Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35382e302f32342d3234203d3e20323638313438.roa
File: 34352e3137302e35382e302f32342d3234203d3e20323638313438.roa (raw, json)
Hash identifier: gZsOGS3Rnh0duEef3BgRuCE3E5aFmjV1uvpgLG3C2FQ=
Subject key identifier: B0:B9:2A:52:18:84:3E:A8:7F:C2:F1:DE:BC:E5:1D:C4:E6:5C:BB:1F
Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Certificate serial: 12677DC63A54A8B4EBCB8B5E007387212D300CE9
Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35382e302f32342d3234203d3e20323638313438.roa
Signing time: Thu 02 Apr 2026 00:37:18 +0000
ROA not before: Thu 02 Apr 2026 00:32:18 +0000
ROA not after: Thu 01 Apr 2027 00:37:18 +0000
asID: 268148
IP address blocks: 45.170.58.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:67:7d:c6:3a:54:a8:b4:eb:cb:8b:5e:00:73:87:21:2d:30:0c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Validity
Not Before: Apr 2 00:32:18 2026 GMT
Not After : Apr 1 00:37:18 2027 GMT
Subject: CN=B0B92A5218843EA87FC2F1DEBCE51DC4E65CBB1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:4b:2a:73:28:53:bf:56:4a:fe:3f:9f:e2:
25:df:1f:29:74:aa:98:dc:19:0b:d2:76:3a:53:2b:
22:71:19:2b:71:f5:32:7b:05:7e:31:c8:8d:f9:db:
b6:af:18:c8:13:f4:19:ff:1d:b1:97:83:d1:d1:1f:
e2:18:16:c9:fe:18:00:01:2f:1c:0a:b1:e0:1c:b5:
36:c1:96:00:71:2c:3d:7d:6b:2e:1a:7f:4b:d4:35:
7f:00:e0:a2:79:51:0f:4d:72:4d:04:0f:1f:99:00:
07:20:f9:ef:22:ef:09:01:9a:8e:40:bb:7d:91:88:
ac:26:0f:7a:81:dc:8d:e0:14:36:3c:22:22:f6:8d:
12:92:56:32:e5:98:ae:11:bb:95:f2:bf:30:a4:77:
4d:2f:20:f3:9b:4a:1a:5e:65:36:3c:62:18:f5:30:
4d:69:0f:0b:8b:1d:ee:5c:9e:36:76:6b:4c:4c:ad:
39:aa:c4:d8:04:58:28:12:ed:45:80:ee:30:f9:7b:
8e:75:b6:2d:6f:54:9f:1d:e6:ad:bd:7b:03:2f:14:
97:e1:ae:4b:a1:7a:be:4f:83:6e:b2:23:ba:82:b3:
50:be:bf:f2:db:44:1a:f0:fb:c7:18:cd:d2:18:b8:
02:0e:f2:7b:42:58:8f:a9:7c:1e:84:8b:77:88:71:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B9:2A:52:18:84:3E:A8:7F:C2:F1:DE:BC:E5:1D:C4:E6:5C:BB:1F
X509v3 Authority Key Identifier:
keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35382e302f32342d3234203d3e20323638313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.58.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1e:6d:4a:52:fe:bf:e6:ee:39:8a:1c:3b:b3:9c:2a:42:47:
52:06:fb:6e:8c:ce:ae:2d:08:a3:07:02:15:64:2f:1f:33:c2:
9a:a0:70:bb:a1:f0:1a:a9:48:84:56:f6:d1:24:6c:7b:fa:bc:
39:85:7f:e5:d4:a0:8e:63:4a:4d:71:1c:70:47:16:12:27:f0:
45:a1:1c:72:6d:98:6a:f8:93:dd:19:f7:cb:90:61:07:d5:3b:
c9:06:ec:5e:50:cb:a1:74:65:08:ff:4b:c9:4f:ff:fc:88:45:
1a:e0:15:25:a3:01:4a:49:7c:71:af:44:c1:3d:77:78:46:aa:
53:d9:85:31:1a:05:8d:b1:87:9f:e2:81:92:19:42:9f:ef:d0:
5e:6f:8b:e9:52:ee:10:d5:b4:97:89:fa:b1:3a:ff:09:46:27:
5f:4a:62:d3:3c:28:4e:83:1b:25:e0:18:23:72:7b:30:7c:b9:
85:11:ad:b3:3c:b3:e9:3c:1a:f1:f8:5f:01:7f:b0:5d:06:ef:
1f:8d:52:58:81:1e:4b:8f:d5:c5:d2:a9:9a:c0:bf:09:a5:13:
3b:62:dc:37:60:29:2f:a1:70:41:89:85:79:8e:b6:fd:fa:41:
d6:17:9a:94:86:50:8a:57:d0:3e:7d:36:44:65:07:fa:5f:00:
01:74:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:19:02 2026 by rpki-client