Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa
File: 323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier: KmNJzFigrMiWkiFUN/nbeaPEvL5BS0f1zO6GreSDV0s=
Subject key identifier: B0:F5:44:AF:FF:19:86:F0:5F:76:48:01:4C:C3:A0:78:ED:0E:FD:03
Certificate issuer: /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial: 36A6E86687FFE25DE0EBEA2FEB78F5DDC095B8ED
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa
Signing time: Mon 04 Aug 2025 15:26:45 +0000
ROA not before: Mon 04 Aug 2025 15:21:45 +0000
ROA not after: Mon 03 Aug 2026 15:26:45 +0000
asID: 263541
IP address blocks: 2804:1398:1::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a6:e8:66:87:ff:e2:5d:e0:eb:ea:2f:eb:78:f5:dd:c0:95:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
Validity
Not Before: Aug 4 15:21:45 2025 GMT
Not After : Aug 3 15:26:45 2026 GMT
Subject: CN=B0F544AFFF1986F05F7648014CC3A078ED0EFD03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:e2:5c:68:60:34:84:9e:74:54:56:d1:ef:
7a:77:ea:03:6c:60:07:16:35:d7:ed:50:dd:71:08:
64:ab:b2:3b:9a:8e:ed:8b:3b:95:95:44:cb:1d:95:
4f:be:ae:29:0d:04:c9:77:83:3a:71:fd:16:ae:28:
64:5e:38:ca:26:97:6e:4a:6e:24:3e:b6:d8:0a:00:
fb:c8:69:33:74:84:fd:03:cc:4a:86:32:ca:d6:9d:
ae:97:76:1e:21:3c:81:3a:9b:30:6f:c9:84:c8:c5:
dd:82:5e:d0:ea:db:4a:84:10:fd:e2:8e:92:42:15:
ef:4b:56:ad:34:b9:ee:8a:e1:df:3a:32:91:1a:f5:
6e:fe:69:a5:ba:38:03:76:f4:f1:f2:c9:92:48:84:
02:05:1c:b8:e1:12:98:f2:68:b1:6a:eb:a0:f9:b9:
c7:53:bb:82:1f:9a:fa:31:ec:44:13:99:8b:a9:71:
f2:2d:cb:8e:fb:93:0e:d3:ec:e3:3d:06:f7:62:35:
9c:5f:9c:bc:dd:1c:7f:8d:6b:52:c7:57:ff:9b:c9:
39:ef:9b:fe:b3:2e:45:79:3c:c8:6b:36:76:f4:99:
a7:ba:41:8d:a5:68:51:1c:c9:89:d9:e6:c4:59:97:
8e:2f:f7:94:1b:14:1c:94:55:39:2f:08:5f:c9:ed:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F5:44:AF:FF:19:86:F0:5F:76:48:01:4C:C3:A0:78:ED:0E:FD:03
X509v3 Authority Key Identifier:
keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1398:1::/48
Signature Algorithm: sha256WithRSAEncryption
0f:2e:61:d8:74:88:af:62:e9:35:f3:a9:68:42:8f:ea:05:ed:
b5:ae:8e:17:70:69:e4:79:1c:38:4b:fa:6c:a8:13:26:b4:81:
ae:c2:da:8f:4b:fe:31:33:65:96:f4:a6:d0:f7:c5:10:05:6e:
9c:e7:b6:8e:3e:d0:97:4f:b2:ab:65:b9:e3:a2:2c:cb:78:e9:
cc:3f:cb:14:45:bc:06:a7:8f:50:ac:cc:83:4e:86:e1:72:64:
e6:e2:38:f6:b3:8b:69:d0:02:62:de:f8:57:b5:2b:c2:de:ea:
78:c1:a2:af:1a:72:e3:fc:ac:15:44:ca:7b:81:e2:1d:e5:e2:
91:45:ee:0d:4e:94:8a:0e:d5:69:d0:29:05:f3:86:ee:45:6b:
cd:1e:dc:0f:ed:36:31:a3:b5:58:60:d3:a4:74:a5:ed:0d:e5:
e4:db:0d:65:77:05:48:d4:7f:43:cb:71:c8:ee:69:7b:92:72:
9a:f9:a1:b7:ca:88:da:06:34:92:77:01:f0:40:98:24:c8:d4:
22:18:96:69:6f:95:9f:43:da:48:24:49:b6:28:57:b2:f0:af:
c8:2f:e3:a2:ac:be:9d:4c:71:c8:2f:27:61:e8:6a:d1:5d:a8:
4b:8f:1b:0d:72:fc:e0:54:29:c2:71:ff:78:37:00:cd:08:35:
37:17:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:45:20 2025 by rpki-client