Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa
File: 323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier: 3ANBCqQIukCjm+DMeGW2doYHW+nHMK9Agdw7h5lTu0g=
Subject key identifier: 88:10:83:30:3D:A2:C2:F0:A7:4C:16:88:AE:C4:E3:1D:A8:F7:25:AA
Certificate issuer: /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial: 123264EFBED70D450E3F162B3DB9AB2A81D0184D
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa
Signing time: Thu 29 May 2025 18:50:14 +0000
ROA not before: Thu 29 May 2025 18:45:14 +0000
ROA not after: Thu 28 May 2026 18:50:14 +0000
asID: 262503
IP address blocks: 2804:2be0:9200::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:32:64:ef:be:d7:0d:45:0e:3f:16:2b:3d:b9:ab:2a:81:d0:18:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Validity
Not Before: May 29 18:45:14 2025 GMT
Not After : May 28 18:50:14 2026 GMT
Subject: CN=881083303DA2C2F0A74C1688AEC4E31DA8F725AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:01:25:96:3e:61:be:4a:26:5f:bf:23:72:
11:08:74:87:ee:f7:bf:08:0c:af:03:e8:9b:be:2b:
af:08:2c:45:60:8c:f0:57:25:4c:d5:04:55:7a:98:
3b:63:b9:7f:55:7f:35:8f:fa:4d:88:3c:b5:74:27:
05:e3:63:5c:62:9c:a5:f6:6c:1d:85:ac:0c:b9:4b:
b2:01:97:95:8c:0c:17:fe:f1:1e:9a:85:4a:d9:3e:
29:0a:eb:fa:b1:c6:83:da:bb:44:60:d6:26:25:6f:
83:40:39:5d:65:4f:7c:7f:26:91:96:9d:b1:64:9c:
53:76:42:c9:a6:f5:89:4a:12:1b:3e:56:9e:9f:f8:
1d:3e:a6:1b:7f:92:39:11:b6:be:b0:2a:50:3c:2f:
e8:fe:14:c8:a6:ea:3a:52:27:44:90:1d:69:d6:80:
be:0c:94:1f:19:e7:e6:46:e7:61:cf:1d:ed:6b:a2:
ad:ba:ae:e7:c7:fb:cc:58:6c:2c:79:32:4f:d7:e7:
a4:86:93:8f:e5:8d:1d:93:ce:d0:61:71:f3:68:7c:
1d:f2:bf:df:e6:e4:c3:e9:af:14:f3:2f:7b:e7:c2:
c1:53:1b:48:c8:84:67:9c:90:8f:8c:de:8f:ca:9d:
68:d1:d8:91:c9:8b:28:64:64:e2:8d:a5:e3:3e:e5:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:83:30:3D:A2:C2:F0:A7:4C:16:88:AE:C4:E3:1D:A8:F7:25:AA
X509v3 Authority Key Identifier:
keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2be0:9200::/40
Signature Algorithm: sha256WithRSAEncryption
40:37:b1:4c:f4:18:e7:76:6c:9b:e6:86:85:02:ef:34:62:d0:
6e:c6:43:6f:81:df:e7:09:4c:97:fb:39:ac:7c:cf:67:d9:a5:
61:ff:ec:28:59:bc:58:1b:a7:58:cb:53:c3:f7:e5:e6:bc:1b:
8e:ec:0a:49:92:02:1e:6c:89:4d:d1:1d:65:fc:4c:94:33:41:
03:1d:f4:85:72:34:3e:8c:14:ca:34:57:fc:32:a9:c4:70:5f:
9a:ee:4a:04:8b:74:4f:9f:c4:a5:27:6c:0c:d2:a9:53:a3:99:
18:bf:a1:6f:c1:13:be:17:aa:a6:9c:6b:e2:2c:4e:0b:09:6b:
77:6e:39:51:40:80:d0:60:df:06:e5:93:fc:82:f4:6e:24:be:
33:05:d7:3c:ad:dd:3a:0d:c2:90:27:ad:af:5a:5f:0a:31:5e:
ca:98:29:1f:9c:13:4d:a5:94:48:a2:75:21:43:4d:e3:ff:9d:
ac:a9:12:31:c9:09:b3:e1:3d:8d:1d:66:71:d7:34:05:71:6c:
16:45:87:aa:d9:88:76:5c:88:de:5e:9a:92:27:5a:67:74:bf:
46:a1:34:a6:fe:6b:52:f8:03:fa:ad:39:93:15:36:ad:9e:10:
88:9b:49:26:64:ef:94:4d:43:e9:46:84:78:51:22:98:ba:96:
ea:15:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:48:18 2025 by rpki-client