Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/323830343a373038633a3a2f33322d313238203d3e20323730373333.roa
File: 323830343a373038633a3a2f33322d313238203d3e20323730373333.roa (raw, json)
Hash identifier: MWhEkmBzuzeuhYMM2mFNa/9AqyI5IlLbgJxmyWihQdM=
Subject key identifier: 33:82:7B:75:3A:B1:03:13:0E:5E:42:B2:BB:69:29:2B:B2:D8:A0:9A
Certificate issuer: /CN=6742A563CD3A144A032A9E5F2294DE09DED571E6
Certificate serial: 6A496692217DB79F9A2B4579468898D2FB6755C6
Authority key identifier: 67:42:A5:63:CD:3A:14:4A:03:2A:9E:5F:22:94:DE:09:DE:D5:71:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6742A563CD3A144A032A9E5F2294DE09DED571E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/323830343a373038633a3a2f33322d313238203d3e20323730373333.roa
Signing time: Mon 22 Sep 2025 19:39:02 +0000
ROA not before: Mon 22 Sep 2025 19:34:02 +0000
ROA not after: Mon 21 Sep 2026 19:39:02 +0000
asID: 270733
IP address blocks: 2804:708c::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:49:66:92:21:7d:b7:9f:9a:2b:45:79:46:88:98:d2:fb:67:55:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6742A563CD3A144A032A9E5F2294DE09DED571E6
Validity
Not Before: Sep 22 19:34:02 2025 GMT
Not After : Sep 21 19:39:02 2026 GMT
Subject: CN=33827B753AB103130E5E42B2BB69292BB2D8A09A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:45:77:e8:23:f3:b7:9b:e3:77:cb:0f:7f:
a9:ad:df:ad:a5:1f:9e:f6:42:57:af:44:a5:3d:91:
f9:c8:4d:9a:82:96:9b:b5:44:1a:fe:b9:e7:a8:ef:
2e:d2:3d:1b:d5:9a:a2:bb:d7:ff:3b:9c:6a:cc:5a:
9d:32:1d:44:45:e2:94:a3:df:8f:6d:83:c4:98:9e:
99:fa:da:27:7c:28:ec:da:e2:4b:a7:7c:a0:32:f6:
17:5e:62:05:59:e0:78:2d:f2:c1:77:ec:fb:4f:e9:
f8:cb:0b:e7:a5:5b:41:9d:3c:10:4c:45:a6:fa:a5:
b2:27:52:eb:31:fa:2f:5d:4b:21:48:e1:25:ee:7a:
20:72:b2:6d:4f:b9:29:90:18:ef:ae:bf:81:77:8e:
42:c0:7b:22:f3:c4:16:c1:f9:53:a8:f7:26:36:c3:
a4:ca:d8:02:43:58:ef:05:91:ec:9a:c0:6f:34:47:
9a:dc:1b:41:3e:a8:4a:c1:15:35:15:4f:7f:23:90:
a0:0e:de:cc:72:48:1d:85:ff:cf:a8:39:d0:d5:fd:
57:af:dd:f8:b7:b6:87:b7:23:0e:77:78:5a:4f:0a:
43:63:df:a3:28:ea:76:56:72:2f:41:20:15:46:7c:
b1:ff:83:8c:7c:e6:c6:bb:ed:58:e1:65:29:66:31:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:82:7B:75:3A:B1:03:13:0E:5E:42:B2:BB:69:29:2B:B2:D8:A0:9A
X509v3 Authority Key Identifier:
keyid:67:42:A5:63:CD:3A:14:4A:03:2A:9E:5F:22:94:DE:09:DE:D5:71:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/6742A563CD3A144A032A9E5F2294DE09DED571E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6742A563CD3A144A032A9E5F2294DE09DED571E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GfemeoKpmYBBLhgzpJkeN5pT61np1zxCQTSMiDxDvd/0/323830343a373038633a3a2f33322d313238203d3e20323730373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:708c::/32
Signature Algorithm: sha256WithRSAEncryption
08:63:ee:86:d6:bd:4c:ed:61:61:2d:ba:a2:81:b1:fe:25:64:
d4:c6:8c:df:f9:4c:1f:b0:36:aa:94:f3:2f:43:1d:40:74:b8:
2f:0a:db:c5:f8:08:9f:7f:c5:2d:57:23:38:0f:cb:fd:f0:2c:
87:b9:29:07:08:ba:6a:ea:04:0e:d1:dd:6c:ab:98:53:18:f2:
da:9c:ab:87:0a:39:9d:a2:a6:01:71:81:50:59:fd:2f:cf:56:
33:b7:a3:33:e0:7d:91:84:3f:18:b0:54:0d:6b:b5:c7:c9:34:
82:47:d2:ab:56:d4:4c:b3:ce:ed:58:5b:20:7d:48:2f:e4:cc:
20:39:fc:02:e7:a1:11:b2:70:b2:61:52:30:12:72:f6:3f:22:
95:7f:dd:f4:7c:49:76:26:50:2c:e1:25:e7:16:2b:ed:50:27:
0c:9a:7e:59:db:d0:6a:ea:a9:e9:63:68:97:aa:54:e2:45:f9:
cf:90:54:bf:fb:63:8f:f6:76:0a:8f:9d:3c:cc:fd:ab:34:99:
cc:7b:03:13:96:49:74:5c:f3:9d:10:ac:cc:11:78:80:43:ac:
b1:69:33:09:b6:13:ca:0d:bb:71:bf:dd:9e:ea:0d:fc:05:09:
92:34:2e:7b:67:34:49:dd:95:0b:ad:76:96:67:c5:a6:29:1b:
34:6d:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:46 2025 by rpki-client