Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
File: 323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (raw, json)
Hash identifier: KsXhP23LyKhP+VwMJBww4wupe8AMjKmkTFxDx5EaaaA=
Subject key identifier: DC:DE:EC:28:E5:E6:F1:B8:3B:7D:46:92:0E:49:B5:09:7A:17:A1:90
Certificate issuer: /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial: 6AC69A2A79719406247C10B24DB5E78BEE74B9EA
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
Signing time: Fri 07 Mar 2025 05:11:16 +0000
ROA not before: Fri 07 Mar 2025 05:06:16 +0000
ROA not after: Fri 06 Mar 2026 05:11:16 +0000
asID: 262462
IP address blocks: 2804:4bc::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c6:9a:2a:79:71:94:06:24:7c:10:b2:4d:b5:e7:8b:ee:74:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Validity
Not Before: Mar 7 05:06:16 2025 GMT
Not After : Mar 6 05:11:16 2026 GMT
Subject: CN=DCDEEC28E5E6F1B83B7D46920E49B5097A17A190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:b7:d1:1a:f0:68:3d:cd:5c:02:c3:a5:fb:
33:45:e8:cd:73:66:e2:e2:d7:f6:69:c2:04:bc:c4:
4d:31:1d:e2:2f:02:a9:63:18:56:bc:d9:61:11:27:
1b:ea:ab:d0:f6:6f:8b:55:49:88:8d:c7:24:54:e7:
63:f9:ed:ad:af:ef:56:91:c3:bd:5b:3b:3a:cf:96:
c1:94:9a:43:34:79:00:2b:df:a9:e2:ce:17:b0:03:
30:3a:81:0d:79:cd:a3:1c:7a:71:29:22:16:3c:44:
55:b3:b1:ec:8f:ae:b6:f6:f4:a8:b8:ec:92:fd:28:
6a:3f:54:b8:b4:4d:72:8a:43:18:ff:d1:c8:46:15:
e6:70:79:07:c3:72:86:ef:b3:24:07:aa:d0:c4:ff:
ff:64:28:d1:2d:79:55:bf:1e:a6:3c:a9:1f:63:af:
42:bb:34:67:06:e8:34:ea:9f:42:c6:58:be:f3:04:
25:52:cc:ab:30:cf:b2:93:1a:0f:53:8e:a3:16:74:
f4:e2:c0:77:08:b5:b8:1e:43:73:91:b3:7a:44:8d:
ef:6c:f9:d9:44:c6:01:af:56:84:ff:ef:85:44:53:
59:da:b6:48:87:ad:28:da:e5:e0:77:97:2f:2d:cf:
00:ac:91:a6:cd:d0:a0:16:08:99:b9:3b:b0:dc:8d:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DE:EC:28:E5:E6:F1:B8:3B:7D:46:92:0E:49:B5:09:7A:17:A1:90
X509v3 Authority Key Identifier:
keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bc::/32
Signature Algorithm: sha256WithRSAEncryption
97:3a:7e:19:3b:d2:dc:ab:5e:61:39:38:75:2c:86:b8:e2:3f:
54:c2:ba:73:09:bf:2c:b9:9a:26:bb:ae:1f:b0:2d:f5:76:0e:
5d:33:21:96:65:f5:82:de:ea:e1:09:e6:c8:ed:f6:6e:f8:0f:
f7:60:17:d4:36:ea:5c:12:ef:3c:8f:0d:66:7f:d3:d8:43:12:
54:d2:18:b4:0f:be:ef:78:af:12:f6:48:31:52:c3:b4:e4:ec:
25:f3:7f:d9:f6:c5:e2:0b:67:bf:ff:d0:0e:88:ed:ef:73:89:
16:e3:e0:48:46:75:b3:a2:58:d5:e1:7b:17:29:bc:99:f7:39:
65:ec:0c:5c:02:87:5f:07:7b:7c:39:15:67:37:34:ed:e4:a0:
99:c7:b3:54:ab:f1:97:f6:56:3a:0f:5c:de:2b:cc:af:63:52:
4b:aa:d7:0a:26:83:3b:81:4f:f4:4b:1a:fd:ac:0d:25:ed:13:
fc:1e:af:87:31:d9:1b:b1:ff:6a:11:04:00:38:0b:63:a0:9d:
9b:0f:07:16:3f:7a:76:d8:f9:95:53:10:24:11:ae:5f:de:8d:
c8:a8:5f:45:79:62:fb:71:5b:4b:24:3d:eb:fb:14:60:52:cd:
f0:5a:67:44:2c:c3:ad:d4:c5:e1:ba:eb:64:38:ea:a6:0f:3d:
a0:3a:dc:e0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUasaaKnlxlAYkfBCyTbXni+50ueowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRDODk2MERCNTg1M0JCNjBBNDkxODc0NzhBQTVFNjFE
QTBEMzI4ODAeFw0yNTAzMDcwNTA2MTZaFw0yNjAzMDYwNTExMTZaMDMxMTAvBgNV
BAMTKERDREVFQzI4RTVFNkYxQjgzQjdENDY5MjBFNDlCNTA5N0ExN0ExOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjubfRGvBoPc1cAsOl+zNF6M1z
ZuLi1/ZpwgS8xE0xHeIvAqljGFa82WERJxvqq9D2b4tVSYiNxyRU52P57a2v71aR
w71bOzrPlsGUmkM0eQAr36nizhewAzA6gQ15zaMcenEpIhY8RFWzseyPrrb29Ki4
7JL9KGo/VLi0TXKKQxj/0chGFeZweQfDcobvsyQHqtDE//9kKNEteVW/HqY8qR9j
r0K7NGcG6DTqn0LGWL7zBCVSzKswz7KTGg9TjqMWdPTiwHcItbgeQ3ORs3pEje9s
+dlExgGvVoT/74VEU1natkiHrSja5eB3ly8tzwCskabN0KAWCJm5O7DcjZrRAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU3N7sKOXm8bg7fUaSDkm1CXoXoZAwHwYDVR0j
BBgwFoAUlMiWDbWFO7YKSRh0eKpeYdoNMogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpvSE1zUkRBMkdNQjRTVVJkcmk5Y29GblBCUUJHNWVpaEtZZ2hGbWJu
VTQvMS85NEM4OTYwREI1ODUzQkI2MEE0OTE4NzQ3OEFBNUU2MURBMEQzMjg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Qzg5NjBEQjU4NTNCQjYw
QTQ5MTg3NDc4QUE1RTYxREEwRDMyODguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRab0hNc1JEQTJHTUI0U1VSZHJpOWNvRm5QQlFCRzVlaWhLWWdoRm1iblU0LzEv
MzIzODMwMzQzYTM0NjI2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM0
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBLwwDQYJKoZIhvcNAQELBQADggEBAJc6fhk70tyr
XmE5OHUshrjiP1TCunMJvyy5mia7rh+wLfV2Dl0zIZZl9YLe6uEJ5sjt9m74D/dg
F9Q26lwS7zyPDWZ/09hDElTSGLQPvu94rxL2SDFSw7Tk7CXzf9n2xeILZ7//0A6I
7e9ziRbj4EhGdbOiWNXhexcpvJn3OWXsDFwCh18He3w5FWc3NO3koJnHs1Sr8Zf2
VjoPXN4rzK9jUkuq1womgzuBT/RLGv2sDSXtE/wer4cx2Rux/2oRBAA4C2OgnZsP
BxY/enbY+ZVTECQRrl/ejcioX0V5YvtxW0skPev7FGBSzfBaZ0Qsw63UxeG662Q4
6qYPPaA63OA=
-----END CERTIFICATE-----
Generated at Wed Jun 18 16:40:02 2025 by rpki-client