Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa
File: 323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa (raw, json)
Hash identifier: RSwOkD5admMJdtbRFy/7LEnCcc/q+r/JQF92gtksQbM=
Subject key identifier: 7C:7B:14:EB:A9:BE:31:0F:CF:C4:F7:5D:13:DB:F2:14:43:D4:9F:AE
Certificate issuer: /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial: 0CE98F7A93B055DB79910C9B4C2E4CD340D76CA8
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa
Signing time: Wed 05 Mar 2025 19:00:14 +0000
ROA not before: Wed 05 Mar 2025 18:55:14 +0000
ROA not after: Wed 04 Mar 2026 19:00:14 +0000
asID: 266623
IP address blocks: 2804:3ed4:8000::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e9:8f:7a:93:b0:55:db:79:91:0c:9b:4c:2e:4c:d3:40:d7:6c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Validity
Not Before: Mar 5 18:55:14 2025 GMT
Not After : Mar 4 19:00:14 2026 GMT
Subject: CN=7C7B14EBA9BE310FCFC4F75D13DBF21443D49FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:e9:0f:51:80:18:de:a4:fd:4d:7d:61:b9:
44:56:5c:a7:5d:3a:ac:11:ca:f2:ac:d6:54:c8:34:
bf:2b:53:2d:2e:a6:53:58:78:a3:42:d5:fe:64:74:
85:18:4e:26:83:3e:a0:37:b5:e7:00:d1:4e:94:9b:
d0:60:ae:03:f9:06:a8:46:4e:30:6c:80:8f:33:10:
f5:03:81:5c:5f:db:aa:1a:b2:0f:cd:6e:cc:74:7d:
4b:ba:86:34:f3:81:5f:fd:dc:49:ac:4f:e8:8b:79:
29:54:22:e3:af:24:2d:99:87:73:f3:2a:0b:35:27:
16:99:84:c2:5d:88:cf:12:d9:95:90:90:db:8b:3d:
b1:8a:28:d4:83:e6:b2:59:bb:29:e3:48:64:03:61:
5d:b9:f6:48:55:8e:e3:01:da:df:1a:ea:8b:7f:8e:
ff:4b:fd:d0:dc:2a:56:81:b8:3b:20:43:f5:2d:d5:
63:1e:ce:b3:0d:1e:0c:8d:f4:53:78:e1:ba:37:c1:
1b:20:59:64:8d:31:13:9e:12:57:72:c3:07:dc:e0:
17:9f:95:b5:c7:9c:f6:73:a6:75:5a:ae:20:52:3e:
89:51:1a:33:aa:c3:bf:8a:e2:1a:37:8d:88:c1:17:
de:b8:7f:63:8b:1d:bb:d8:1c:e3:62:1e:1f:8a:c7:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:14:EB:A9:BE:31:0F:CF:C4:F7:5D:13:DB:F2:14:43:D4:9F:AE
X509v3 Authority Key Identifier:
keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3ed4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
05:99:06:86:8f:19:ac:8f:71:8c:cd:a8:e6:fa:37:5a:06:ad:
2c:3e:3e:2b:1b:18:77:61:62:31:d0:cb:1b:e1:30:62:74:62:
9b:58:ba:51:ba:ae:c2:a8:9c:88:96:2c:04:c4:cb:60:81:95:
5a:27:7e:c0:74:37:ce:6e:36:5f:61:7a:66:43:75:58:61:0d:
08:f5:78:9d:c2:fa:57:7d:4f:9d:59:3b:80:ee:86:62:6d:0f:
d6:56:da:6c:3d:79:9f:dc:55:33:39:24:33:c0:a4:86:97:c9:
60:f3:00:ed:9a:c3:4c:14:3c:4f:0d:1a:17:5b:3f:33:a8:f4:
d3:90:a0:a3:81:14:34:67:83:d3:0b:7b:1c:d2:72:ef:3a:4d:
80:9b:53:ef:aa:46:23:1e:3e:1b:bd:35:fa:6f:f2:a8:0b:6d:
87:92:e9:cd:a7:68:42:69:95:44:57:a8:b6:ba:d9:7e:28:8a:
5d:78:02:7e:aa:85:80:0c:fa:2e:60:89:bb:c7:9f:d0:98:e8:
e5:55:39:ce:8c:79:38:c3:ac:08:20:48:13:16:e1:e2:12:dd:
96:75:f3:f9:88:20:a7:08:d0:47:e6:56:ff:71:77:0a:b9:8a:
1a:99:7e:dd:c5:de:b4:89:1e:76:a8:26:d8:c7:4d:b1:0c:e4:
03:30:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:45:25 2025 by rpki-client