Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/323830343a386236343a3a2f33322d3438203d3e20323733373239.roa
File: 323830343a386236343a3a2f33322d3438203d3e20323733373239.roa (raw, json)
Hash identifier: SWI2rRAZO0O9TSXt0waR7TMgORWW9L63lDC40HfUJtU=
Subject key identifier: 01:6A:73:D9:F7:17:15:F9:07:C1:B7:06:51:31:89:C9:E1:95:B2:21
Certificate issuer: /CN=D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589
Certificate serial: 249C8E48AB4C1DB0F3237A6F5921AB0B739285A5
Authority key identifier: D2:7F:87:B2:2A:2B:05:E2:42:8B:D5:B1:D2:E1:D1:5A:D4:1E:F5:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.cer
Subject info access: rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/323830343a386236343a3a2f33322d3438203d3e20323733373239.roa
Signing time: Wed 18 Jun 2025 13:45:26 +0000
ROA not before: Wed 18 Jun 2025 13:40:26 +0000
ROA not after: Wed 17 Jun 2026 13:45:26 +0000
asID: 273729
IP address blocks: 2804:8b64::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9c:8e:48:ab:4c:1d:b0:f3:23:7a:6f:59:21:ab:0b:73:92:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589
Validity
Not Before: Jun 18 13:40:26 2025 GMT
Not After : Jun 17 13:45:26 2026 GMT
Subject: CN=016A73D9F71715F907C1B706513189C9E195B221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:38:1a:47:fe:81:c3:c8:ea:03:df:5b:14:45:
a7:e9:43:b7:8e:cd:70:f1:40:75:4a:fb:10:c0:34:
7f:56:f3:9c:78:27:65:5d:4c:93:aa:51:a8:0a:44:
b6:89:48:7e:ae:74:32:b7:5e:df:14:66:1e:75:0f:
7f:08:fd:75:8d:1e:f4:ca:7e:cf:ba:81:4d:a4:d3:
f1:9d:8e:69:a5:b3:2b:db:d2:f7:da:14:ea:e1:0a:
ff:1a:d4:30:e2:c1:9a:85:d9:31:94:09:c8:28:16:
6e:27:a1:41:94:98:ca:b2:00:3d:6e:d5:66:e7:b9:
ad:c0:05:10:6f:d6:fb:e3:bc:b6:c6:a2:e8:f8:00:
31:b0:35:03:f2:a3:56:1f:e1:91:4d:e5:81:72:8b:
6a:45:43:5f:a2:10:6c:80:0c:16:7a:78:03:bd:f0:
10:23:ac:bf:28:64:03:32:d8:64:4c:4b:9f:ac:50:
8a:3b:a1:ec:aa:fe:24:21:74:ba:e6:ce:bd:6b:8b:
b0:83:7f:2a:fa:eb:73:a7:17:1c:85:d2:4a:ab:86:
c1:b6:f1:13:84:3d:cc:60:80:80:f1:3a:82:ad:35:
49:24:2b:c3:df:14:2c:91:5a:b1:1b:7d:aa:e2:f7:
fe:f9:ba:8c:cc:2e:ac:5a:bc:d7:6f:94:c7:be:cb:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6A:73:D9:F7:17:15:F9:07:C1:B7:06:51:31:89:C9:E1:95:B2:21
X509v3 Authority Key Identifier:
keyid:D2:7F:87:B2:2A:2B:05:E2:42:8B:D5:B1:D2:E1:D1:5A:D4:1E:F5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27F87B22A2B05E2428BD5B1D2E1D15AD41EF589.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/323830343a386236343a3a2f33322d3438203d3e20323733373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8b64::/32
Signature Algorithm: sha256WithRSAEncryption
16:08:9a:11:58:eb:91:3d:74:32:4d:17:b8:69:8a:38:4d:88:
9e:d8:7c:65:05:2d:8c:b2:ef:cc:07:2f:ae:44:6a:3f:0d:83:
75:1e:f7:7d:f8:2a:81:91:a9:09:c0:61:52:9c:92:6c:c0:0c:
fb:f0:ff:79:54:30:8f:aa:a5:c6:f0:70:da:4e:a9:d3:4e:b7:
62:85:ec:93:f6:b7:f7:37:5e:69:85:e2:16:34:a6:9e:0f:b4:
f0:6b:6f:bc:21:8e:dc:a9:2b:e0:f9:11:68:ca:7e:d3:26:05:
78:01:d3:3b:27:c5:f1:e7:02:e2:e9:7e:e2:a3:a5:8f:53:f7:
e4:af:47:bc:3f:b8:bd:28:1c:25:23:b8:d6:4d:e7:8b:cd:80:
ff:dc:29:46:4f:b6:3a:8f:fa:67:9a:f3:6f:d9:12:0a:75:24:
56:a8:df:bc:3a:4b:5f:fb:40:fb:ec:ea:d6:25:09:50:b1:fe:
06:cf:57:c3:18:3f:06:2e:82:d1:f5:17:c0:de:fe:cf:a3:d9:
87:04:4e:f0:18:b8:5d:43:79:38:ee:06:6f:b7:74:e0:b5:39:
3b:48:5e:7f:c0:44:b3:3f:27:52:26:4c:c5:3e:fa:71:12:bc:
1f:23:36:bf:c3:ff:8d:c4:98:f9:00:d8:fe:93:c2:4a:54:d8:
0d:31:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:32:34 2025 by rpki-client