Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32332d3233203d3e20323638313438.roa
File: 34352e3137302e35362e302f32332d3233203d3e20323638313438.roa (raw, json)
Hash identifier: +QoBzfGWPmyyT6uMMJ1rR650eEC+cffrEF+pbeGZ30k=
Subject key identifier: 9B:54:B5:07:40:8F:3A:0B:3F:BA:85:1A:F6:93:A3:F9:83:65:58:4A
Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Certificate serial: 2E7A1934BB3642E22FFD022E48A1585588FA0D2E
Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32332d3233203d3e20323638313438.roa
Signing time: Thu 02 Apr 2026 00:37:17 +0000
ROA not before: Thu 02 Apr 2026 00:32:17 +0000
ROA not after: Thu 01 Apr 2027 00:37:17 +0000
asID: 268148
IP address blocks: 45.170.56.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7a:19:34:bb:36:42:e2:2f:fd:02:2e:48:a1:58:55:88:fa:0d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Validity
Not Before: Apr 2 00:32:17 2026 GMT
Not After : Apr 1 00:37:17 2027 GMT
Subject: CN=9B54B507408F3A0B3FBA851AF693A3F98365584A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:83:76:5e:0d:cd:23:cc:fd:2a:d2:d9:f5:
bb:75:37:3c:c5:3f:89:e2:f7:cc:99:85:02:12:58:
8b:b5:29:e8:0f:46:f2:98:87:c7:b3:5a:8a:3a:3d:
6a:89:8f:dd:96:f6:c9:ed:8c:0f:e7:59:c6:26:7d:
40:14:cf:ab:1e:b7:1c:7c:2d:7c:65:95:73:ae:20:
6f:bf:ee:f1:bf:c2:d0:3c:a0:3d:14:91:bf:fe:70:
0d:9e:41:db:05:97:ab:8d:8f:48:d0:f4:05:67:63:
87:9f:96:74:dd:49:cd:6e:af:7b:40:57:5d:67:7f:
e6:43:24:51:c4:3c:99:dd:5a:7d:2c:61:94:d3:98:
5e:3c:2b:ac:17:d2:bd:6f:de:a0:61:72:fa:26:9d:
a4:42:19:36:ac:e4:2b:63:74:52:0e:73:2d:10:3c:
ea:7f:a0:a1:73:b1:03:d8:b5:a6:a0:e3:69:f6:2d:
ec:7f:1a:a5:4c:a2:41:38:07:95:dc:de:e1:41:04:
ce:66:0f:e9:11:b7:b8:c3:93:1b:36:13:e1:4b:36:
f4:56:f8:0d:aa:68:e3:56:ad:20:21:dc:bd:ee:ba:
7a:71:01:2b:c1:f6:c9:d1:a4:93:78:20:27:6a:ee:
79:7d:cb:8c:fa:57:e8:c6:4f:26:c5:0c:d1:b6:99:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:54:B5:07:40:8F:3A:0B:3F:BA:85:1A:F6:93:A3:F9:83:65:58:4A
X509v3 Authority Key Identifier:
keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32332d3233203d3e20323638313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.56.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:61:03:03:2f:24:d7:3f:61:ea:9a:61:fb:54:a0:10:62:63:
b2:65:b4:1b:c9:3f:90:cc:71:22:6a:4e:ef:88:c6:71:89:bb:
52:94:23:5b:9c:a9:e8:9f:88:6b:c3:7d:10:0f:e5:54:55:0b:
6d:09:9f:da:9d:07:c9:aa:c8:e4:5f:04:69:3a:7b:76:70:ac:
6e:09:25:ce:db:41:5a:7c:bb:5b:6e:56:51:21:a1:07:21:7b:
76:2c:14:ad:1a:c7:5e:d8:fb:52:a7:20:a9:d0:79:76:e2:c1:
6b:91:e1:3e:7a:35:42:29:eb:e2:9a:f1:37:86:36:d4:45:6f:
15:09:ab:5b:6b:2e:6f:89:9a:3c:cd:d7:ef:db:02:17:57:ae:
cb:69:ca:d0:f4:c1:ca:fc:58:01:a7:1a:b4:60:32:93:cd:ca:
54:7f:84:b2:b1:f0:64:57:9d:c8:36:2b:de:84:da:98:23:73:
a3:03:96:b3:5b:9a:7c:bc:58:18:be:69:68:96:ac:6e:6a:2f:
16:35:46:ef:d3:69:5e:b3:bb:50:4f:62:89:4a:eb:00:37:4a:
4a:26:3e:c4:5b:ba:f5:e2:db:ab:ce:69:ff:a0:76:77:da:79:
65:d5:c8:41:21:6a:2d:cf:41:91:56:2d:72:f7:58:49:1a:d7:
e9:42:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:18:37 2026 by rpki-client