Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a3a2f33332d3333203d3e20323639353238.roa
File: 323830343a363630343a3a2f33332d3333203d3e20323639353238.roa (raw, json)
Hash identifier: hyDQZK29E+iKuOEQuGkCku98QPjq+YBU349/02+dXzo=
Subject key identifier: 86:54:12:E7:8C:0E:65:A0:BE:3C:84:5F:D1:4E:FC:2C:79:1E:3C:04
Certificate issuer: /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
Certificate serial: 19FE32EEBE833DD9504F731E68EB34CCD888236E
Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a3a2f33332d3333203d3e20323639353238.roa
Signing time: Mon 03 Mar 2025 12:30:02 +0000
ROA not before: Mon 03 Mar 2025 12:25:02 +0000
ROA not after: Mon 02 Mar 2026 12:30:02 +0000
asID: 269528
IP address blocks: 2804:6604::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:fe:32:ee:be:83:3d:d9:50:4f:73:1e:68:eb:34:cc:d8:88:23:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554
Validity
Not Before: Mar 3 12:25:02 2025 GMT
Not After : Mar 2 12:30:02 2026 GMT
Subject: CN=865412E78C0E65A0BE3C845FD14EFC2C791E3C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:06:09:07:e5:37:c9:dd:15:ff:d5:9d:3a:
e2:c8:b3:de:78:8c:f2:bd:9c:cb:90:1c:a3:d4:ef:
c9:d9:cb:ce:0f:d4:49:4a:8f:0b:49:16:4f:80:45:
aa:4e:20:b3:5a:25:8a:1f:e5:a3:66:ed:8d:d4:7d:
78:db:86:85:b3:68:dc:12:a6:21:cd:93:e8:56:78:
c0:f8:27:f5:bd:c8:4f:23:77:26:2b:95:b6:b7:5d:
a0:27:58:ca:f8:2d:70:d3:35:56:96:56:a1:8a:69:
74:24:25:5e:04:f6:d0:67:e8:15:9a:67:04:73:6e:
7a:4e:f3:f9:b4:ee:44:22:a1:eb:0f:c2:38:21:aa:
47:37:74:ba:9d:4a:3b:1a:49:f8:6e:0f:9a:04:20:
1e:97:a9:9c:77:2b:df:b1:6f:ec:8a:71:62:fc:21:
4e:62:1c:f3:9d:01:a7:39:f1:c2:fc:57:ff:91:6f:
fe:54:69:29:46:88:14:a3:b7:f2:a8:59:eb:84:3b:
92:e8:67:72:c6:e9:14:86:ae:87:d8:98:3a:bb:d5:
b3:cf:5a:36:ff:16:84:6c:aa:ab:38:44:37:df:1b:
e3:7d:41:9f:2e:36:bc:7b:83:27:97:78:fd:7e:3b:
5e:56:54:f8:bb:48:80:a6:5c:df:0e:6a:b5:46:48:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:54:12:E7:8C:0E:65:A0:BE:3C:84:5F:D1:4E:FC:2C:79:1E:3C:04
X509v3 Authority Key Identifier:
keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a3a2f33332d3333203d3e20323639353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6604::/33
Signature Algorithm: sha256WithRSAEncryption
15:a3:4c:19:95:6a:0f:63:f1:07:a6:44:15:ae:4d:a3:b5:bd:
a8:08:37:e1:cd:ed:18:85:05:88:be:29:69:39:d6:42:a5:0b:
ad:24:4e:62:a7:93:1c:6d:10:95:c8:37:b2:16:63:28:59:d8:
b1:fc:87:f7:dc:36:14:44:d6:ba:e2:f0:f0:2d:b8:e6:7c:e0:
4f:5e:d5:57:ff:20:bd:97:a5:cb:1f:c8:9f:fe:2e:07:db:0d:
13:21:6d:91:2f:83:3b:55:92:64:70:5c:04:6e:77:5c:ea:13:
52:93:d5:ac:3a:32:fd:0a:c7:ed:5b:33:3b:79:8e:f8:bd:79:
19:74:3e:fb:33:33:65:2a:b5:66:fd:b1:4b:ce:26:d2:39:f5:
55:6c:9e:28:ff:52:5d:fa:04:37:3d:d7:cb:47:88:66:5a:37:
ea:82:dc:f2:ed:fb:8c:2e:0a:58:61:2b:2d:3c:bf:b9:09:8b:
a8:e7:9c:80:f0:ff:de:3c:f4:43:f3:66:7a:c9:89:f4:e1:d0:
97:b3:84:06:75:72:be:d7:8d:e9:c3:c3:7a:9f:90:7c:34:e6:
1d:ad:6a:73:b4:12:52:16:e2:df:6e:0c:2b:49:1e:bd:2e:15:
f7:94:53:1b:75:d2:d0:ae:36:cb:48:5c:2a:13:10:b4:22:bc:
19:28:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:19:26 2025 by rpki-client