Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/323830343a326464383a666637303a3a2f34342d3434203d3e20323635333037.roa
File: 323830343a326464383a666637303a3a2f34342d3434203d3e20323635333037.roa (raw, json)
Hash identifier: zc15EqzjS1PUTpnKp4JvsyBQHR1EJsFS6ZXB2CowTzg=
Subject key identifier: 1A:8E:45:8E:BD:48:EA:4E:D0:50:70:FA:BC:A4:44:50:14:1B:D6:04
Certificate issuer: /CN=764567616A60FC68D3BC1B6D3EC8446979113187
Certificate serial: 48C94EFA82BB47BBF12CDE944C6EA8891EB26B17
Authority key identifier: 76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/323830343a326464383a666637303a3a2f34342d3434203d3e20323635333037.roa
Signing time: Fri 04 Jul 2025 13:24:43 +0000
ROA not before: Fri 04 Jul 2025 13:19:43 +0000
ROA not after: Fri 03 Jul 2026 13:24:43 +0000
asID: 265307
IP address blocks: 2804:2dd8:ff70::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c9:4e:fa:82:bb:47:bb:f1:2c:de:94:4c:6e:a8:89:1e:b2:6b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764567616A60FC68D3BC1B6D3EC8446979113187
Validity
Not Before: Jul 4 13:19:43 2025 GMT
Not After : Jul 3 13:24:43 2026 GMT
Subject: CN=1A8E458EBD48EA4ED05070FABCA44450141BD604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:f7:70:0d:e7:12:ea:f6:5a:ed:10:e2:2c:
98:49:07:d6:23:b6:fc:ce:5d:14:d4:aa:61:e6:bc:
6c:51:57:75:66:1d:ab:5d:c3:f9:39:d0:12:8d:26:
02:e8:d5:71:ff:73:7e:ab:a9:74:03:62:2a:92:f2:
a2:23:94:22:19:fb:84:86:1d:8e:3a:c2:40:d2:d0:
e9:a9:d2:a3:2b:9c:73:33:b8:b8:6b:73:63:f4:46:
8c:1e:57:da:04:6d:e6:d9:01:87:db:fc:f9:b5:c4:
a4:75:0d:d4:d2:11:3b:82:f2:ef:e1:ad:2b:c9:df:
b6:cb:00:ee:ab:5b:16:c2:fa:bf:86:f2:84:11:ef:
61:31:83:bd:f0:19:3c:bc:76:f0:85:3a:f8:94:96:
ae:75:1e:c0:90:a5:dd:d6:ce:ac:94:cb:4a:22:eb:
75:a7:15:10:5e:c5:08:a0:8d:d7:b1:d2:55:af:22:
b0:7e:28:ed:22:f7:37:1d:91:15:d6:7d:1c:d6:f3:
a8:61:da:9f:cf:e4:d4:42:d6:43:d2:a9:16:5f:58:
48:60:a1:2a:98:f1:ed:25:de:ba:b1:0f:ea:22:a4:
7d:0f:7d:fc:77:3e:5f:11:1f:1c:37:c2:78:ee:2a:
70:d0:24:f3:90:ec:ff:9e:80:45:5e:4a:71:0f:dc:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8E:45:8E:BD:48:EA:4E:D0:50:70:FA:BC:A4:44:50:14:1B:D6:04
X509v3 Authority Key Identifier:
keyid:76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/323830343a326464383a666637303a3a2f34342d3434203d3e20323635333037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2dd8:ff70::/44
Signature Algorithm: sha256WithRSAEncryption
08:23:fc:eb:56:fd:83:16:77:33:85:bf:56:b4:72:54:d1:9e:
25:e4:fe:af:d8:3b:27:6d:54:4b:a7:26:90:3e:64:9b:a6:98:
4d:6e:f5:0b:7c:49:fe:22:32:7e:4c:95:08:33:c1:62:df:5a:
d3:60:f2:a0:ec:5b:fb:2d:5f:31:f3:af:10:bb:b0:92:98:3b:
d8:47:13:60:b9:29:3c:8e:59:db:99:19:fc:a5:b7:94:cd:89:
77:c4:8e:7f:c9:10:19:d4:9c:d1:3a:df:ab:37:bb:75:f9:8e:
68:88:18:30:26:fe:15:15:51:66:2c:67:25:18:c6:22:c1:bb:
89:fa:ab:49:ac:09:dc:95:57:08:ec:5b:12:de:55:ca:8c:ed:
5c:5a:08:18:1a:7f:ab:74:fa:3b:ba:f7:b4:d1:2e:13:2d:d2:
d0:60:f6:e0:d4:7d:94:bb:ee:bb:79:37:b0:27:d8:a1:6d:a8:
46:0c:c1:0e:6d:98:ea:4f:eb:49:14:60:80:7b:94:8f:95:6b:
88:81:46:ad:85:51:26:bd:02:f1:5f:92:e3:9d:92:29:04:90:
45:99:a0:41:89:d2:92:c6:8e:e0:2e:a6:30:ee:db:10:db:b1:
d5:77:8f:ed:93:00:94:0c:c9:e0:da:4b:1a:86:69:2f:80:0c:
d5:39:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:50 2025 by rpki-client