Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa
File: 34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa (raw, json)
Hash identifier: xKhxgORBMBllGQj0qSel+73jZg4LVsE6kPvmBBcgi20=
Subject key identifier: 3A:4E:C5:F5:DF:C9:A1:93:32:F0:AB:F9:88:0A:AF:DC:89:C5:B4:7A
Certificate issuer: /CN=961C10291E95158CF12D8EAA6CC5D0B05DE85838
Certificate serial: 7EA970D34D508889E60E51F8EC97E11FE3E02ABB
Authority key identifier: 96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa
Signing time: Thu 06 Mar 2025 03:16:55 +0000
ROA not before: Thu 06 Mar 2025 03:11:55 +0000
ROA not after: Thu 05 Mar 2026 03:16:55 +0000
asID: 266973
IP address blocks: 45.225.228.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a9:70:d3:4d:50:88:89:e6:0e:51:f8:ec:97:e1:1f:e3:e0:2a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961C10291E95158CF12D8EAA6CC5D0B05DE85838
Validity
Not Before: Mar 6 03:11:55 2025 GMT
Not After : Mar 5 03:16:55 2026 GMT
Subject: CN=3A4EC5F5DFC9A19332F0ABF9880AAFDC89C5B47A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:fe:13:b0:2f:b1:89:1e:13:0f:ad:c1:fc:
16:26:83:dc:8d:66:49:17:2d:5c:47:fa:e6:f7:3d:
85:cc:c1:f1:15:09:53:87:c6:0a:52:12:dc:5c:47:
bc:02:0b:dd:c0:02:5f:89:ed:34:4f:5f:c0:21:18:
a4:bd:14:23:ec:fa:6c:3c:66:e5:d5:bb:95:d3:c6:
dd:23:36:22:c6:24:d1:99:99:8e:c2:bb:5e:8e:29:
f9:bf:c9:76:8d:3a:ab:7c:7c:9a:3f:17:72:c0:e5:
4a:75:a1:be:d4:eb:e6:03:5d:be:43:22:75:5a:cd:
18:4d:f8:85:5b:3b:a7:09:d5:52:92:87:08:29:b7:
81:b5:59:5a:50:73:4f:e1:cb:62:c3:0e:a0:be:a1:
b4:91:31:8a:d1:77:89:34:ea:6f:7c:25:39:2b:37:
86:a1:1d:c3:34:cb:eb:89:75:15:44:c1:c8:27:2e:
ff:3d:ec:23:6a:8c:11:73:a1:98:1e:05:d2:99:68:
f2:e9:80:dc:de:35:b5:9d:7a:3a:8a:e0:c1:16:52:
29:b5:42:b2:cd:e7:8f:f6:53:ce:d9:bc:7f:3a:13:
66:8b:e8:2b:a6:36:d2:3f:c3:0e:cd:c0:9b:d0:5a:
d4:8c:ff:0f:87:02:d7:5c:56:17:0f:8c:ad:e3:60:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4E:C5:F5:DF:C9:A1:93:32:F0:AB:F9:88:0A:AF:DC:89:C5:B4:7A
X509v3 Authority Key Identifier:
keyid:96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/34352e3232352e3232382e302f32322d3234203d3e20323636393733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.228.0/22
Signature Algorithm: sha256WithRSAEncryption
13:4f:e4:ba:3c:6d:7a:bf:a2:8e:9a:9b:b1:4d:33:4e:98:66:
b8:0e:40:12:e1:71:7e:40:bd:92:cf:df:fc:33:3d:66:53:75:
21:f5:b9:75:53:c0:aa:9d:ad:5e:3b:64:4b:9f:35:10:07:f0:
8d:4d:46:4d:d9:15:0f:c6:78:a8:6b:b2:a9:ea:b4:4d:66:fc:
33:2c:28:93:cc:99:00:fc:a5:f3:af:96:2e:4a:98:fb:d0:da:
b1:c8:85:ec:5e:b0:1b:8a:f6:50:e9:d0:37:39:fd:0d:4c:4e:
0a:b8:aa:46:55:34:8c:58:45:8e:cb:3e:bd:ba:bc:66:c3:37:
c7:f8:a3:4d:64:ea:7b:9f:14:7e:5a:da:7f:84:89:b3:6e:4c:
77:d5:07:91:02:ca:34:dd:7a:92:6c:33:aa:23:35:29:27:01:
e4:22:b8:e5:52:a5:1c:ad:20:d1:c7:5b:27:23:79:cc:b4:5b:
4c:d2:0b:b5:f3:82:d5:04:55:c8:48:39:9e:02:d6:aa:56:df:
de:41:85:43:a0:42:b8:78:eb:b4:09:53:a8:b2:54:8b:f8:27:
6c:dc:6a:23:52:a5:39:af:49:54:9c:d9:35:98:ad:c7:a1:72:
11:86:1a:48:99:87:00:43:fc:49:c1:d2:ad:60:5a:08:84:54:
76:78:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:49:17 2025 by rpki-client