Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/323830343a386537633a3a2f33322d3332203d3e20323639303631.roa
File: 323830343a386537633a3a2f33322d3332203d3e20323639303631.roa (raw, json)
Hash identifier: ZJ29S02wm13j+BNdTe7CB3aYk9c4Z8H3VNhagyVDnXc=
Subject key identifier: AF:1E:8B:84:FA:4D:3A:9F:D0:F1:21:E3:CF:93:8D:06:81:96:7E:96
Certificate issuer: /CN=04025647B40E02B1D6ED1F825223771295356B79
Certificate serial: 67BFBAE14474A1D4C77BF7810F483907705341AA
Authority key identifier: 04:02:56:47:B4:0E:02:B1:D6:ED:1F:82:52:23:77:12:95:35:6B:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04025647B40E02B1D6ED1F825223771295356B79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/323830343a386537633a3a2f33322d3332203d3e20323639303631.roa
Signing time: Thu 24 Jul 2025 17:57:01 +0000
ROA not before: Thu 24 Jul 2025 17:52:01 +0000
ROA not after: Thu 23 Jul 2026 17:57:01 +0000
asID: 269061
IP address blocks: 2804:8e7c::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:bf:ba:e1:44:74:a1:d4:c7:7b:f7:81:0f:48:39:07:70:53:41:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04025647B40E02B1D6ED1F825223771295356B79
Validity
Not Before: Jul 24 17:52:01 2025 GMT
Not After : Jul 23 17:57:01 2026 GMT
Subject: CN=AF1E8B84FA4D3A9FD0F121E3CF938D0681967E96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:2d:ff:99:52:60:b4:e1:4b:5b:56:f1:4e:
11:8e:40:62:6a:2b:61:56:49:11:b6:cb:ea:fc:ab:
af:a6:6c:8b:16:0e:95:84:bd:4c:1a:60:d7:0f:40:
7a:21:80:55:19:b3:65:29:11:44:f6:0d:c5:3d:3b:
2e:b5:b8:47:4e:09:87:c8:3a:96:5f:14:3f:3e:72:
58:47:02:fa:d1:99:ca:3e:6e:df:e8:13:6c:3d:5b:
25:30:98:ad:ed:77:9b:57:69:7c:d9:32:7e:a9:92:
6a:3f:16:31:9e:2d:57:9e:24:c6:21:b2:2f:cc:1e:
db:48:bf:4d:18:ef:cb:f5:58:48:d9:5a:71:62:c4:
6c:8d:87:80:86:f5:3b:ec:84:d9:65:91:02:12:8a:
54:48:5f:40:a2:bb:f9:9a:f5:90:a3:04:d1:69:49:
0e:74:3a:2f:86:9a:32:39:f5:cc:d4:f0:93:56:3c:
50:a7:33:55:98:52:24:de:06:a0:ad:3a:04:48:ed:
90:b7:9b:34:1c:49:aa:73:ec:7b:b7:b4:f7:a9:7d:
50:7c:88:5d:51:f2:7b:50:36:ad:06:4c:2f:55:af:
3d:10:a7:b1:96:76:62:5c:18:f2:8f:7b:d2:16:fe:
cf:a5:14:d4:0a:51:47:5e:7f:54:17:a5:76:07:9d:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1E:8B:84:FA:4D:3A:9F:D0:F1:21:E3:CF:93:8D:06:81:96:7E:96
X509v3 Authority Key Identifier:
keyid:04:02:56:47:B4:0E:02:B1:D6:ED:1F:82:52:23:77:12:95:35:6B:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/04025647B40E02B1D6ED1F825223771295356B79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04025647B40E02B1D6ED1F825223771295356B79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/323830343a386537633a3a2f33322d3332203d3e20323639303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e7c::/32
Signature Algorithm: sha256WithRSAEncryption
a5:c4:b6:fc:ce:3a:15:88:b2:d9:d2:05:0c:12:0c:a9:0b:81:
7a:06:76:5d:37:7b:58:6c:c7:0b:2c:c6:c3:5f:21:9b:45:6d:
ad:0a:7b:f3:71:03:28:8e:1b:a1:f5:1f:5d:72:2a:57:5d:c0:
7c:d0:d2:3b:59:2b:a9:ef:9e:b9:80:65:d6:f2:f6:bf:78:25:
70:1a:d1:0e:88:7a:75:b5:2e:a0:72:2f:e8:a4:7c:4e:f5:0c:
ac:16:a9:0a:c3:84:4c:e2:e5:1c:9a:8e:73:18:e7:5d:39:16:
fb:f7:20:2e:00:2d:f6:05:3e:f6:36:32:e1:91:56:c8:10:b6:
ff:a1:8c:82:4a:48:06:24:b9:d5:06:1c:16:eb:0f:33:a1:b9:
98:40:ce:ff:52:5b:14:4a:f9:b0:64:71:67:9e:15:ef:ca:c5:
9b:04:33:98:74:76:4a:90:75:bb:79:dd:4c:6e:50:c4:61:27:
43:2a:05:15:ea:b8:5c:ea:53:cc:04:bc:c6:5a:a3:db:fe:c7:
67:c0:f9:db:d4:22:d1:e2:9f:15:d3:97:65:78:e0:57:d7:4d:
90:45:71:4c:f9:35:f1:dc:9b:d5:0a:c9:80:0f:52:01:31:5a:
ca:d5:a7:e7:47:e3:0c:8c:2f:4f:0b:9e:54:b9:7b:df:13:27:
e7:8e:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:19:35 2025 by rpki-client