Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3438203d3e20323635303631.roa
File: 323830343a333233303a3a2f33322d3438203d3e20323635303631.roa (raw, json)
Hash identifier: xy3xfPU0JUKgnbBVOgoEqFBxCL05vkIqj/vDCoeH+YQ=
Subject key identifier: C7:E7:DA:14:D3:13:05:E0:5D:44:27:03:F4:11:B2:43:B8:24:A7:82
Certificate issuer: /CN=4235A133A2E6DD028FDB7C6008A47DA80AED066E
Certificate serial: 5BBDB342FF99EDF62ACD87CE4115DDAF1A5999FC
Authority key identifier: 42:35:A1:33:A2:E6:DD:02:8F:DB:7C:60:08:A4:7D:A8:0A:ED:06:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4235A133A2E6DD028FDB7C6008A47DA80AED066E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3438203d3e20323635303631.roa
Signing time: Tue 08 Jul 2025 18:35:56 +0000
ROA not before: Tue 08 Jul 2025 18:30:56 +0000
ROA not after: Tue 07 Jul 2026 18:35:56 +0000
asID: 265061
IP address blocks: 2804:3230::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:bd:b3:42:ff:99:ed:f6:2a:cd:87:ce:41:15:dd:af:1a:59:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4235A133A2E6DD028FDB7C6008A47DA80AED066E
Validity
Not Before: Jul 8 18:30:56 2025 GMT
Not After : Jul 7 18:35:56 2026 GMT
Subject: CN=C7E7DA14D31305E05D442703F411B243B824A782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:40:bf:a7:38:97:11:93:8d:e1:3e:f4:3b:
76:a8:6c:ce:69:23:3a:11:1d:c7:ff:bd:c0:93:f4:
5f:6f:43:c5:1e:3b:c6:38:14:98:ca:99:a0:82:8b:
45:6c:fc:01:04:61:63:80:f4:00:b1:5c:73:e6:37:
94:18:d6:6b:c4:9a:0e:ba:c2:20:dd:ab:0f:46:99:
c9:47:04:a9:51:96:8b:66:1b:ad:44:14:67:84:f2:
22:84:ec:73:90:67:19:79:f6:9d:21:11:1f:2f:26:
27:92:3f:6a:7d:18:7d:7d:2a:79:1a:0f:a5:55:e6:
c7:ae:30:f9:9f:f1:6d:49:91:d8:75:e1:75:11:9b:
d2:f7:8e:9a:56:5e:ab:19:6b:4c:f0:e0:06:f4:a7:
75:9c:f0:e1:90:ac:27:42:48:82:e3:2f:04:1b:63:
18:63:0c:43:cd:50:15:d6:93:db:c1:a3:56:ec:ee:
ac:1f:14:be:95:2a:ba:45:f6:34:b5:b1:85:15:ec:
c6:07:be:f3:e8:7c:73:4b:49:14:5f:87:91:f4:df:
b5:35:c6:75:42:9f:42:72:9d:f4:54:66:5f:85:ce:
f9:3a:d9:00:ac:ab:fc:8b:1a:91:3a:1a:0c:cf:df:
7b:c6:1a:1b:55:8d:dc:c5:0b:37:e0:c4:41:37:6f:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:DA:14:D3:13:05:E0:5D:44:27:03:F4:11:B2:43:B8:24:A7:82
X509v3 Authority Key Identifier:
keyid:42:35:A1:33:A2:E6:DD:02:8F:DB:7C:60:08:A4:7D:A8:0A:ED:06:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/4235A133A2E6DD028FDB7C6008A47DA80AED066E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4235A133A2E6DD028FDB7C6008A47DA80AED066E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/323830343a333233303a3a2f33322d3438203d3e20323635303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3230::/32
Signature Algorithm: sha256WithRSAEncryption
43:0d:cf:79:49:70:0a:b9:e6:e3:0d:5c:f7:d7:fb:38:2e:ff:
6f:7e:ec:e0:bc:fc:5b:e5:8c:c1:cd:e6:3f:30:69:44:75:1c:
b3:f6:1c:e8:89:e3:45:b5:c2:00:b7:f6:61:95:e6:26:38:9d:
79:27:4b:49:10:40:1a:81:eb:f0:90:89:77:f8:9a:7e:8d:5b:
ad:c4:9a:50:62:af:ec:96:e0:5c:4d:b0:70:3a:d0:1a:e6:c2:
38:fe:bd:a9:06:2c:1c:e2:86:61:14:fe:9f:2a:86:be:16:78:
3d:7c:3a:8e:f3:12:fa:5a:38:8d:b1:2e:82:ed:f8:9e:4c:f8:
31:0b:18:05:ba:0b:22:7c:02:2e:8c:68:71:21:55:15:58:36:
51:66:11:3f:a2:90:80:16:7c:0c:2f:44:28:59:fd:2a:15:ed:
f1:34:b3:1a:6e:15:ae:30:08:42:3f:33:f9:59:e4:40:24:6a:
87:f7:15:7b:bb:1b:61:ba:de:76:be:cd:5c:b3:5a:cb:39:c5:
4d:74:dc:dd:22:8e:83:fe:ac:a9:d3:ba:42:c8:ce:e8:fa:82:
64:05:4f:d1:bc:63:b9:51:ff:0a:70:de:7f:63:ed:b9:c5:a4:
84:c9:32:a0:94:20:fa:b5:dd:89:d6:6a:d3:32:75:9b:54:d9:
65:19:87:74
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUW72zQv+Z7fYqzYfOQRXdrxpZmfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIzNUExMzNBMkU2REQwMjhGREI3QzYwMDhBNDdEQTgw
QUVEMDY2RTAeFw0yNTA3MDgxODMwNTZaFw0yNjA3MDcxODM1NTZaMDMxMTAvBgNV
BAMTKEM3RTdEQTE0RDMxMzA1RTA1RDQ0MjcwM0Y0MTFCMjQzQjgyNEE3ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcNUC/pziXEZON4T70O3aobM5p
IzoRHcf/vcCT9F9vQ8UeO8Y4FJjKmaCCi0Vs/AEEYWOA9ACxXHPmN5QY1mvEmg66
wiDdqw9GmclHBKlRlotmG61EFGeE8iKE7HOQZxl59p0hER8vJieSP2p9GH19Knka
D6VV5seuMPmf8W1Jkdh14XURm9L3jppWXqsZa0zw4Ab0p3Wc8OGQrCdCSILjLwQb
YxhjDEPNUBXWk9vBo1bs7qwfFL6VKrpF9jS1sYUV7MYHvvPofHNLSRRfh5H037U1
xnVCn0JynfRUZl+Fzvk62QCsq/yLGpE6GgzP33vGGhtVjdzFCzfgxEE3b2FBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUx+faFNMTBeBdRCcD9BGyQ7gkp4IwHwYDVR0j
BBgwFoAUQjWhM6Lm3QKP23xgCKR9qArtBm4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1VRMmNvY1B3ZFFuRjZHM0txYnoxTEZ5RG5XYTFYRGVuVzJzb01UMTZw
Z2IvMC80MjM1QTEzM0EyRTZERDAyOEZEQjdDNjAwOEE0N0RBODBBRUQwNjZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMzVBMTMzQTJFNkREMDI4
RkRCN0M2MDA4QTQ3REE4MEFFRDA2NkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdVUTJjb2NQd2RRbkY2RzNLcWJ6MUxGeURuV2ExWERlblcyc29NVDE2cGdiLzAv
MzIzODMwMzQzYTMzMzIzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQyMDANBgkqhkiG9w0BAQsFAAOCAQEAQw3PeUlw
Crnm4w1c99f7OC7/b37s4Lz8W+WMwc3mPzBpRHUcs/Yc6InjRbXCALf2YZXmJjid
eSdLSRBAGoHr8JCJd/iafo1brcSaUGKv7JbgXE2wcDrQGubCOP69qQYsHOKGYRT+
nyqGvhZ4PXw6jvMS+lo4jbEugu34nkz4MQsYBboLInwCLoxocSFVFVg2UWYRP6KQ
gBZ8DC9EKFn9KhXt8TSzGm4VrjAIQj8z+VnkQCRqh/cVe7sbYbredr7NXLNayznF
TXTc3SKOg/6sqdO6QsjO6PqCZAVP0bxjuVH/CnDef2PtucWkhMkyoJQg+rXdidZq
0zJ1m1TZZRmHdA==
-----END CERTIFICATE-----
Generated at Sat Jul 12 17:06:24 2025 by rpki-client