Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3a2f33322d3332203d3e20323733363633.roa
File: 323830343a386135383a3a2f33322d3332203d3e20323733363633.roa (raw, json)
Hash identifier: wdoU0/3G7naKrZsiNjUMbIteHDMdVMC3snlVPk3EblE=
Subject key identifier: CA:33:E5:60:F3:C8:4C:35:D7:33:0E:62:B5:86:3D:41:AA:7E:BF:D7
Certificate issuer: /CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Certificate serial: 05268437613495F4C6C75B01CEA96F1EB1DB8B23
Authority key identifier: DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3a2f33322d3332203d3e20323733363633.roa
Signing time: Fri 21 Mar 2025 19:04:14 +0000
ROA not before: Fri 21 Mar 2025 18:59:14 +0000
ROA not after: Fri 20 Mar 2026 19:04:14 +0000
asID: 273663
IP address blocks: 2804:8a58::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:26:84:37:61:34:95:f4:c6:c7:5b:01:ce:a9:6f:1e:b1:db:8b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Validity
Not Before: Mar 21 18:59:14 2025 GMT
Not After : Mar 20 19:04:14 2026 GMT
Subject: CN=CA33E560F3C84C35D7330E62B5863D41AA7EBFD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:37:89:db:f4:68:ed:bf:ff:86:79:28:a1:32:
5e:60:51:91:87:69:dd:a1:29:d9:9f:9c:6b:ac:b8:
37:23:f3:7c:1a:5b:d8:e5:aa:1e:aa:04:61:e0:2f:
a6:c3:26:7f:0f:c7:e2:c2:ac:f6:56:3a:a0:ec:87:
c7:9a:37:34:cf:18:88:81:0f:2e:c6:d9:bf:86:60:
ca:b5:cd:f4:61:ea:3a:30:29:71:13:27:36:39:be:
60:0d:1a:07:5c:0e:44:4a:c1:3e:81:0d:b6:7c:37:
69:34:b5:9a:f7:6c:df:74:6b:5e:d9:a1:32:91:d1:
da:b0:11:99:5b:88:87:57:c4:fc:91:40:f0:d5:da:
7c:b1:7f:48:fd:ae:b7:ca:b6:5e:11:83:1b:3f:06:
15:51:8f:29:69:7c:c4:17:0c:67:dd:36:ed:0b:45:
0d:1a:56:ec:68:bf:ed:72:6f:a6:2a:4a:21:2c:95:
28:6d:b9:79:4f:bd:87:97:75:98:b0:a8:d7:73:e7:
f4:53:57:68:ff:de:da:45:d4:1b:31:e7:6c:be:db:
7c:38:f4:84:a8:d2:34:1a:f7:c7:fd:e3:35:50:a0:
70:49:c6:d5:23:c4:5b:b7:77:c3:72:0f:55:e3:3b:
32:00:86:54:be:d3:72:ea:8d:ff:52:8a:00:6c:08:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:33:E5:60:F3:C8:4C:35:D7:33:0E:62:B5:86:3D:41:AA:7E:BF:D7
X509v3 Authority Key Identifier:
keyid:DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3a2f33322d3332203d3e20323733363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8a58::/32
Signature Algorithm: sha256WithRSAEncryption
a2:72:7a:8e:fc:35:87:8d:fa:32:f1:dc:d9:ba:09:f0:ab:04:
e2:3b:49:ff:a4:ca:54:10:6e:2c:4f:0c:62:3c:96:77:82:7f:
86:5c:7f:79:f1:e6:1a:4b:f1:72:a2:e5:86:5c:8c:f0:c9:4a:
3d:11:84:e8:7b:0d:1e:8c:94:6b:d3:b2:01:00:97:8c:1e:6e:
56:c0:22:1e:3e:6d:51:20:11:23:6f:56:d6:91:1e:36:62:93:
e2:a0:8c:21:df:81:bb:36:63:93:65:46:c2:7f:21:f5:1a:77:
4f:f2:63:f1:61:c8:30:31:fc:80:3a:f4:ef:2c:ca:bc:4e:b9:
ee:dd:f9:d7:ed:f5:90:3e:6f:df:6d:55:57:3b:9b:49:3d:78:
9b:48:3e:4f:99:bd:3e:ea:5d:44:ae:68:2a:12:ab:59:9e:00:
af:1a:3b:f5:a8:df:60:9c:ea:b2:dd:20:3a:d6:f3:bb:ba:70:
81:36:96:35:78:51:79:5b:96:de:a0:a8:74:3c:e6:b9:e6:9d:
0b:94:1e:ab:d9:94:28:9d:34:59:0b:44:2e:25:cd:f9:6f:cc:
73:5c:d1:26:8b:95:3e:b5:38:b2:7d:e4:a4:8a:21:ef:c3:9b:
97:39:d8:24:bc:fa:57:5d:15:0a:de:c9:6b:eb:a4:36:67:6c:
c3:0f:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:46:31 2025 by rpki-client