Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa
File: 323830343a336264633a3a2f33322d3332203d3e20323636313736.roa (raw, json)
Hash identifier: oYcp44bLibhjBd34YNYWnpWyJNcqoWLaR+cmxg2Pk48=
Subject key identifier: 13:75:4D:FE:5C:C1:24:83:35:98:65:E7:14:D4:BC:E7:39:87:56:70
Certificate issuer: /CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
Certificate serial: 771683BADB72431191583B8FFEE756734C01AF6E
Authority key identifier: 39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa
Signing time: Thu 17 Apr 2025 13:21:10 +0000
ROA not before: Thu 17 Apr 2025 13:16:10 +0000
ROA not after: Thu 16 Apr 2026 13:21:10 +0000
asID: 266176
IP address blocks: 2804:3bdc::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:16:83:ba:db:72:43:11:91:58:3b:8f:fe:e7:56:73:4c:01:af:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E
Validity
Not Before: Apr 17 13:16:10 2025 GMT
Not After : Apr 16 13:21:10 2026 GMT
Subject: CN=13754DFE5CC12483359865E714D4BCE739875670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:80:86:88:9e:fe:9d:b5:35:21:cc:e0:75:
32:36:32:1a:78:07:91:c0:06:39:21:77:84:06:d4:
40:10:4f:06:61:ad:05:c5:e3:3d:8d:63:aa:79:94:
99:92:02:e7:36:4a:20:7a:ab:62:67:5b:35:9e:e1:
99:37:eb:a6:b1:07:0d:08:fb:d8:f7:84:fb:31:c3:
5d:be:da:2f:6b:b2:7d:f1:4b:e2:c6:49:6e:4d:d5:
a6:e3:df:bd:42:a1:ce:cc:f1:dc:7a:3b:26:86:72:
dc:cd:da:ed:2e:b7:9b:0d:df:7d:b8:f9:25:5d:2f:
64:1e:6f:be:50:a4:8c:79:1c:a8:52:0a:a4:59:cb:
21:43:64:e8:23:7c:41:04:28:65:4a:a8:a3:17:21:
5f:50:df:b5:fe:86:e7:17:cc:a7:59:7c:8c:5f:1e:
02:fd:b9:8a:b9:90:a8:e0:2b:bf:33:c7:61:f0:b4:
ea:2c:bb:1e:36:db:99:20:d6:c8:b9:c7:db:17:1b:
45:f4:f2:0d:68:12:d0:5c:d7:6c:04:e0:2e:e6:b5:
ae:7b:e3:c1:cf:9c:72:a3:d4:fb:7e:98:2e:9f:da:
e7:fc:ff:e2:2b:9d:b3:5a:8f:15:02:83:e6:bb:77:
f3:fd:63:f4:59:04:97:26:bd:1f:1a:12:95:23:af:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:75:4D:FE:5C:C1:24:83:35:98:65:E7:14:D4:BC:E7:39:87:56:70
X509v3 Authority Key Identifier:
keyid:39:DB:9E:8B:0D:7E:2A:74:C7:FA:D5:FB:DF:12:55:B5:5A:8F:DD:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39DB9E8B0D7E2A74C7FAD5FBDF1255B55A8FDD5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/0/323830343a336264633a3a2f33322d3332203d3e20323636313736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3bdc::/32
Signature Algorithm: sha256WithRSAEncryption
a4:ac:aa:7e:b6:b4:2e:1b:1e:b4:35:4c:ff:73:0c:fa:c3:ed:
97:7b:c5:9d:7f:cb:5c:cc:6f:a3:b1:5d:7e:24:64:f3:e5:4f:
2c:4e:29:da:de:1d:b8:bc:0e:1c:66:c1:44:8e:c4:3d:86:38:
06:db:30:e0:86:a6:f1:5a:ae:58:76:72:f2:93:0f:d7:e6:e5:
73:b1:33:e9:f9:69:48:41:95:0b:96:dc:e9:7a:2e:ab:0b:96:
0f:67:cb:a4:a1:b1:94:21:2f:71:22:bf:73:4d:5a:c3:51:9c:
5d:1d:41:1d:89:cd:e5:c1:57:37:1c:f1:dd:e8:59:40:ec:be:
a1:ac:c3:7c:f6:b6:99:e9:93:ee:04:29:13:44:9e:c0:7d:d7:
50:50:1b:e0:48:db:0c:e6:2f:6e:c1:bd:ea:a4:2d:d5:84:89:
78:0b:db:5a:0f:a8:9a:36:1f:5d:52:e2:e6:27:fe:44:74:f6:
9a:ff:79:7f:bf:13:d8:91:d4:17:6d:10:06:c2:e2:60:29:29:
58:d2:f8:7e:4c:cc:10:f1:91:b6:2a:6c:47:0a:d9:0a:21:fc:
c9:a6:64:7a:b5:58:c3:85:67:f4:a5:04:83:2f:c5:53:8c:2b:
39:6f:78:a7:91:68:8b:f5:62:11:c4:76:fb:58:a9:12:41:3c:
01:4c:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:07:08 2025 by rpki-client