Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/34352e3232382e39362e302f32322d3234203d3e20323637303538.roa
File: 34352e3232382e39362e302f32322d3234203d3e20323637303538.roa (raw, json)
Hash identifier: 5FNu6OiEs92vCxFqtAHez4FJ3a9UuGefadMQFR0f41I=
Subject key identifier: CE:AD:6E:6C:91:4C:85:B9:86:C2:03:A5:B8:CC:ED:D1:61:D3:E6:AD
Certificate issuer: /CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
Certificate serial: 06EBC5E8F7E27717F1384E6E90D78475E679AFF3
Authority key identifier: 9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/34352e3232382e39362e302f32322d3234203d3e20323637303538.roa
Signing time: Thu 06 Mar 2025 06:51:54 +0000
ROA not before: Thu 06 Mar 2025 06:46:54 +0000
ROA not after: Thu 05 Mar 2026 06:51:54 +0000
asID: 267058
IP address blocks: 45.228.96.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:eb:c5:e8:f7:e2:77:17:f1:38:4e:6e:90:d7:84:75:e6:79:af:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
Validity
Not Before: Mar 6 06:46:54 2025 GMT
Not After : Mar 5 06:51:54 2026 GMT
Subject: CN=CEAD6E6C914C85B986C203A5B8CCEDD161D3E6AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:36:22:af:ba:bb:b6:8e:41:c9:b7:98:81:
d8:8f:52:e8:08:2b:ef:e8:92:b3:5c:36:07:c5:1d:
84:7d:79:b8:3f:41:e3:db:8a:f1:b7:d0:84:8f:0e:
45:8d:08:cf:3e:20:fd:42:1e:32:04:0e:b8:55:af:
9f:45:0c:bd:ee:3d:d3:31:20:12:e5:ad:91:3d:2b:
55:4e:54:c0:65:89:1b:27:22:e5:15:32:27:7e:25:
60:0e:b3:6c:cf:dc:a3:64:bf:ae:e8:90:fd:fb:c5:
88:1a:5b:60:74:73:59:72:94:b9:b2:68:f5:74:36:
44:94:28:2a:96:21:35:59:3f:88:b8:f8:8e:9a:a7:
e1:60:43:ce:e7:a1:ed:9d:b3:b0:bd:26:34:34:e1:
0d:7d:80:d4:01:df:7c:bf:75:a1:c5:a6:c4:56:79:
c5:81:d3:7c:b9:e5:a9:1f:54:12:8a:2a:34:d1:ff:
3f:42:49:3a:84:19:80:86:6e:05:67:9e:d1:3b:da:
3f:71:f0:3e:bc:58:2e:76:d4:24:c8:06:3f:64:e5:
ab:28:e5:e5:16:3a:65:83:93:23:39:e5:ad:55:77:
48:ee:cf:d4:e7:43:52:e1:39:d5:4e:9a:aa:80:fb:
76:f3:bb:9b:10:ba:9e:24:87:f5:2e:5e:c2:ff:ed:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:6E:6C:91:4C:85:B9:86:C2:03:A5:B8:CC:ED:D1:61:D3:E6:AD
X509v3 Authority Key Identifier:
keyid:9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/34352e3232382e39362e302f32322d3234203d3e20323637303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:13:b4:59:6d:52:71:f2:60:51:50:90:17:b5:a8:a6:63:14:
60:01:b0:83:ca:31:29:d0:6b:4d:f9:ef:6f:7f:10:9d:a5:48:
a6:4f:2c:48:41:79:0a:03:fd:ae:40:53:b2:46:8d:42:ce:db:
8c:61:35:3e:7e:9a:e4:83:b9:f5:3b:8c:b5:8e:3c:4c:8e:9f:
68:26:77:d5:3f:95:ae:2a:94:01:f5:29:17:62:e4:76:bd:fa:
0f:0c:de:be:b9:10:93:99:83:aa:11:52:55:ad:60:0d:35:42:
a5:3c:c9:12:cf:1e:e9:27:2b:59:1d:01:d8:a8:db:74:cb:22:
b4:a7:66:5f:64:88:78:5d:60:8a:a8:57:36:d1:8f:4d:e7:a6:
88:f3:9a:2a:5e:79:cb:bb:39:2c:02:f8:bc:df:31:39:b4:3b:
bd:8a:3d:a6:70:c0:7b:05:95:eb:ba:c0:a0:16:ce:1d:23:36:
f0:1a:ec:b8:9e:ee:ba:74:ec:ec:de:a9:5f:a4:f8:8d:dc:86:
cb:0a:bc:3d:71:56:8d:13:00:4f:74:5a:f6:38:fe:8f:3b:da:
df:63:78:47:ed:e5:7f:c4:c6:62:a4:55:41:94:f8:0e:79:bc:
c8:e2:d2:b8:05:cc:dc:22:46:0b:78:12:80:ea:64:ce:a8:a8:
cd:e7:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:21:04 2025 by rpki-client