![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa
File: 34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa (raw, json)
Hash identifier: becHvy/dCjtpQF+4gHEGN3zy1Feww1IODc0cNhKeTmE=
Subject key identifier: 9E:35:74:39:EB:E2:A2:A8:77:E2:32:89:80:44:FA:62:23:44:A7:33
Certificate issuer: /CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
Certificate serial: 227BB1BAC8E9E71FD3F044AED576B9DE2ECB5C39
Authority key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa
Signing time: Mon 15 Jul 2024 19:10:03 +0000
ROA not before: Mon 15 Jul 2024 19:05:03 +0000
ROA not after: Mon 14 Jul 2025 19:10:03 +0000
asID: 268557
IP address blocks: 45.163.192.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7b:b1:ba:c8:e9:e7:1f:d3:f0:44:ae:d5:76:b9:de:2e:cb:5c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
Validity
Not Before: Jul 15 19:05:03 2024 GMT
Not After : Jul 14 19:10:03 2025 GMT
Subject: CN=9E357439EBE2A2A877E232898044FA622344A733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:31:32:aa:c7:c3:9b:10:cf:da:7f:3d:1a:
21:22:4e:09:33:27:6d:b8:69:04:99:12:51:01:86:
26:31:52:da:96:8e:40:af:81:73:6f:36:59:a0:b1:
86:27:ac:7c:77:69:91:e4:d2:3e:77:e8:01:52:7f:
cd:f1:7d:61:53:ca:f8:b4:ef:3c:23:7d:cd:8a:88:
bb:20:dd:b9:10:f7:ee:54:d7:9c:52:8b:a9:bd:67:
18:01:d3:1f:f6:d7:cd:a1:72:d4:da:8a:52:3f:ab:
db:30:66:78:8c:f8:be:b3:5b:b6:0c:7a:9a:27:ce:
43:0c:e1:01:86:8c:3d:60:87:50:c4:27:d7:b4:a1:
b3:9f:fd:d4:d4:21:f0:95:f6:96:90:9c:ca:0c:eb:
9a:69:71:4f:8e:3b:69:ce:52:0d:2b:57:6d:e1:08:
6e:ae:a3:75:93:74:7d:b3:0b:e3:34:4b:8d:fc:5a:
81:15:8e:0e:c5:7c:42:c6:57:63:71:99:37:ea:a6:
73:9e:4c:76:c3:9a:5c:92:c0:68:47:77:2d:74:98:
db:a0:f3:29:11:8b:2b:29:77:e8:8a:62:1d:65:a1:
54:ec:10:8a:b3:fc:c7:e7:86:f7:4c:d2:57:03:e5:
b6:0a:92:b8:7d:78:e9:bb:65:43:13:04:0f:71:4b:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:74:39:EB:E2:A2:A8:77:E2:32:89:80:44:FA:62:23:44:A7:33
X509v3 Authority Key Identifier:
keyid:B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.192.0/22
Signature Algorithm: sha256WithRSAEncryption
04:33:b5:5b:cd:3a:27:b6:33:a3:87:19:5e:c2:0f:4d:51:d6:
9e:5b:fa:03:06:6b:88:f4:dc:71:85:50:b5:c9:cc:f0:9a:48:
b6:de:00:30:38:87:27:b2:a8:3c:17:96:0b:0e:bd:be:dd:f9:
34:f3:6e:9a:df:9c:53:5e:21:df:92:bb:00:9b:0c:d6:1b:1a:
85:47:7c:47:4d:9a:c4:1e:ed:51:32:f4:e3:91:c2:92:04:de:
9a:da:18:9a:45:42:4a:f0:11:d0:f2:35:67:c1:16:c4:ce:e6:
1a:7e:28:b2:a1:d0:4d:e5:a9:b9:96:dc:d0:26:d5:a7:ac:6c:
59:5d:80:16:e9:fd:8b:f0:66:ae:7c:7e:2f:36:82:8a:6d:76:
82:62:6c:11:7c:8e:b6:95:a0:7c:64:93:9e:58:a8:a6:9f:e0:
e8:c9:65:e6:1c:ee:eb:33:72:3c:af:3a:cf:61:1a:f9:b8:0c:
b6:d7:cf:86:a4:f2:a0:97:a0:a1:8a:fc:a7:6a:f3:c5:58:70:
6e:33:d2:4a:b9:90:56:df:4a:55:8c:10:93:4c:d0:5a:f6:82:
ce:62:cc:40:e4:8c:24:5a:9a:6c:c6:31:b1:83:9a:a6:8b:07:
55:72:b4:a1:6c:8c:0f:af:e3:5d:74:a1:bb:30:31:8c:39:6e:
f2:ab:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:26 2025 by rpki-client