Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35372e302f32342d3234203d3e20323638313438.roa
File: 34352e3137302e35372e302f32342d3234203d3e20323638313438.roa (raw, json)
Hash identifier: 0CN5/x4pe7jCWlGDMfrti4b9viPPpk7/PhRpMCGNR6o=
Subject key identifier: C6:EF:33:BB:F0:67:33:1C:14:A7:7E:E7:C3:B8:67:40:94:62:84:5A
Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Certificate serial: 450C8FF42AAF3326A25B7F1BFAA8BAC498A73BA5
Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35372e302f32342d3234203d3e20323638313438.roa
Signing time: Thu 02 Apr 2026 00:37:18 +0000
ROA not before: Thu 02 Apr 2026 00:32:18 +0000
ROA not after: Thu 01 Apr 2027 00:37:18 +0000
asID: 268148
IP address blocks: 45.170.57.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0c:8f:f4:2a:af:33:26:a2:5b:7f:1b:fa:a8:ba:c4:98:a7:3b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Validity
Not Before: Apr 2 00:32:18 2026 GMT
Not After : Apr 1 00:37:18 2027 GMT
Subject: CN=C6EF33BBF067331C14A77EE7C3B867409462845A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0e:51:5d:5a:6e:b7:16:04:5a:08:a8:24:03:
5d:fc:bc:ec:1b:2f:0a:98:b8:a8:35:1f:b4:81:47:
c9:17:26:a9:cf:e4:e0:98:53:32:3e:73:5b:94:e0:
f7:54:b1:fe:7e:f0:87:5b:b0:78:0f:5e:cc:ee:d3:
6c:92:8b:6b:81:b5:29:43:de:43:8c:ad:5d:aa:27:
95:61:90:62:3d:22:df:b6:99:3c:60:c2:89:54:52:
d9:ec:e1:0c:53:3b:2f:b0:1e:a0:4a:7c:dd:22:27:
62:e3:1e:88:07:42:12:37:66:00:d8:23:28:6a:e3:
e0:d3:57:69:ab:ad:38:a0:33:29:77:64:dc:f0:86:
94:b6:14:de:c5:0e:25:1f:5a:4a:08:1d:1c:14:10:
eb:61:12:71:9a:2c:ea:9e:00:85:a1:78:11:ce:49:
b7:1e:ea:e6:b2:7a:cd:63:28:6f:ae:0d:55:c0:47:
bd:6e:5e:e2:f9:83:0b:4a:b7:27:91:6a:54:9c:3e:
ca:66:bc:61:4c:64:04:3f:71:fb:e9:4c:33:44:77:
6d:3c:21:77:56:45:49:f2:4d:f9:ce:8a:f9:ee:b8:
f0:6b:bb:52:ba:3d:84:3b:dd:4c:d3:a1:c2:6e:0a:
41:78:ad:8c:ec:c7:dc:99:96:5a:43:0c:4f:62:4a:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EF:33:BB:F0:67:33:1C:14:A7:7E:E7:C3:B8:67:40:94:62:84:5A
X509v3 Authority Key Identifier:
keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35372e302f32342d3234203d3e20323638313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bc:9d:ac:bc:bb:f5:08:2c:71:aa:ff:d7:dc:0b:d3:dd:bf:
6e:47:9f:e1:63:e4:d4:4e:e0:67:b0:fd:a9:e8:be:90:d7:96:
a5:ca:bf:f9:81:59:99:52:16:36:3c:27:5e:b0:c8:ea:b9:14:
7a:07:87:58:20:c1:ad:92:b0:0c:71:b9:dc:43:ce:fa:e4:ef:
6a:70:bb:c6:f5:a7:2a:8f:8f:27:b8:e1:f8:b0:bb:07:90:56:
ef:67:8b:22:8d:f3:c6:64:df:77:7c:56:ce:d7:8f:33:a8:51:
a4:7a:bf:61:b4:3a:a0:6c:96:95:f6:9b:96:c4:c7:cc:39:76:
eb:6a:e8:04:5f:90:20:a5:48:d9:c1:f3:67:a7:e6:e4:77:e5:
00:33:c0:cd:51:78:8e:c5:8c:e4:59:51:76:f5:1b:b0:4a:9f:
37:ca:ca:de:0c:1a:4b:51:b2:9d:5f:45:8d:67:b8:33:32:2f:
dd:9c:36:b4:82:14:26:8d:2a:f4:39:4b:bc:dc:11:ea:e7:a8:
33:2e:82:1a:18:92:ab:2e:90:fd:bd:78:19:90:d7:db:51:65:
c6:6a:fa:fb:b9:7c:ae:97:af:fd:19:f2:12:0a:90:19:10:e7:
ad:32:84:94:eb:e0:21:45:0a:0a:d5:19:ec:cf:e5:b4:64:b1:
e0:c9:78:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:19:04 2026 by rpki-client