Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa
File: 323830343a343361303a3a2f33322d3335203d3e20323637353830.roa (raw, json)
Hash identifier: gsXArwOGkvYhOyUx/ywx8l9rXDAc5XWBoDpKMTIsOag=
Subject key identifier: 3D:FA:38:64:20:F2:88:F2:6B:A0:B6:89:42:96:79:33:EA:B3:95:82
Certificate issuer: /CN=233201DBED32F6A687426F3C6DE66D3690C5A5CA
Certificate serial: 0ED3EA96D9AEBDC0821ED48A04853A0F2CEC39F0
Authority key identifier: 23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa
Signing time: Thu 06 Mar 2025 14:13:50 +0000
ROA not before: Thu 06 Mar 2025 14:08:50 +0000
ROA not after: Thu 05 Mar 2026 14:13:50 +0000
asID: 267580
IP address blocks: 2804:43a0::/32 maxlen: 35
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d3:ea:96:d9:ae:bd:c0:82:1e:d4:8a:04:85:3a:0f:2c:ec:39:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233201DBED32F6A687426F3C6DE66D3690C5A5CA
Validity
Not Before: Mar 6 14:08:50 2025 GMT
Not After : Mar 5 14:13:50 2026 GMT
Subject: CN=3DFA386420F288F26BA0B68942967933EAB39582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:13:e6:28:cc:25:e5:ec:0b:4c:b1:a9:86:
e2:4a:f0:63:21:12:42:8e:55:19:b2:86:ae:1f:f9:
ed:a0:6d:74:71:96:f6:bf:92:62:e5:e2:c2:b1:30:
e2:4f:ce:3c:e3:71:1d:01:eb:37:b8:a7:50:b2:5a:
18:7a:e4:4b:98:1f:a4:2a:f6:4a:22:e1:3b:9e:e6:
ca:0d:5e:b4:95:01:91:e8:90:d3:a6:4d:ab:2f:aa:
0a:a4:e3:57:a0:0a:6d:7b:4a:0f:6c:d1:27:26:c2:
de:3b:37:bc:55:37:87:2f:92:ba:db:5e:c2:c2:fe:
d1:f7:26:f8:3c:af:c5:f2:4a:2c:5d:e4:8a:b5:06:
39:9a:8f:4f:3a:d7:3e:e5:8b:44:0c:86:9a:a4:3d:
a0:44:22:15:75:21:3a:c9:11:3f:25:40:4c:24:11:
06:2d:ad:0e:3e:4d:ae:0f:9c:7c:b3:1f:8f:25:f1:
49:66:5a:e7:a3:4f:e1:5d:22:a0:e7:51:6f:86:db:
0c:6a:fb:8a:54:15:7e:71:d4:e8:af:c3:2d:52:cf:
8d:1b:13:ec:62:ed:c7:5e:1d:0a:c1:89:6c:05:3f:
1d:b9:3e:cd:1f:1e:ed:d6:b0:7d:a3:be:89:ee:69:
54:ad:31:72:22:b9:70:48:ec:83:91:79:06:d6:8f:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FA:38:64:20:F2:88:F2:6B:A0:B6:89:42:96:79:33:EA:B3:95:82
X509v3 Authority Key Identifier:
keyid:23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:43a0::/32
Signature Algorithm: sha256WithRSAEncryption
43:97:9c:3e:d8:e8:e7:a0:28:3a:0d:ef:a6:25:fa:08:8e:d0:
8c:ef:91:34:ba:b8:aa:a1:d6:50:03:ba:dd:df:6c:48:9d:09:
d5:00:78:65:b2:40:94:54:a4:96:d9:29:77:b9:a3:8e:b9:5f:
1d:60:70:eb:47:ef:b4:d1:df:0c:33:b3:1a:d5:53:86:27:80:
e1:82:f4:b3:a4:c3:1b:1d:63:aa:0c:5b:9b:0c:b1:c3:30:77:
c0:51:7f:ca:86:b1:c1:a1:89:c0:08:8b:0c:95:bb:75:88:93:
3b:5c:f9:11:b2:4b:bf:a6:26:31:8f:74:0a:b0:b5:d2:42:a7:
c1:43:74:14:30:81:1d:60:96:a3:59:1a:dd:3c:56:4f:0e:a1:
82:d7:e9:8c:bd:0f:22:05:1b:89:63:21:4a:24:e1:b1:51:77:
97:43:df:5b:7c:6c:0a:d0:fb:46:66:fa:7a:f3:ca:a4:27:ff:
0b:88:bf:0c:6a:32:a4:27:fd:3d:74:63:7b:c9:a8:1f:57:b6:
88:8a:7a:c4:ec:5e:9e:66:18:5e:5c:51:3a:4e:fa:8c:e1:17:
c9:cf:23:56:91:47:ca:ba:70:d5:b0:69:57:ea:7f:06:3c:6b:
b4:36:ab:cc:1e:72:24:71:2d:4b:d2:bd:82:67:64:ec:c4:8c:
a9:67:55:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:45:12 2025 by rpki-client