Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
File: 323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier: jNRlE2sbLp0JxGKhI1nfC4O8jA6jGd1U7y1oOENnOEI=
Subject key identifier: 59:55:C3:49:19:E7:C6:36:2C:BD:7A:43:93:D9:7B:E3:0F:DB:57:7F
Certificate issuer: /CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
Certificate serial: 50EBE9E82317E0E8E16D66E0D145D7B9E55CC984
Authority key identifier: 3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
Signing time: Tue 03 Jun 2025 00:27:03 +0000
ROA not before: Tue 03 Jun 2025 00:22:03 +0000
ROA not after: Tue 02 Jun 2026 00:27:03 +0000
asID: 264936
IP address blocks: 2804:3034::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:eb:e9:e8:23:17:e0:e8:e1:6d:66:e0:d1:45:d7:b9:e5:5c:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
Validity
Not Before: Jun 3 00:22:03 2025 GMT
Not After : Jun 2 00:27:03 2026 GMT
Subject: CN=5955C34919E7C6362CBD7A4393D97BE30FDB577F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:a2:70:2a:69:88:d2:ce:75:95:be:cb:02:
82:af:61:18:8d:c2:ab:a1:ac:9f:1c:cf:e5:62:80:
24:f4:35:4f:c7:c7:d8:2d:72:d2:d4:97:fc:50:3f:
6b:66:ec:ef:d1:c5:51:e1:b8:ba:40:9f:7f:f4:f9:
cd:f6:7b:1e:2e:68:5c:ea:cb:32:5b:30:45:9f:9b:
a8:d1:7b:51:e1:82:07:07:1c:f8:1f:21:5c:83:85:
4f:46:a5:23:0e:0c:ff:2d:b3:c0:2d:bd:99:06:04:
d0:2b:5f:a7:58:0a:7f:d1:bc:b3:3d:90:18:6c:45:
be:70:5c:ac:b6:85:67:ef:69:a9:99:2c:31:e6:61:
a1:da:ab:14:a9:19:23:65:50:7d:3b:f4:ac:cc:ba:
c7:25:74:25:4b:e6:ea:64:3d:cd:c7:78:f1:1c:45:
1c:2a:6d:59:97:32:3d:ad:ae:ec:79:4a:35:64:95:
b9:11:1d:2d:1e:58:30:8e:e8:49:cb:06:d2:a0:10:
cb:57:55:d3:05:8b:40:a8:05:6d:1f:07:40:0d:15:
77:db:88:d0:56:1b:7f:82:f7:12:cd:df:0a:38:2d:
0c:03:7e:e7:0a:22:4b:30:ff:f2:f5:14:e0:ca:10:
1c:bd:9c:da:55:cf:4a:21:a9:12:41:b7:ec:54:9a:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:C3:49:19:E7:C6:36:2C:BD:7A:43:93:D9:7B:E3:0F:DB:57:7F
X509v3 Authority Key Identifier:
keyid:3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3034::/44
Signature Algorithm: sha256WithRSAEncryption
9d:67:8b:02:bf:2a:c4:67:68:e3:e5:77:78:f7:12:b9:3d:ff:
59:80:00:97:4b:22:8d:14:6a:73:9e:1c:92:b8:08:70:24:fa:
12:8f:c1:99:ee:f5:ff:4c:61:fe:3f:2f:a0:b2:bb:f3:03:03:
12:1f:35:b1:b7:d3:00:13:54:df:5e:78:03:11:b7:bd:a5:be:
ec:89:58:ce:b3:0a:f8:a2:6e:9b:25:e2:30:a4:81:95:7b:52:
09:df:a6:24:8a:72:75:7c:60:25:74:ad:7c:39:ca:e1:f6:21:
47:6d:16:03:a5:e1:11:15:93:5f:28:d1:17:bd:f5:16:1a:c7:
e9:6e:53:ce:e7:3d:90:45:fc:d2:9a:83:25:69:80:4f:40:aa:
f8:1d:af:a6:7b:ef:15:02:48:5c:74:76:36:4a:8c:28:b8:70:
ba:f7:6f:ce:2a:7e:4e:3d:af:54:fc:30:cb:ef:7a:f8:ed:25:
43:20:dd:cb:08:22:e9:9f:bd:e1:27:7b:04:13:3e:4c:f9:6d:
94:27:34:bf:53:5f:22:63:45:bb:88:39:7d:26:12:ff:38:90:
18:72:4c:34:7d:b3:c5:ae:10:be:f2:4b:21:b7:81:60:b6:52:
73:f6:08:27:b7:a9:86:a3:7b:13:8b:9e:a0:51:ec:c4:d4:cc:
58:e5:c6:88
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUOvp6CMX4OjhbWbg0UXXueVcyYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M4RjBDRkM5QjM1RjMyODQwMkFEMjY5RjE0RDk0QkY2
QzVDNzM3MjAeFw0yNTA2MDMwMDIyMDNaFw0yNjA2MDIwMDI3MDNaMDMxMTAvBgNV
BAMTKDU5NTVDMzQ5MTlFN0M2MzYyQ0JEN0E0MzkzRDk3QkUzMEZEQjU3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgPKJwKmmI0s51lb7LAoKvYRiN
wquhrJ8cz+VigCT0NU/Hx9gtctLUl/xQP2tm7O/RxVHhuLpAn3/0+c32ex4uaFzq
yzJbMEWfm6jRe1HhggcHHPgfIVyDhU9GpSMODP8ts8AtvZkGBNArX6dYCn/RvLM9
kBhsRb5wXKy2hWfvaamZLDHmYaHaqxSpGSNlUH079KzMuscldCVL5upkPc3HePEc
RRwqbVmXMj2trux5SjVklbkRHS0eWDCO6EnLBtKgEMtXVdMFi0CoBW0fB0ANFXfb
iNBWG3+C9xLN3wo4LQwDfucKIksw//L1FODKEBy9nNpVz0ohqRJBt+xUmiOlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUWVXDSRnnxjYsvXpDk9l74w/bV38wHwYDVR0j
BBgwFoAUPI8M/Js18yhAKtJp8U2Uv2xcc3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNyNUh0TnVhQnRmcUNEM0xiVmdHb2F3dmlyaXdWNk5YWXlwYmEzcmFX
UG4vMC8zQzhGMENGQzlCMzVGMzI4NDAyQUQyNjlGMTREOTRCRjZDNUM3MzcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEYwQ0ZDOUIzNUYzMjg0
MDJBRDI2OUYxNEQ5NEJGNkM1QzczNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzcjVIdE51YUJ0ZnFDRDNMYlZnR29hd3Zpcml3VjZOWFl5cGJhM3JhV1BuLzAv
MzIzODMwMzQzYTMzMzAzMzM0M2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzNjM0
MzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKAQwNAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCdZ4sC
vyrEZ2jj5Xd49xK5Pf9ZgACXSyKNFGpznhySuAhwJPoSj8GZ7vX/TGH+Py+gsrvz
AwMSHzWxt9MAE1TfXngDEbe9pb7siVjOswr4om6bJeIwpIGVe1IJ36YkinJ1fGAl
dK18Ocrh9iFHbRYDpeERFZNfKNEXvfUWGsfpblPO5z2QRfzSmoMlaYBPQKr4Ha+m
e+8VAkhcdHY2SowouHC692/OKn5OPa9U/DDL73r47SVDIN3LCCLpn73hJ3sEEz5M
+W2UJzS/U18iY0W7iDl9JhL/OJAYckw0fbPFrhC+8ksht4FgtlJz9ggnt6mGo3sT
i56gUezE1MxY5caI
-----END CERTIFICATE-----
Generated at Fri Jun 20 14:01:36 2025 by rpki-client