Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32342d3234203d3e20323638313438.roa
File: 34352e3137302e35362e302f32342d3234203d3e20323638313438.roa (raw, json)
Hash identifier: RR55rTrnkFH8g4KCfPl393pfA1ZwfrCfgh454gl9sUk=
Subject key identifier: DE:59:A8:B9:1D:09:BB:AD:85:61:B4:1B:E3:BB:7E:4B:6F:B6:28:B2
Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Certificate serial: 52B8F7647D6892590C1FE12269339B9D291D06FC
Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32342d3234203d3e20323638313438.roa
Signing time: Thu 02 Apr 2026 00:37:15 +0000
ROA not before: Thu 02 Apr 2026 00:32:15 +0000
ROA not after: Thu 01 Apr 2027 00:37:15 +0000
asID: 268148
IP address blocks: 45.170.56.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b8:f7:64:7d:68:92:59:0c:1f:e1:22:69:33:9b:9d:29:1d:06:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Validity
Not Before: Apr 2 00:32:15 2026 GMT
Not After : Apr 1 00:37:15 2027 GMT
Subject: CN=DE59A8B91D09BBAD8561B41BE3BB7E4B6FB628B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:1c:95:b1:19:a7:02:57:7f:4d:21:2d:01:
21:26:88:37:58:9d:b6:82:3a:97:b3:d7:a2:53:6c:
af:f4:9a:ad:b7:0a:08:cf:7d:40:b6:ef:28:e3:3c:
4a:43:2b:8e:23:02:c0:b5:32:ec:57:7d:91:a3:57:
8c:98:80:20:ee:ad:32:3d:ac:6e:09:0e:62:0a:9e:
90:3b:fa:be:df:61:80:d2:39:4d:60:09:5b:62:4d:
b3:f3:f6:d2:be:f7:19:f5:ed:f0:68:60:48:e2:57:
4b:0b:b1:4c:91:c9:6a:0a:1a:b6:fd:b1:4d:56:20:
07:d4:8f:76:39:f4:7c:2f:2c:cc:dd:14:e3:41:ed:
7e:f6:be:92:45:c1:71:74:da:00:11:e3:1e:97:19:
90:40:5c:06:53:b4:2a:81:78:db:2d:cb:ac:68:48:
af:66:c5:2d:cc:5a:c4:c7:6f:9e:13:34:0d:2c:12:
76:9f:4b:28:b0:40:75:9c:10:de:45:eb:94:49:7f:
c9:cb:4b:89:8a:57:a0:10:6a:4f:0d:ea:48:33:ab:
b4:c8:b7:0a:5c:7d:2f:dc:ac:84:f2:82:4f:ca:44:
a9:32:53:8e:a7:ec:27:0a:33:7f:72:7e:ee:f6:3e:
b5:d8:6f:eb:aa:94:32:2b:fa:84:9f:22:02:13:a1:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:A8:B9:1D:09:BB:AD:85:61:B4:1B:E3:BB:7E:4B:6F:B6:28:B2
X509v3 Authority Key Identifier:
keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35362e302f32342d3234203d3e20323638313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ac:a0:8f:b9:15:1e:0c:f7:3f:3b:8f:7a:f3:45:a2:32:80:
4e:ed:60:a8:1d:04:ec:dc:7f:df:a4:52:66:af:7e:a6:82:2b:
c7:46:03:c6:79:81:12:a3:fd:29:89:82:cd:48:f4:8c:4f:c6:
0c:c0:5f:42:43:68:05:22:52:56:58:7e:62:ee:e0:c1:ae:86:
91:81:e5:75:50:ed:41:22:50:4e:0d:e6:56:b1:08:66:f2:7e:
46:dc:dd:db:de:18:27:39:c9:e6:ce:0d:22:ac:a6:f7:0b:b1:
32:ad:01:08:d8:f2:c3:7d:fc:7f:9a:fb:36:04:04:53:c8:36:
a8:7e:a6:48:b6:2a:4b:28:51:1f:8d:d0:93:6e:fd:72:75:eb:
dc:20:52:b2:59:5a:8d:5e:f5:ef:58:cf:a1:01:fc:fe:76:f8:
a1:f4:3b:96:de:44:bb:4c:a5:08:6c:e9:ff:e0:d3:82:58:70:
d3:54:58:84:a0:6e:11:5b:c2:b2:af:49:f7:12:30:1b:92:3a:
0f:64:73:8a:77:7e:01:e5:7b:4e:81:9d:54:56:0d:85:97:ca:
f4:bc:bb:0e:cd:b6:32:bc:26:b1:5e:6d:20:f8:0c:88:80:f7:
f0:d7:25:c1:ad:fb:b5:35:4b:b7:84:19:d8:0a:84:8a:d1:4c:
06:b1:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:19:02 2026 by rpki-client