Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa
File: 323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier: 8qNv+Zmw7Icb0hRJfgINpr3TQIMwkEvXOdQLoj3Lxcs=
Subject key identifier: 57:35:2F:0D:CA:07:9B:4A:48:DF:5D:36:DD:C3:E9:7A:FC:9A:6A:53
Certificate issuer: /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial: 0347153F1753F32EB23107F0320D80B8918C9CC5
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa
Signing time: Wed 16 Apr 2025 15:05:39 +0000
ROA not before: Wed 16 Apr 2025 15:00:39 +0000
ROA not after: Wed 15 Apr 2026 15:05:39 +0000
asID: 264422
IP address blocks: 2804:1e58:2::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:47:15:3f:17:53:f3:2e:b2:31:07:f0:32:0d:80:b8:91:8c:9c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Validity
Not Before: Apr 16 15:00:39 2025 GMT
Not After : Apr 15 15:05:39 2026 GMT
Subject: CN=57352F0DCA079B4A48DF5D36DDC3E97AFC9A6A53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:9f:29:f8:a3:20:d9:cd:f0:7f:ca:22:cd:
f7:05:56:d1:97:ed:eb:71:a0:dd:b6:d8:47:87:d8:
15:33:c1:7f:aa:b1:3f:59:ba:95:89:c6:4a:bf:37:
5b:71:4e:8f:e0:d6:26:49:54:2b:90:47:2f:90:f1:
89:14:60:50:a1:1e:67:6b:e2:57:39:c0:4d:79:33:
3c:c6:62:81:a4:2a:fb:0c:6b:59:97:4c:bb:49:b1:
5c:27:da:12:1b:10:bf:66:ad:94:e0:02:0a:94:0b:
16:ee:5b:43:bf:3a:01:e8:7c:7e:62:d0:98:ee:c3:
51:5c:5d:f4:c9:cf:c0:d7:ce:24:d6:42:7d:24:94:
c9:a8:98:d9:03:0e:60:e2:fd:7c:43:50:a4:cb:54:
32:2b:99:10:5b:bc:0e:52:45:3b:3d:98:1b:b3:42:
98:58:d0:10:c4:a6:52:3d:66:55:7c:d7:20:5c:60:
7f:ed:04:87:ec:e9:bb:16:15:11:85:f7:6c:5b:9e:
49:f8:84:f1:5e:32:50:da:5a:1f:ff:2b:28:76:a8:
16:d0:f2:6e:80:76:04:d0:c9:96:59:72:31:c3:ed:
09:a1:85:c0:57:ea:61:38:42:64:18:97:36:a7:6f:
4b:6a:4c:32:1b:ae:20:c6:48:c8:9f:01:4f:88:fb:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:35:2F:0D:CA:07:9B:4A:48:DF:5D:36:DD:C3:E9:7A:FC:9A:6A:53
X509v3 Authority Key Identifier:
keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a323a3a2f34382d3438203d3e20323634343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e58:2::/48
Signature Algorithm: sha256WithRSAEncryption
17:38:cd:e8:73:a2:81:b1:3e:ea:de:0a:86:d9:ee:ff:1e:a6:
85:a2:1e:37:b1:0b:bf:5e:94:27:6f:35:72:67:9a:80:3f:48:
c3:a3:c1:be:45:af:67:b4:48:66:74:31:89:79:f6:3d:09:80:
65:69:85:2f:ec:44:f2:d8:52:90:e0:37:c4:cf:2c:40:c5:9c:
d1:74:2e:d6:98:dd:09:26:68:8f:19:0d:5b:dc:41:32:7b:2e:
d0:40:d1:5a:d2:d9:f1:19:2a:9f:06:e9:be:4a:0c:ea:82:5c:
4c:ab:b9:39:cb:10:88:9b:0d:85:85:1c:f2:40:3b:32:cb:19:
76:e1:17:a5:4c:f9:99:76:e6:34:4a:dd:55:d7:fd:ae:b4:72:
fc:24:f8:f0:0e:59:92:b6:7a:31:df:b2:53:ee:7f:64:23:db:
18:1c:1a:84:58:4c:75:ef:dc:6a:66:9a:bc:91:1e:48:f8:a9:
07:ba:dd:2b:4c:f6:fc:93:a8:97:ac:e7:e1:e0:fb:3c:1c:98:
17:72:4b:83:a5:b0:a5:67:97:b3:7f:b8:f5:81:de:56:c0:d9:
02:ae:a8:f5:21:8c:a3:5b:38:5c:b2:12:43:3d:4f:d4:13:1b:
c5:e3:b7:8f:6b:0c:f6:f4:88:38:e2:0c:a2:36:89:fb:2c:78:
86:ec:74:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:02:25 2025 by rpki-client