Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35392e302f32342d3234203d3e20323638313438.roa
File: 34352e3137302e35392e302f32342d3234203d3e20323638313438.roa (raw, json)
Hash identifier: fH+8ZWzbvvsqMsWzR9QX9mvlIisuZ7O9/R+CHUmmgYo=
Subject key identifier: 58:6F:C2:2A:8F:1D:FC:F2:AB:0E:AE:99:74:07:91:E1:C7:34:FA:25
Certificate issuer: /CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Certificate serial: 365B6BF6549F9031DB0EA4A0BD9C9BB12956A136
Authority key identifier: 21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35392e302f32342d3234203d3e20323638313438.roa
Signing time: Thu 02 Apr 2026 00:37:15 +0000
ROA not before: Thu 02 Apr 2026 00:32:15 +0000
ROA not after: Thu 01 Apr 2027 00:37:15 +0000
asID: 268148
IP address blocks: 45.170.59.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5b:6b:f6:54:9f:90:31:db:0e:a4:a0:bd:9c:9b:b1:29:56:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372
Validity
Not Before: Apr 2 00:32:15 2026 GMT
Not After : Apr 1 00:37:15 2027 GMT
Subject: CN=586FC22A8F1DFCF2AB0EAE99740791E1C734FA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:70:32:5c:eb:bb:97:c3:b1:a4:ae:09:60:54:
6b:36:62:2a:69:83:af:01:53:55:34:97:2a:67:c5:
ca:b6:1a:bf:10:ba:67:8c:d0:63:b8:10:41:5f:28:
5f:7d:d1:70:87:17:43:82:b4:50:a3:d0:77:4f:bd:
f3:94:5a:c3:e6:c0:ff:b4:2f:b0:bf:37:03:ed:52:
5e:75:11:d2:97:71:ee:9c:06:86:a0:e3:9f:4f:ed:
32:8e:0e:8f:1a:cf:d0:86:0c:4f:6d:e0:5a:d1:e2:
76:9b:13:63:cb:c9:6e:9b:8d:72:be:84:c8:67:5a:
28:a3:3e:6e:a4:f1:1d:93:2b:08:85:e6:1e:cc:be:
cc:d0:72:ef:2b:7e:1a:eb:cc:69:4b:82:b5:89:d9:
aa:1c:0b:93:50:ce:67:64:db:52:7e:a0:39:0c:97:
a7:a0:ba:13:b8:88:28:15:2a:77:ab:f6:9f:09:be:
8d:df:f3:b2:89:89:c7:da:6a:4a:64:70:b7:8b:5f:
5c:77:9b:29:cc:80:4e:10:fe:6d:2e:08:6d:8d:bb:
9f:6d:56:9a:ba:04:e3:ed:0a:5e:c8:6c:33:02:61:
65:de:d5:e3:19:af:59:00:e0:32:49:07:54:eb:23:
9f:13:8b:c1:70:8a:2c:93:3c:40:87:17:41:85:ac:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:C2:2A:8F:1D:FC:F2:AB:0E:AE:99:74:07:91:E1:C7:34:FA:25
X509v3 Authority Key Identifier:
keyid:21:FD:5A:0A:6A:A8:4A:CE:DB:44:5F:1A:73:D0:7D:D3:C0:A4:A3:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21FD5A0A6AA84ACEDB445F1A73D07DD3C0A4A372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYn3eRtthtDyifuZD5URvVkmuBbuuFF6mUjWAkbGXLzb/0/34352e3137302e35392e302f32342d3234203d3e20323638313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.59.0/24
Signature Algorithm: sha256WithRSAEncryption
72:72:4b:45:8f:af:d9:44:27:86:0a:ad:04:03:a2:3e:3b:ea:
da:20:3f:46:2d:dd:c2:f6:87:24:f5:ec:f1:a4:4c:9a:c0:d6:
bd:8d:5c:30:ab:9f:04:bc:09:37:bf:5c:54:bc:92:0d:81:6a:
23:8a:33:71:7c:7b:05:db:7a:33:d5:e5:0e:0f:b6:d8:74:41:
cc:1b:7e:c0:71:0a:36:4e:26:d2:5e:b0:e4:fd:ca:63:05:a2:
75:ec:51:9e:77:c7:c4:09:c1:02:2f:bb:5b:bd:6e:6a:05:9b:
e2:5c:34:b4:ff:e9:1d:2f:99:0e:bd:04:6a:a3:4e:2f:f9:d5:
ae:36:ff:60:b9:27:c7:e9:fd:e0:6f:e5:36:c2:f5:d1:f3:b1:
a4:2f:18:1e:0c:00:32:7c:1a:9b:38:04:ed:2f:a8:09:0b:40:
45:76:81:61:38:b0:01:c0:93:aa:5a:3c:64:b4:54:ae:6a:e7:
fa:d8:99:e4:66:3c:de:0b:60:2a:f4:bc:13:da:de:77:8b:5e:
e3:ad:ec:7d:31:e0:d2:a7:35:8e:c2:01:68:ba:43:6d:a0:71:
1b:4c:2a:5d:db:1a:97:40:71:d9:88:27:ce:96:8e:ef:5c:72:
f6:be:c4:66:eb:bb:7f:22:ee:80:31:4a:2e:4d:3d:07:15:97:
a9:8d:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:19:00 2026 by rpki-client