Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
File: 323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa (raw, json)
Hash identifier: y8LJcjycfY1UJVKQP49+aa5SDzNSNeockL7W7RT1KcY=
Subject key identifier: 5B:0A:BD:F1:1E:E6:84:74:67:E2:6E:D9:BE:7C:47:DF:71:E9:8D:41
Certificate issuer: /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial: 6424ACF35F1DAF21FB76C0EB104A95DA3AD23E5D
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
Signing time: Thu 06 Mar 2025 15:26:03 +0000
ROA not before: Thu 06 Mar 2025 15:21:03 +0000
ROA not after: Thu 05 Mar 2026 15:26:03 +0000
asID: 266385
IP address blocks: 2804:3708:8040::/42 maxlen: 42
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:24:ac:f3:5f:1d:af:21:fb:76:c0:eb:10:4a:95:da:3a:d2:3e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Validity
Not Before: Mar 6 15:21:03 2025 GMT
Not After : Mar 5 15:26:03 2026 GMT
Subject: CN=5B0ABDF11EE6847467E26ED9BE7C47DF71E98D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3a:35:a8:12:24:55:36:bb:0e:74:d7:c8:9d:
6d:e6:2c:6a:9a:86:b2:e0:3b:8d:96:39:d9:30:1d:
23:3a:0c:ff:0c:b5:4a:a3:39:13:1b:7c:4b:c9:11:
74:76:49:40:b1:e3:4b:62:cc:82:83:73:a6:7c:b0:
f6:a9:79:b9:b6:87:78:f5:99:cb:22:a4:56:7c:f0:
b3:bc:2e:22:cb:7f:38:66:72:0e:b9:31:36:1d:4e:
13:bd:d8:c6:3f:64:bf:1c:3e:60:6e:d4:68:7a:42:
09:18:88:54:a9:30:f9:4b:d1:1f:da:4a:b8:91:39:
1a:84:60:a9:b2:b5:a9:d6:dc:36:20:3a:09:a7:28:
85:52:ea:ef:8e:4e:f5:4b:ac:b1:04:76:dd:2b:cf:
fa:ca:7d:db:af:3a:39:22:50:2e:a2:ff:e0:f2:74:
0c:1f:45:f0:34:e5:0c:6a:61:6e:02:f1:e2:31:3d:
59:66:85:43:24:56:01:61:97:0e:e8:a0:5c:ce:52:
c0:9b:0d:1e:85:9c:31:90:a3:6e:d1:b3:1a:65:2d:
b1:25:11:fd:19:0c:87:f9:6a:28:35:56:ba:e8:12:
7a:73:1c:5e:73:dd:53:45:cd:7d:35:11:89:ec:eb:
ee:45:c4:c2:c4:d6:18:a4:6f:49:80:1a:1f:32:97:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:BD:F1:1E:E6:84:74:67:E2:6E:D9:BE:7C:47:DF:71:E9:8D:41
X509v3 Authority Key Identifier:
keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3708:8040::/42
Signature Algorithm: sha256WithRSAEncryption
ab:00:37:5e:20:81:0d:b2:94:ac:ac:81:11:22:ae:25:cb:b1:
16:6b:3e:11:5c:63:79:3f:cd:56:3a:64:2e:3c:aa:e0:e5:4e:
bb:6d:73:4e:65:fe:79:d2:0e:aa:ef:88:90:a4:93:3e:23:fc:
8e:ae:9d:96:07:2a:8d:41:58:2c:26:31:c8:79:fa:14:28:7c:
0f:e7:86:08:48:03:24:e8:13:58:39:dc:9b:89:9f:92:f7:99:
2c:50:77:ac:a9:f8:5e:26:db:8f:f5:f3:33:0b:dd:74:cc:a3:
c4:4d:28:48:b6:7c:f9:28:99:1b:90:b2:41:e5:20:66:d9:19:
99:f9:84:ff:06:93:02:80:d4:20:42:0b:2a:08:80:b2:02:23:
cb:f5:6b:1e:a3:dd:1a:10:49:cb:5d:f5:8f:c6:18:a9:21:92:
3e:7a:cd:c4:85:ca:f2:39:b0:4c:f8:c3:ca:36:aa:fe:e4:66:
35:20:c2:45:9a:10:55:e2:a7:c5:bb:ce:4a:8e:ff:a8:ad:b7:
fc:69:68:e7:47:95:e7:ad:b6:06:15:5c:d2:58:ce:d2:fe:09:
46:44:b0:19:61:a1:b4:c6:02:f5:07:dd:3e:02:4f:e3:bb:39:
0c:16:41:e3:db:c6:f8:b7:f4:d6:ab:6f:d9:26:dc:43:ad:d4:
7b:af:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:12:34 2025 by rpki-client