Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a383130303a3a2f34302d3430203d3e203238353837.roa
File: 323830343a6461303a383130303a3a2f34302d3430203d3e203238353837.roa (raw, json)
Hash identifier: USiPGTJ0OicJtk6OQrEept0nleSUhg4joVyE+GO8SdI=
Subject key identifier: 69:46:08:25:D6:41:11:7C:B8:69:C1:35:6D:1A:ED:61:C9:01:1A:26
Certificate issuer: /CN=B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568
Certificate serial: 09569CA4567D035FE4CDD70A635ADBB3DA8A6834
Authority key identifier: B8:65:B5:C9:5F:A0:F7:3E:B9:6D:28:D2:7A:CF:52:E0:D5:EB:F5:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a383130303a3a2f34302d3430203d3e203238353837.roa
Signing time: Tue 18 Mar 2025 12:33:58 +0000
ROA not before: Tue 18 Mar 2025 12:28:58 +0000
ROA not after: Tue 17 Mar 2026 12:33:58 +0000
asID: 28587
IP address blocks: 2804:da0:8100::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:56:9c:a4:56:7d:03:5f:e4:cd:d7:0a:63:5a:db:b3:da:8a:68:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568
Validity
Not Before: Mar 18 12:28:58 2025 GMT
Not After : Mar 17 12:33:58 2026 GMT
Subject: CN=69460825D641117CB869C1356D1AED61C9011A26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:97:c1:e0:3f:8a:01:a5:e8:1e:28:5e:8a:
07:bc:12:63:53:34:25:ad:13:42:f8:92:a2:69:6f:
c3:2a:8c:96:25:d5:09:88:47:ac:26:bc:ab:1d:57:
f3:6f:89:a9:83:7c:85:e9:4c:d1:b7:27:cb:b9:6f:
14:a8:51:ec:4b:a6:6d:b7:a6:00:42:1d:26:8e:77:
cf:29:64:d3:93:45:9b:48:bf:33:4d:c6:04:70:cd:
0d:27:0a:41:18:d6:ae:51:aa:ef:d1:76:f4:1f:29:
e5:92:d1:32:1c:7d:b1:00:0d:82:cc:4a:3a:36:92:
95:ae:14:f4:d3:35:c5:58:54:82:c2:8c:90:c8:df:
0e:56:1c:0d:75:9b:e5:28:aa:88:72:09:18:82:34:
bb:cc:ef:e9:5d:ac:e7:08:e1:a8:f7:38:17:05:69:
ab:74:8f:64:91:17:79:65:6f:cc:d7:eb:7b:da:cb:
a1:a4:8d:67:64:2a:b5:53:00:b3:d3:1d:3e:d0:f5:
d8:49:28:84:48:94:81:6a:83:98:bf:ea:1c:bf:d4:
13:a3:ab:ac:24:c6:40:c3:3e:c4:35:62:d1:6b:7b:
7d:a0:a6:94:8d:15:4d:ad:e5:b6:c6:cc:f5:7e:2a:
cc:43:ef:d2:d7:dc:b7:f2:45:25:fb:91:00:01:84:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:46:08:25:D6:41:11:7C:B8:69:C1:35:6D:1A:ED:61:C9:01:1A:26
X509v3 Authority Key Identifier:
keyid:B8:65:B5:C9:5F:A0:F7:3E:B9:6D:28:D2:7A:CF:52:E0:D5:EB:F5:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/323830343a6461303a383130303a3a2f34302d3430203d3e203238353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:da0:8100::/40
Signature Algorithm: sha256WithRSAEncryption
2f:98:11:01:cb:34:8e:5b:bb:37:e5:89:a1:ad:02:03:98:31:
e3:3f:7f:05:c2:28:bb:6d:96:87:9c:7c:58:43:f8:b9:36:18:
17:3b:a1:9b:0f:f0:48:47:7e:3e:e5:55:df:f2:27:ce:c1:12:
19:3c:a0:01:d2:77:03:3c:b5:54:9c:78:ab:06:a8:d7:70:25:
d8:b4:5b:38:08:e8:f0:68:e6:bb:d8:5b:f0:d9:83:32:91:1a:
a5:a2:86:1c:b5:85:4e:c2:25:c1:31:30:16:61:ef:93:4e:0c:
a8:1e:3d:bb:6a:18:1f:ba:30:52:53:80:87:bf:35:1b:e3:54:
57:23:9a:0f:af:78:25:8d:a7:23:bc:d3:cb:f7:ed:1f:34:5b:
ee:8b:de:4b:b6:09:e4:16:53:10:d0:90:c0:f9:fa:f9:78:ba:
ba:cd:6d:48:3e:47:98:9e:73:45:5d:53:0c:6c:03:96:69:b9:
07:c2:c1:26:a4:2c:45:68:f6:fd:11:c5:8a:cb:ec:f7:81:0b:
94:5b:5a:3f:d8:53:24:86:3e:e6:f6:a1:02:75:ff:f7:39:6f:
eb:d2:b0:67:14:44:d2:6f:d2:aa:4e:59:b3:fb:50:87:4c:0f:
45:3a:b1:9f:47:04:ec:a1:30:80:01:00:ef:1f:95:fa:d8:b3:
1a:c6:b0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:22 2025 by rpki-client