Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3836383a3a2f33322d313238203d3e203238363439.roa
File: 323830343a3836383a3a2f33322d313238203d3e203238363439.roa (raw, json)
Hash identifier: qU57tNZIy1k5v9yC3O4K7+MauOYGEsvARTuWiK1CucM=
Subject key identifier: A4:A3:D0:C7:3D:BA:84:29:1F:45:75:BD:12:02:58:78:D8:F0:E3:87
Certificate issuer: /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial: 77E5C3BD1B1D96CE840C2ADDC5A74617DFE779BE
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3836383a3a2f33322d313238203d3e203238363439.roa
Signing time: Tue 06 May 2025 00:58:17 +0000
ROA not before: Tue 06 May 2025 00:53:17 +0000
ROA not after: Tue 05 May 2026 00:58:17 +0000
asID: 28649
IP address blocks: 2804:868::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e5:c3:bd:1b:1d:96:ce:84:0c:2a:dd:c5:a7:46:17:df:e7:79:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Validity
Not Before: May 6 00:53:17 2025 GMT
Not After : May 5 00:58:17 2026 GMT
Subject: CN=A4A3D0C73DBA84291F4575BD12025878D8F0E387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:ca:3f:92:69:e8:de:de:58:5a:82:8e:ee:
74:5b:78:ce:38:bc:b6:2e:9c:bc:e8:7d:f3:57:9a:
ec:d9:0b:d7:74:1d:74:57:9f:23:87:28:c1:8e:0e:
c5:97:f8:27:1f:76:86:3a:d5:b7:06:6b:71:d3:c6:
7c:25:52:64:b0:ad:78:39:24:8e:ec:35:b1:7c:f6:
e6:67:ff:49:69:ec:9a:0b:c0:61:c0:4f:40:3c:fc:
69:d7:a3:b0:8c:67:a0:97:71:66:0c:f3:26:8f:22:
81:47:ce:e6:54:72:6a:11:fd:45:2c:5f:53:cd:d8:
27:a4:dc:6f:af:ea:2a:44:47:45:0c:ee:7e:b1:c0:
26:d0:89:99:c6:05:f4:4c:6d:3a:18:e5:40:e0:92:
1a:f4:59:06:03:a1:47:b1:ac:5f:86:35:d6:6e:2c:
b1:d0:10:7e:3a:80:9c:c4:c8:3a:ea:15:69:4f:52:
ca:4d:71:26:a0:39:6e:b9:90:de:a5:ad:02:39:61:
98:28:b8:d6:67:b4:2d:d9:69:04:c9:e0:b9:eb:f9:
98:29:53:58:02:6b:22:c8:2b:20:2f:9d:3d:86:93:
36:80:ea:a3:78:5d:dd:bf:69:17:57:e2:c1:8d:d8:
45:f2:08:e7:ce:40:30:8f:f9:fc:e8:66:96:d9:3f:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A3:D0:C7:3D:BA:84:29:1F:45:75:BD:12:02:58:78:D8:F0:E3:87
X509v3 Authority Key Identifier:
keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3836383a3a2f33322d313238203d3e203238363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:868::/32
Signature Algorithm: sha256WithRSAEncryption
08:4e:1a:76:ec:58:d6:c4:b3:e5:b3:96:dc:fe:4a:66:7d:19:
89:2f:db:42:b8:44:3f:4f:de:5a:71:24:ff:93:d5:71:18:ec:
bd:03:a1:11:80:4b:be:22:cb:07:17:61:3a:d7:04:1d:cb:bf:
b9:19:23:4a:70:30:75:df:9e:85:bb:60:b7:84:04:fd:d6:17:
9e:df:35:f1:8b:f8:6c:9f:da:4c:70:b5:b8:84:68:02:ae:4e:
c7:c4:78:db:e0:38:47:48:0f:3d:32:99:ea:ed:cd:be:e7:f5:
50:00:22:87:45:ad:bd:5f:33:6f:be:59:1e:ca:1b:f7:d0:d7:
bf:a3:4f:6f:60:16:2b:de:64:25:0e:c0:33:f7:9d:c6:72:fc:
87:36:5a:ba:f2:e5:e2:c7:aa:6b:d5:09:7f:f4:53:7d:39:86:
85:2d:b7:29:f7:05:e2:f8:34:e5:ea:e4:51:d5:a1:c1:89:70:
64:39:e1:bf:c4:bd:c3:24:87:dd:56:67:0f:ba:e2:93:65:02:
88:b8:48:65:5d:e7:5f:4f:58:a4:9b:1f:73:2c:ef:1c:47:78:
f2:2e:74:ac:10:fa:06:27:93:78:9b:08:55:52:3e:12:19:fc:
4d:e7:b5:15:da:68:a3:cd:6b:fd:14:20:2c:b4:1c:92:d6:f7:
5b:06:aa:2e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUd+XDvRsdls6EDCrdxadGF9/neb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM5M0UxMDM5OTJGNThEQ0EwMUY0OUNGMzRFOTkzMzdG
Q0YwREI0MzAeFw0yNTA1MDYwMDUzMTdaFw0yNjA1MDUwMDU4MTdaMDMxMTAvBgNV
BAMTKEE0QTNEMEM3M0RCQTg0MjkxRjQ1NzVCRDEyMDI1ODc4RDhGMEUzODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0wMo/kmno3t5YWoKO7nRbeM44
vLYunLzoffNXmuzZC9d0HXRXnyOHKMGODsWX+CcfdoY61bcGa3HTxnwlUmSwrXg5
JI7sNbF89uZn/0lp7JoLwGHAT0A8/GnXo7CMZ6CXcWYM8yaPIoFHzuZUcmoR/UUs
X1PN2Cek3G+v6ipER0UM7n6xwCbQiZnGBfRMbToY5UDgkhr0WQYDoUexrF+GNdZu
LLHQEH46gJzEyDrqFWlPUspNcSagOW65kN6lrQI5YZgouNZntC3ZaQTJ4Lnr+Zgp
U1gCayLIKyAvnT2GkzaA6qN4Xd2/aRdX4sGN2EXyCOfOQDCP+fzoZpbZP3PxAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUpKPQxz26hCkfRXW9EgJYeNjw44cwHwYDVR0j
BBgwFoAUHJPhA5kvWNygH0nPNOmTN/zw20MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8xQzkzRTEwMzk5MkY1OERDQTAxRjQ5Q0YzNEU5OTMzN0ZDRjBEQjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDOTNFMTAzOTkyRjU4RENB
MDFGNDlDRjM0RTk5MzM3RkNGMERCNDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzIzODMwMzQzYTM4MzYzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzODM2
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECGgwDQYJKoZIhvcNAQELBQADggEBAAhOGnbsWNbE
s+Wzltz+SmZ9GYkv20K4RD9P3lpxJP+T1XEY7L0DoRGAS74iywcXYTrXBB3Lv7kZ
I0pwMHXfnoW7YLeEBP3WF57fNfGL+Gyf2kxwtbiEaAKuTsfEeNvgOEdIDz0ymert
zb7n9VAAIodFrb1fM2++WR7KG/fQ17+jT29gFiveZCUOwDP3ncZy/Ic2Wrry5eLH
qmvVCX/0U305hoUttyn3BeL4NOXq5FHVocGJcGQ54b/EvcMkh91WZw+64pNlAoi4
SGVd519PWKSbH3Ms7xxHePIudKwQ+gYnk3ibCFVSPhIZ/E3ntRXaaKPNa/0UICy0
HJLW91sGqi4=
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:52:42 2025 by rpki-client