Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa
File: 323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa (raw, json)
Hash identifier: p+tiLooqfNvykHBiRTNNzroZG0pHHKyehY7oKzm/vng=
Subject key identifier: 71:79:49:6C:83:66:A8:2D:38:C0:EF:89:77:32:59:F2:25:39:03:EE
Certificate issuer: /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial: 3AC5DE72DD991627592C5BDAB0DD921835269301
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa
Signing time: Thu 06 Mar 2025 13:00:35 +0000
ROA not before: Thu 06 Mar 2025 12:55:35 +0000
ROA not after: Thu 05 Mar 2026 13:00:35 +0000
asID: 266312
IP address blocks: 2804:35e0:2000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c5:de:72:dd:99:16:27:59:2c:5b:da:b0:dd:92:18:35:26:93:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Validity
Not Before: Mar 6 12:55:35 2025 GMT
Not After : Mar 5 13:00:35 2026 GMT
Subject: CN=7179496C8366A82D38C0EF89773259F2253903EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:e4:79:b9:67:7a:40:2a:8c:a2:d5:24:b5:
e5:b4:8d:58:67:2f:bc:c9:e7:50:6f:80:9d:0b:0a:
c7:f9:81:82:93:24:33:4a:27:f7:bc:ba:7f:c7:1b:
85:11:0c:ba:b5:06:e8:b6:a3:a7:3c:aa:4a:ae:31:
b4:38:18:35:56:02:61:5d:3a:4d:73:12:8d:d5:85:
b0:da:64:aa:30:a1:c3:1e:4d:fb:b9:d1:dd:3c:82:
05:97:82:09:1d:21:5f:90:96:72:e4:db:50:7f:55:
5d:a7:ec:7a:28:94:52:36:cd:f2:78:94:d8:15:1c:
bd:e3:98:f7:e9:36:c6:73:1b:21:c3:ce:41:60:b8:
d5:12:e1:4d:dc:6a:4a:c8:76:42:f0:a5:8f:cb:4a:
ed:21:30:4a:b9:52:52:4a:89:0a:92:2a:a1:51:80:
1a:5d:fd:07:d6:27:33:fe:94:23:f7:d9:a8:cf:21:
3a:7d:22:64:62:f7:1b:78:ce:43:cb:b1:16:22:19:
3b:0c:d4:4c:e9:25:f2:43:32:c3:6a:bf:e2:39:f7:
e3:62:36:8f:42:a8:58:88:13:66:bb:68:53:d7:1f:
a7:f7:1e:cb:c1:16:87:59:fc:f7:f1:44:76:73:4b:
7b:2b:7a:4f:54:44:f8:29:f8:56:50:f9:32:6a:0c:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:79:49:6C:83:66:A8:2D:38:C0:EF:89:77:32:59:F2:25:39:03:EE
X509v3 Authority Key Identifier:
keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:35e0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
29:9e:71:94:e7:54:0a:5e:69:22:4d:2e:84:92:91:26:3f:52:
e7:ed:49:95:7a:f3:08:43:7e:39:25:54:22:a1:b5:6d:2d:cd:
69:0f:c0:c9:51:16:a2:1e:0a:36:2f:8e:7d:ea:54:5f:74:62:
9c:80:65:4a:15:18:1e:ad:32:34:f8:4d:e8:c0:d3:78:2e:0b:
78:07:b9:86:29:43:24:67:ba:7d:5d:bd:23:2e:8e:db:91:f5:
9b:bc:8a:0f:96:2d:49:83:06:e6:1f:9c:5c:c9:81:41:46:b1:
6f:b7:8d:c1:43:f1:fe:03:29:80:40:1d:7b:90:eb:4a:92:b8:
64:a4:f3:68:3a:8a:18:11:1d:79:26:64:d1:1d:2f:05:95:4a:
9b:b7:fa:2b:39:58:b1:9c:d7:d3:10:3e:e9:3d:e0:90:e4:9a:
8f:5f:19:05:fd:12:0e:be:e6:3a:07:8f:2b:96:00:a4:e1:75:
5e:ea:cd:2e:b2:5f:1a:2a:73:6d:a9:e4:33:24:22:42:7a:7d:
c4:98:7f:1e:a7:53:6c:10:73:51:0c:59:6b:d1:ee:e1:e1:df:
f3:1c:63:e3:3a:23:16:4e:ac:d9:f2:05:b9:f6:11:59:70:62:
cc:16:2b:51:f6:63:fd:42:65:a9:b4:4f:e0:ce:68:2a:8c:34:
fd:89:26:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:35:45 2025 by rpki-client