Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
File: 323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (raw, json)
Hash identifier: K65c6CQDYmeBQFWU/ufGUImXBQEHhvkmt5bgL91Dh7s=
Subject key identifier: FC:B7:55:B0:8D:58:54:34:57:87:3D:40:79:95:BA:B1:E8:48:9C:11
Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial: 246931E79EBE2DBFF233BD50539AA0259F3A8848
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
Signing time: Thu 06 Mar 2025 09:21:54 +0000
ROA not before: Thu 06 Mar 2025 09:16:54 +0000
ROA not after: Thu 05 Mar 2026 09:21:54 +0000
asID: 267222
IP address blocks: 2804:4a2c::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:69:31:e7:9e:be:2d:bf:f2:33:bd:50:53:9a:a0:25:9f:3a:88:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Validity
Not Before: Mar 6 09:16:54 2025 GMT
Not After : Mar 5 09:21:54 2026 GMT
Subject: CN=FCB755B08D58543457873D407995BAB1E8489C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:93:fc:98:a7:41:0a:63:cb:56:7d:7f:fc:6a:
44:f6:80:b2:88:26:c5:e3:d7:37:df:35:d2:30:3a:
6a:f1:e2:b3:69:d5:61:ff:fe:46:d8:06:46:e8:88:
44:9c:5b:92:1f:3a:a9:fa:55:19:8d:e9:e8:fe:7a:
e2:28:33:8b:f2:2e:e7:c5:d8:fc:3d:60:80:7c:24:
34:30:0b:ba:66:87:3c:ae:2c:cd:b5:fa:6e:cd:1a:
9d:53:b0:83:6f:e2:4b:73:fa:fe:d7:83:be:2f:87:
4d:76:b6:3d:5d:cc:11:6f:4a:24:a3:91:5b:d0:e7:
12:a1:e7:ef:ae:67:b6:b5:78:37:26:67:b4:ff:ba:
28:1a:f4:19:48:17:4a:61:76:f8:5c:26:64:bd:de:
25:b6:ca:26:3b:28:20:b1:98:5c:4d:0c:9c:78:f5:
ec:3b:72:ae:12:3e:0f:7d:ce:c7:0a:c4:9a:1f:90:
e4:4a:fa:d0:61:e0:aa:cd:1e:ff:ac:e7:03:7e:2c:
be:8d:5c:c4:79:6a:b2:a5:c4:f6:72:66:b2:2f:61:
e7:ab:79:31:f3:01:cb:b5:28:7c:c6:d4:a4:2a:31:
ff:ef:54:62:7b:7d:16:dd:fe:a8:7e:b1:ab:2b:92:
e5:b9:f1:54:51:21:f2:e4:44:d3:f2:43:0a:a6:5b:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:55:B0:8D:58:54:34:57:87:3D:40:79:95:BA:B1:E8:48:9C:11
X509v3 Authority Key Identifier:
keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4a2c::/32
Signature Algorithm: sha256WithRSAEncryption
55:ab:e4:c4:13:28:ec:51:e4:cf:bc:c7:8a:98:fa:2f:a9:ac:
47:e6:28:df:3c:21:80:85:1f:21:f5:88:8f:4b:21:2e:1c:a4:
00:9b:38:b0:33:a7:af:db:74:3b:f4:30:1e:67:4b:91:94:45:
85:c7:da:8c:99:ef:97:d4:8e:97:7a:e2:94:e4:9d:e8:7e:fc:
0f:90:e8:45:a9:41:98:c6:76:cc:c7:dd:4b:b9:b7:41:ac:b3:
d7:39:1a:05:f3:fc:db:fc:99:3d:d0:04:f5:a1:06:38:ff:dd:
9a:53:5e:88:ea:36:27:90:0d:f2:ad:01:1e:90:64:1a:07:d9:
6a:00:28:54:16:bc:11:08:0f:69:e6:62:08:aa:ad:b4:5e:95:
5e:4c:48:f2:3e:11:69:21:d4:00:60:ea:70:5f:ad:c2:65:c7:
b5:2e:2d:01:49:e8:a3:76:9c:0f:6e:b3:64:4b:c1:46:40:3a:
d8:6a:ca:ad:1d:40:56:2c:b3:33:88:4f:b4:7d:2a:4e:ec:fa:
f5:46:14:db:97:13:33:4e:09:e7:66:62:12:cd:f0:7c:15:af:
65:a0:d9:72:ea:a1:5a:b8:26:10:dc:ff:2c:8b:60:76:3c:65:
66:ae:07:4e:a0:11:c2:84:67:d0:3e:42:ff:3a:8e:00:2f:35:
05:13:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:05:25 2025 by rpki-client