Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa
File: 323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa (raw, json)
Hash identifier: /qNIVuQCYehaZdPI+ARzaQSz87Jwlf1YOipudBjgj0o=
Subject key identifier: A6:F2:B6:94:89:FA:76:3E:68:14:EF:63:18:09:83:AC:E6:62:91:F1
Certificate issuer: /CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Certificate serial: 67EBD2FB051A328CBEF63EA06607C00BC6309DE5
Authority key identifier: DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa
Signing time: Fri 21 Mar 2025 19:04:22 +0000
ROA not before: Fri 21 Mar 2025 18:59:22 +0000
ROA not after: Fri 20 Mar 2026 19:04:22 +0000
asID: 273663
IP address blocks: 2804:8a58:ba00::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:eb:d2:fb:05:1a:32:8c:be:f6:3e:a0:66:07:c0:0b:c6:30:9d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Validity
Not Before: Mar 21 18:59:22 2025 GMT
Not After : Mar 20 19:04:22 2026 GMT
Subject: CN=A6F2B69489FA763E6814EF63180983ACE66291F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:7d:fa:1c:7f:35:6e:f2:36:ed:f5:dc:a5:
9f:8d:74:34:c3:aa:5c:07:5d:22:6c:ea:ab:20:bf:
2a:4c:6e:c7:67:eb:71:85:b2:f4:4f:34:54:95:16:
e2:cf:4e:af:60:dc:22:6f:ee:41:3b:a3:2b:75:74:
73:95:fb:bb:4e:cc:4c:cd:87:af:45:0b:0d:e7:f9:
95:cc:b3:8b:af:bc:35:5f:16:00:61:d3:dc:44:c5:
27:2c:4b:75:8b:ad:38:86:32:12:98:0a:e9:75:a4:
b9:eb:b2:2f:6b:ab:56:32:3c:0f:02:88:57:b6:ef:
05:c9:04:04:3b:c0:2a:4a:b6:6d:42:84:7a:e6:e2:
6d:74:ea:ee:0e:84:e5:15:53:73:14:e7:d2:a8:32:
a0:67:d9:3c:c9:df:c5:aa:d8:aa:cb:5e:88:6b:8c:
75:51:4d:88:95:90:38:79:16:0e:b0:6c:89:95:17:
88:b2:80:d8:84:ee:ff:c2:da:29:31:f7:ea:57:a3:
26:49:aa:dc:ea:a5:63:46:7b:ae:64:15:df:62:d2:
ea:ba:7e:b8:99:df:d1:17:f9:3c:9d:73:35:30:c6:
9c:40:cd:9b:50:7b:df:61:3b:70:57:d0:54:1d:a8:
b5:1a:ed:ae:4d:b3:25:61:e8:60:94:01:2b:e7:89:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F2:B6:94:89:FA:76:3E:68:14:EF:63:18:09:83:AC:E6:62:91:F1
X509v3 Authority Key Identifier:
keyid:DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a626130303a3a2f34302d3430203d3e20323733363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8a58:ba00::/40
Signature Algorithm: sha256WithRSAEncryption
86:66:a8:7e:e3:05:bb:6f:02:d7:b0:b2:7d:6f:8d:a7:bc:78:
78:ed:bd:79:bc:3f:bd:13:df:bc:1f:f7:d4:5a:0b:2f:3b:9c:
18:86:d5:ac:cf:b1:c9:c5:5b:dd:37:68:bf:7a:00:5a:61:f5:
de:b2:bb:61:59:bc:7b:1f:1e:a9:d9:ce:ac:6e:90:6e:fa:f9:
79:5d:82:c6:7a:c7:1c:0a:26:bd:38:fe:17:b9:7a:22:aa:c5:
bc:fc:bf:ec:ff:1a:f2:f9:22:04:35:34:87:96:90:7d:95:9f:
39:39:1d:9d:46:d2:5b:88:34:0d:85:7f:2c:c2:9c:9f:9f:e3:
09:40:8c:37:98:82:ae:e1:93:7b:29:28:15:3b:fa:c1:d5:d7:
2e:f1:95:4b:73:0c:a8:43:ba:5a:8a:a6:35:59:89:64:9e:f9:
5c:11:19:44:8a:25:55:7e:c7:14:37:36:1f:b1:2f:90:96:77:
ee:39:03:0e:25:e7:81:0b:86:c4:5b:00:1d:fd:6e:1c:36:6a:
c3:37:81:88:0f:be:64:65:53:dd:f9:c4:74:26:0f:78:47:62:
96:b6:91:3d:f4:dc:af:0c:c7:22:1e:59:bd:2f:6b:38:1b:b2:
46:c6:3b:61:24:71:9d:98:ec:8e:01:a4:ee:ea:7a:3f:3b:47:
24:2b:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:55:48 2025 by rpki-client