Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/323830343a336633343a3a2f33322d3334203d3e20323632333531.roa
File: 323830343a336633343a3a2f33322d3334203d3e20323632333531.roa (raw, json)
Hash identifier: oWLr/0MZ4IDl8D5E7UytfRjfpDVTnxiRex1oYz2aiTw=
Subject key identifier: BF:0E:85:F8:C2:2A:A6:65:DE:82:C5:0C:18:90:9F:E2:48:62:BE:71
Certificate issuer: /CN=4D839483977D78702BA754AB330D5B6AE6DB3FF1
Certificate serial: 6AC7A3380285E4DE467EE9062011AAFAE4F59D60
Authority key identifier: 4D:83:94:83:97:7D:78:70:2B:A7:54:AB:33:0D:5B:6A:E6:DB:3F:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D839483977D78702BA754AB330D5B6AE6DB3FF1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/323830343a336633343a3a2f33322d3334203d3e20323632333531.roa
Signing time: Mon 16 Jun 2025 18:21:42 +0000
ROA not before: Mon 16 Jun 2025 18:16:42 +0000
ROA not after: Mon 15 Jun 2026 18:21:42 +0000
asID: 262351
IP address blocks: 2804:3f34::/32 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c7:a3:38:02:85:e4:de:46:7e:e9:06:20:11:aa:fa:e4:f5:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D839483977D78702BA754AB330D5B6AE6DB3FF1
Validity
Not Before: Jun 16 18:16:42 2025 GMT
Not After : Jun 15 18:21:42 2026 GMT
Subject: CN=BF0E85F8C22AA665DE82C50C18909FE24862BE71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:03:65:bb:0e:7d:27:de:10:e4:86:76:3b:
f9:58:b3:5a:9e:5a:92:24:58:a4:61:d5:0e:cc:c4:
6d:c7:ca:75:07:7a:dd:c9:3e:5b:7c:bd:2b:11:3f:
13:bb:fd:ca:02:22:ee:f9:f3:24:e9:d5:0a:61:64:
39:0a:8d:1a:db:99:9e:cf:b8:56:c2:10:7a:98:c0:
43:17:34:49:7e:b9:3e:33:35:11:1d:03:a5:0e:82:
b6:f8:2c:ef:ee:db:f8:20:cc:c0:29:de:1c:c3:84:
8f:ad:e3:db:bb:57:5d:d9:9a:f3:5c:3e:79:a9:4d:
6e:34:a7:6f:bc:25:65:c1:ff:3a:40:4b:e2:dc:a4:
2a:b5:17:79:a9:eb:4d:e1:26:b5:c2:78:45:95:c6:
f7:44:27:50:e2:1b:18:69:e8:a9:ae:fc:ca:57:6c:
57:2d:e6:cc:33:e1:eb:b5:b1:96:ed:3d:1c:68:d0:
f6:24:c9:60:46:41:f0:36:fb:67:92:9c:04:3c:88:
f3:fa:24:c7:55:cd:09:cc:f8:44:70:b1:aa:f5:77:
60:61:18:9b:43:18:02:d0:e9:57:ac:2f:62:72:76:
e5:78:4c:21:70:21:85:47:91:87:79:b6:3a:f3:e2:
3f:a1:11:36:de:ed:5f:1b:50:d3:97:b9:7e:1f:e5:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:85:F8:C2:2A:A6:65:DE:82:C5:0C:18:90:9F:E2:48:62:BE:71
X509v3 Authority Key Identifier:
keyid:4D:83:94:83:97:7D:78:70:2B:A7:54:AB:33:0D:5B:6A:E6:DB:3F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/4D839483977D78702BA754AB330D5B6AE6DB3FF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D839483977D78702BA754AB330D5B6AE6DB3FF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/323830343a336633343a3a2f33322d3334203d3e20323632333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3f34::/32
Signature Algorithm: sha256WithRSAEncryption
a5:c9:ee:60:73:3c:55:0e:fc:4b:fd:b3:51:f6:3a:c3:6c:9e:
37:52:d2:72:d2:f3:c1:89:4e:a4:c3:2b:9f:ee:da:44:33:ec:
21:19:da:f1:d4:07:3f:99:a1:d8:7a:5c:41:88:63:55:96:85:
60:3f:eb:a0:c0:e5:35:3c:7b:95:76:ee:e0:12:db:83:86:a3:
ed:f2:4b:44:ab:12:25:3c:3e:c2:44:4d:f5:b4:c5:a8:53:f8:
ca:02:b5:18:10:a4:bd:90:47:a9:ef:99:62:84:e8:88:a9:7f:
49:d7:a7:99:19:fb:8e:d7:b1:72:12:01:04:79:c4:bb:5e:54:
dc:cb:c0:af:84:51:ab:e0:79:75:5a:fb:b4:8b:83:5e:ef:3d:
09:35:8c:67:7d:36:c1:c1:53:a8:7e:8b:e6:a8:b5:6c:5f:62:
53:9a:54:ac:37:48:8b:13:81:d2:77:e4:da:09:dd:51:23:61:
e5:f4:7a:29:9b:cf:83:aa:1c:e0:84:d7:13:0c:57:84:8c:f7:
eb:fd:04:4c:f6:5b:1d:8a:2a:ce:34:a7:98:2f:b7:85:71:7d:
a4:4b:3d:3a:9f:fc:48:34:9f:e7:23:76:e9:cb:f7:bc:3e:d0:
15:19:e6:0f:09:14:ca:c9:b3:c2:51:6a:5b:78:1b:ec:a8:6c:
2e:79:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:49:55 2025 by rpki-client