Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33322d3332203d3e20323731343636.roa
File: 323830343a376266383a3a2f33322d3332203d3e20323731343636.roa (raw, json)
Hash identifier: ZWdkDpXtTmOH3VhJfxFNlQx+wpJCZWQbw6YTRJBSN3U=
Subject key identifier: 7C:24:6E:C7:80:2C:90:3A:F5:4E:F3:A7:B5:36:3A:D8:EA:66:61:4C
Certificate issuer: /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial: 141C46FBE5503E643484F61BCAE93135EC167DFF
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33322d3332203d3e20323731343636.roa
Signing time: Thu 06 Mar 2025 14:31:47 +0000
ROA not before: Thu 06 Mar 2025 14:26:47 +0000
ROA not after: Thu 05 Mar 2026 14:31:47 +0000
asID: 271466
IP address blocks: 2804:7bf8::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1c:46:fb:e5:50:3e:64:34:84:f6:1b:ca:e9:31:35:ec:16:7d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Validity
Not Before: Mar 6 14:26:47 2025 GMT
Not After : Mar 5 14:31:47 2026 GMT
Subject: CN=7C246EC7802C903AF54EF3A7B5363AD8EA66614C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:5c:db:51:e2:f9:83:22:55:0a:a3:40:6e:
06:14:8e:ce:0a:c9:10:1b:7e:f8:53:b3:21:c5:93:
1e:af:a2:92:14:64:06:3d:4f:ee:c8:56:bb:6a:41:
f7:6e:ed:7d:a1:e6:e5:db:5a:6a:dd:27:7a:5a:f8:
56:04:3d:1e:b1:89:f6:07:f4:1d:9f:2d:de:d8:f1:
c1:67:fd:4b:db:13:ee:33:c4:a3:4a:55:2c:a3:fe:
75:e0:15:14:ce:9a:3f:a5:44:e5:8b:a8:fb:9f:97:
a8:4b:bb:62:57:52:1b:41:15:e4:8c:e0:a7:3e:0e:
17:5c:5a:72:78:d6:6e:26:cf:65:4b:af:a5:e7:90:
20:d2:5b:a9:e3:23:9b:77:ff:1e:a7:2e:20:86:a6:
03:87:2c:fc:af:6d:92:70:35:ee:07:9c:b7:62:11:
67:3a:f0:e4:be:2c:f8:25:1a:c7:e8:47:b5:ca:30:
c2:d6:d5:7f:d1:80:8c:08:85:62:2c:39:06:e0:5c:
64:da:3c:bc:37:fd:d5:4b:c4:0f:b5:29:cd:a5:e8:
38:b4:05:50:7c:81:bf:fc:27:24:01:1e:0b:a5:ed:
66:fa:bc:64:31:76:07:95:04:19:15:f7:09:e3:71:
32:06:11:0a:2c:ea:3a:69:bf:3a:dc:87:fd:81:c5:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:24:6E:C7:80:2C:90:3A:F5:4E:F3:A7:B5:36:3A:D8:EA:66:61:4C
X509v3 Authority Key Identifier:
keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33322d3332203d3e20323731343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7bf8::/32
Signature Algorithm: sha256WithRSAEncryption
39:47:dc:1a:2a:7b:5b:30:c7:60:88:bc:6f:26:2f:b0:a6:00:
72:c7:d8:99:f6:c3:14:b5:e9:8d:8a:b1:13:f3:e6:dd:39:e3:
18:1a:12:ff:09:9d:7a:77:11:52:3a:b2:79:2e:b3:58:e4:23:
de:97:be:09:91:81:db:da:0b:c7:a8:e2:58:ce:24:fc:7d:d7:
51:83:c2:3d:3f:c8:ba:de:68:6d:75:d1:af:2f:e3:9c:d0:9f:
57:57:06:16:38:d3:3f:60:7f:70:c1:ba:22:c4:0c:ea:dd:e5:
35:31:b9:cc:f8:88:2e:c8:17:dd:ba:73:72:2d:33:8f:c5:4f:
7f:66:65:90:d9:6c:6a:47:d6:32:4d:f9:1c:de:74:b7:22:b8:
18:23:09:5d:ba:ef:00:c1:fd:cb:57:29:89:a2:f6:d4:4b:17:
a5:16:7d:9f:90:43:52:9c:d1:b4:3d:77:32:23:b2:c9:76:6e:
16:62:7d:ea:c5:18:63:2d:43:c2:7d:ba:95:bc:ab:2b:92:e2:
b7:c2:93:b2:57:6a:12:02:a3:06:9d:a4:33:4e:fb:7b:f5:3f:
78:bb:67:ec:b8:41:79:fe:f4:bc:9f:07:92:1b:18:5a:38:ec:
58:11:bd:70:25:95:f4:b9:82:cf:e2:1b:d9:2f:38:35:6d:04:
a7:5b:15:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:18:02 2025 by rpki-client