06:a8:85:4f:f4:7a:b7:5b:7d:73:
ed:82:1d:81:d6:fc:8e:74:d1:12:15:55:5c:e5:45:
d9:d9:e0:6f:2a:b2:36:f8:7d:b8:2a:bd:81:cb:bb:
fc:12:0e:65:e6:c5:d7:b1:21:ee:b7:13:4f:41:b4:
aa:ba:2b:fe:a9:d4:2e:84:c9:ff:e2:cf:6e:ea:31:
92:58:ad:6b:50:44:96:50:97:d8:80:b6:56:23:d2:
8c:e4:e4:d1:79:ac:e9:9c:4d:6f:da:da:04:97:53:
9d:3b:ca:36:25:bd:20:cb:8c:a7:40:f6:9f:10:99:
c2:93:a1:98:2c:6d:9f:8c:e7:a8:ff:b6:2c:d0:c0:
ed:dc:32:34:83:4d:f8:34:1c:b6:a3:db:31:06:da:
ae:7a:9c:1c:0d:85:1a:35:11:19:f5:24:04:d7:47:
ff:8d:78:a0:0d:42:4c:f2:59:7f:55:dc:fa:f7:d6:
3d:20:a8:b7:94:cc:f5:12:02:76:29:42:69:ee:6e:
66:82:af:88:74:f2:ff:ce:c8:77:bb:26:50:68:7d:
ba:3b:b8:12:37:67:90:8f:ca:f1:14:bd:da:52:84:
8a:77:bf:a1:ae:d0:79:6f:09:2e:af:6b:cb:ba:42:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:F8:4C:5F:15:D8:1A:21:3F:E3:E8:C2:26:AB:AA:26:57:67:78
X509v3 Authority Key Identifier:
keyid:21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131352e302f32342d3234203d3e20323731363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.115.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e9:b3:55:75:e3:49:0f:7b:ce:f4:95:e3:08:fe:f0:bb:bc:
f1:d4:a2:a3:e2:b7:95:d9:fd:81:ac:ee:30:aa:cd:91:c0:87:
50:75:16:67:b4:67:40:45:6a:9a:15:6d:d4:a7:b5:33:be:1f:
46:41:d0:9e:fd:1d:2e:28:d2:ba:f4:16:d6:2d:ba:81:97:fa:
6d:90:6a:d6:d9:43:05:b7:68:b4:a8:a7:e7:03:c6:5e:08:82:
0c:36:fa:90:2a:2d:06:08:96:f4:a5:96:5f:50:47:e6:91:26:
26:f3:88:bd:b1:81:f7:a6:6b:12:68:56:06:da:60:86:9a:2f:
20:04:ff:21:73:f4:b3:ca:80:80:1e:db:38:fc:60:bb:b0:21:
20:0a:61:0c:43:55:22:4d:91:ad:09:72:a4:b9:ae:88:ea:e7:
bb:9f:88:c5:64:8f:8f:8d:45:c6:d9:24:68:18:4b:7e:1c:01:
38:69:a2:5d:78:c2:93:16:e8:df:48:2d:48:eb:48:d5:91:0b:
47:fe:49:fa:e6:42:73:b0:d9:0a:a7:36:7f:77:86:db:88:c5:
e9:3a:49:ba:45:55:c0:b7:5e:d4:1a:ec:d8:3a:b0:34:51:b0:
23:68:0c:86:35:15:0e:bc:f0:ca:a2:5c:4f:1e:d1:61:88:15:
99:6f:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:42:34 2025 by rpki-client