Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa
File: 34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa (raw, json)
Hash identifier: hvjPCRa0okwbfDKtKHc0UnzsILuiXDkuRDSPBs8it6A=
Subject key identifier: 6D:3E:0C:AA:86:87:22:04:D8:12:3D:A7:E4:D1:C9:C7:19:F2:BA:63
Certificate issuer: /CN=3A9605B2DF9025F5056C61296B879441CB6D80F9
Certificate serial: 44146BC69844D1AA131734DB5FDBF3210B29C562
Authority key identifier: 3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa
Signing time: Thu 06 Mar 2025 08:09:48 +0000
ROA not before: Thu 06 Mar 2025 08:04:48 +0000
ROA not after: Thu 05 Mar 2026 08:09:48 +0000
asID: 268528
IP address blocks: 45.162.216.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:14:6b:c6:98:44:d1:aa:13:17:34:db:5f:db:f3:21:0b:29:c5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A9605B2DF9025F5056C61296B879441CB6D80F9
Validity
Not Before: Mar 6 08:04:48 2025 GMT
Not After : Mar 5 08:09:48 2026 GMT
Subject: CN=6D3E0CAA86872204D8123DA7E4D1C9C719F2BA63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:32:68:5e:cb:47:fd:5e:8f:11:0d:e1:64:
b4:54:93:86:40:d7:7c:1e:db:db:eb:56:36:1d:37:
df:91:fe:59:ec:77:6e:bf:20:6a:29:91:e2:3f:e8:
9b:0a:1f:5c:12:02:b2:13:76:15:7f:41:5c:b7:35:
87:27:1f:ff:3c:49:17:fb:98:1f:6b:8c:f4:63:a5:
f6:b2:22:3a:8a:5b:d7:c3:a5:86:bf:a1:c0:b3:52:
9f:f4:f7:0e:be:89:c2:90:c5:c7:03:57:42:dc:cc:
84:cc:0e:9a:94:8f:7f:c7:73:ba:1b:54:fc:eb:6f:
fd:3c:a5:31:23:c3:01:8b:ef:10:b2:fa:d1:ce:11:
a8:f3:98:f3:78:85:75:3f:22:cf:6e:3c:49:4e:03:
ab:86:ab:a9:d9:2e:80:db:8d:0f:f8:a4:4c:40:ef:
01:35:55:e3:31:6b:42:ac:05:22:cd:d1:e0:46:d9:
5e:37:d5:9a:ef:8a:db:82:03:a8:6f:6b:df:8a:ca:
ee:cd:a3:aa:27:ab:c5:b5:88:92:53:74:00:fa:74:
cf:9e:97:d3:e3:2f:c7:2e:09:50:1a:79:d2:19:80:
b3:53:17:72:ef:f0:86:b8:51:f6:6e:67:20:f8:2c:
fb:00:c0:df:39:ae:90:f4:8b:0a:cf:d7:d7:a1:a3:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3E:0C:AA:86:87:22:04:D8:12:3D:A7:E4:D1:C9:C7:19:F2:BA:63
X509v3 Authority Key Identifier:
keyid:3A:96:05:B2:DF:90:25:F5:05:6C:61:29:6B:87:94:41:CB:6D:80:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9605B2DF9025F5056C61296B879441CB6D80F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/1/34352e3136322e3231362e302f32322d3234203d3e20323638353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:b4:18:f0:de:8a:f4:02:6d:3e:6a:11:78:3c:05:b0:33:e6:
90:32:f7:31:92:b4:22:88:1c:e7:23:ff:6d:6c:ea:a8:cb:ca:
90:e4:2c:fd:d7:50:24:0f:d4:20:2a:4c:27:fa:30:8b:0d:6f:
ef:ed:b6:a8:29:44:cb:6c:4c:ee:dc:b6:9d:53:65:ee:8f:cc:
98:19:95:d3:73:ae:ed:eb:39:4c:f5:0c:de:30:6e:ce:64:58:
bb:71:95:6b:eb:b3:b3:0e:ac:dd:eb:68:1b:4d:81:f2:8f:3a:
e2:42:c3:41:e9:c1:14:d5:2f:6c:e3:27:3a:3f:e5:1c:b5:48:
80:0b:9c:7b:f5:6c:bd:79:c7:4c:31:32:ee:c6:7c:51:75:71:
f6:5b:dc:79:d6:ec:79:4c:b5:b2:62:9f:75:3a:9d:a1:7f:11:
42:bd:0e:1b:12:e0:1c:d1:fc:e2:fc:d4:de:80:6b:48:02:e7:
7a:2c:42:ac:5c:85:e4:ed:56:5a:c5:80:5b:16:0a:90:29:c3:
5f:f7:f1:1b:aa:bc:73:76:49:3b:2c:bd:eb:c7:0a:30:86:44:
67:e6:3e:fb:62:31:0a:0a:79:f4:10:84:b7:18:3f:a2:03:96:
b6:20:e6:46:49:9f:13:4a:61:e0:5f:87:b7:11:e3:86:ec:aa:
87:28:35:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:28:23 2025 by rpki-client