Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa
File: 323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa (raw, json)
Hash identifier: udt73hJ6mTnKst4V5/ZqgwLYAS+bAG7JtXK+0RhSMeM=
Subject key identifier: FA:D9:54:6D:5E:9B:70:4B:69:D4:9E:95:05:8A:10:4E:08:41:10:9F
Certificate issuer: /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial: 72A726492BE12C2A27940A89D48389095705E7F7
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa
Signing time: Wed 16 Apr 2025 15:05:44 +0000
ROA not before: Wed 16 Apr 2025 15:00:44 +0000
ROA not after: Wed 15 Apr 2026 15:05:44 +0000
asID: 264422
IP address blocks: 2804:1e58:9000::/46 maxlen: 46
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a7:26:49:2b:e1:2c:2a:27:94:0a:89:d4:83:89:09:57:05:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Validity
Not Before: Apr 16 15:00:44 2025 GMT
Not After : Apr 15 15:05:44 2026 GMT
Subject: CN=FAD9546D5E9B704B69D49E95058A104E0841109F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:07:9b:8c:ea:d6:97:a2:c2:70:7a:23:d5:
d3:d0:76:ea:fe:e2:cf:c6:a4:a7:fe:17:a3:8d:64:
4d:4c:a2:18:fd:d4:db:59:f2:2a:c0:26:54:72:44:
3e:b4:8f:20:2a:ec:91:7b:65:7a:09:d4:f4:19:b4:
e7:fc:b2:34:ca:67:c9:bb:1f:4f:aa:99:a0:f3:fc:
fc:5a:1d:d6:4e:7c:76:c1:8f:f3:7e:76:c8:24:d7:
eb:12:e6:fe:7c:64:3a:06:ad:10:3f:40:d8:91:85:
2c:5c:72:09:0e:96:52:2e:5b:84:fa:73:83:23:7c:
3f:24:8b:38:59:6b:f2:99:24:9d:b2:85:77:f7:08:
9f:f8:73:f5:2a:61:48:4b:4e:d3:0c:19:1f:cd:f1:
03:06:e5:76:01:d4:84:19:ad:fc:d4:79:f7:8e:81:
76:a0:a6:33:33:b4:e2:49:f4:7f:1d:be:90:53:f7:
f5:73:ee:40:a4:e5:2c:e4:1e:c0:9f:9b:78:70:13:
b9:58:e7:29:ab:b0:ef:fc:db:a5:61:c5:52:55:c9:
41:7a:85:71:8e:e5:da:dc:24:0c:4f:bb:a2:f0:87:
7e:a4:0c:05:6a:f4:c5:d3:0e:d1:ec:1b:94:b1:cd:
12:cc:be:d4:6d:34:0a:4f:52:98:68:b3:a1:ee:97:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:54:6D:5E:9B:70:4B:69:D4:9E:95:05:8A:10:4E:08:41:10:9F
X509v3 Authority Key Identifier:
keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/323830343a316535383a393030303a3a2f34362d3436203d3e20323634343232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e58:9000::/46
Signature Algorithm: sha256WithRSAEncryption
b4:b5:bd:61:19:07:81:2e:46:73:ff:3c:f6:31:35:07:04:ec:
18:d7:ff:55:17:fa:16:85:c5:c4:24:3d:fa:a2:f1:c8:2a:52:
e3:7d:fe:aa:a7:ff:d0:f6:9e:0b:e4:20:7e:05:89:21:f2:43:
38:b7:5e:d8:90:70:00:5a:28:f7:cb:51:cd:90:d9:b3:6e:07:
ed:8b:d4:ed:63:bb:d2:7f:df:b9:5d:e7:9f:a9:99:62:46:dd:
bf:87:1e:0f:19:2d:74:a9:3c:4e:cb:4e:ab:fd:90:7a:b7:19:
44:b2:8b:81:c4:7a:8c:47:7a:3b:b4:19:6c:6f:0e:bb:b4:f6:
57:6c:f6:2f:fd:1f:07:b8:27:7a:64:89:d1:d7:ed:12:ee:08:
30:d7:ac:29:2e:58:38:2d:40:c2:5e:ee:61:a0:34:ed:11:64:
2b:e9:bb:39:ab:6e:0d:3e:26:34:45:89:ca:c5:14:d3:0f:92:
ee:26:a5:e0:95:27:70:5f:81:97:e8:c9:53:f9:48:13:40:15:
81:9a:97:a3:a8:64:ad:bc:04:5b:9c:34:b4:99:73:ad:8c:9f:
5d:5b:c1:fb:2d:29:16:71:df:58:3a:04:7f:1c:14:a3:42:8c:
54:7f:f8:b1:01:04:ec:14:00:43:20:29:7f:f2:91:50:9d:f9:
df:a4:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:56:42 2025 by rpki-client