Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32322d3232203d3e20323638313438.roa
File: 34352e3137302e35362e302f32322d3232203d3e20323638313438.roa (raw, json)
Hash identifier: W9xRzvOgULXFcSdjaAuhRP5lwrh1PRtOm3yof/oj2wk=
Subject key identifier: 96:C6:4D:A7:6A:A8:24:9F:47:46:C2:0F:59:9F:9F:9C:A6:63:97:65
Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Certificate serial: 40261009F280F35539FCB7E032244BEAAD4AC64E
Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32322d3232203d3e20323638313438.roa
Signing time: Thu 02 Apr 2026 00:37:17 +0000
ROA not before: Thu 02 Apr 2026 00:32:17 +0000
ROA not after: Thu 01 Apr 2027 00:37:17 +0000
asID: 268148
IP address blocks: 45.170.56.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:26:10:09:f2:80:f3:55:39:fc:b7:e0:32:24:4b:ea:ad:4a:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Validity
Not Before: Apr 2 00:32:17 2026 GMT
Not After : Apr 1 00:37:17 2027 GMT
Subject: CN=96C64DA76AA8249F4746C20F599F9F9CA6639765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:56:0b:cf:14:bf:24:eb:cf:d2:a2:70:55:
c4:f1:63:1e:70:15:9e:06:20:5b:09:f5:91:fa:f3:
81:91:a2:56:67:1c:a5:c7:11:3e:12:75:c5:9a:4c:
a2:c5:85:b5:01:14:30:ff:86:6e:a6:ff:c4:bd:6c:
98:38:0d:28:c9:3d:7a:9c:5a:9c:87:7b:bc:d4:ef:
8d:1d:d3:13:b2:67:20:eb:aa:b3:8b:b4:14:24:6a:
f4:2d:37:56:bb:57:07:3c:08:88:5d:46:50:a9:4c:
b2:b6:bf:8f:9d:a0:e1:45:e5:a5:ac:f5:2b:6b:fa:
f3:ae:52:c9:0d:28:8e:54:d0:ec:0c:3a:1d:9d:f7:
21:ce:22:cd:28:5a:ca:6d:9c:92:39:10:b2:66:4f:
b7:02:70:cb:ca:25:b0:15:b8:7a:7c:1f:7f:c9:39:
cc:d1:8b:ea:97:fe:3e:61:ec:77:03:74:44:61:81:
9c:84:ee:71:55:a1:be:3d:e9:ba:88:9a:a9:57:be:
50:fc:31:f8:ad:a1:ab:ad:ab:3d:45:ea:dc:fe:e2:
63:ca:0a:26:a2:93:73:f4:f8:3b:4c:02:03:9d:48:
7d:93:28:15:a6:65:14:cd:d0:85:3d:43:e6:07:e4:
cf:b5:6c:e0:de:13:67:97:99:eb:fc:28:f4:f5:79:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:4D:A7:6A:A8:24:9F:47:46:C2:0F:59:9F:9F:9C:A6:63:97:65
X509v3 Authority Key Identifier:
keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32322d3232203d3e20323638313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.56.0/22
Signature Algorithm: sha256WithRSAEncryption
37:9f:45:e7:24:7b:4f:1d:bd:94:9d:a4:d3:8c:5e:ca:7e:97:
be:17:e0:af:cf:a0:bf:34:bb:59:e7:5c:b6:38:8d:56:c0:58:
0a:47:74:7b:04:eb:a4:85:08:89:f4:90:0b:f2:21:ec:c4:00:
a6:8c:b1:94:d0:0b:24:9d:8b:00:27:11:a0:dc:19:21:4d:b0:
c3:f5:a7:9e:00:2a:1e:01:fc:cb:bf:de:0b:5a:08:d4:97:2b:
da:8d:4e:5f:1b:7d:94:ec:cc:11:30:9e:2e:c7:e6:e8:f4:b0:
59:24:7b:ac:c1:df:59:5a:0a:81:b9:49:f4:f0:5e:93:2a:24:
cb:66:5f:8f:d5:f9:30:cb:57:a9:a6:b4:a1:51:b3:a1:1c:f2:
07:51:4d:49:19:d5:c4:bc:82:70:49:e4:82:b9:92:d4:a8:90:
63:ac:d9:fd:df:27:e5:7a:2e:83:f8:3a:1f:c1:94:15:72:c5:
6b:87:aa:d9:57:74:1b:4e:fb:1c:21:9a:2d:60:36:31:e0:f6:
15:b8:a8:68:87:af:5a:ae:47:bf:30:d7:61:04:3c:d1:6b:c7:
9e:af:72:7f:43:ab:c9:6a:8e:97:8a:3c:90:64:89:bb:0b:20:
95:3c:ea:44:f0:cd:9c:75:dc:dc:08:b0:3c:bb:9c:ab:98:a0:
ce:1a:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:19:06 2026 by rpki-client