Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/323830343a376638633a3a2f33322d313238203d3e20323731363935.roa
File: 323830343a376638633a3a2f33322d313238203d3e20323731363935.roa (raw, json)
Hash identifier: EKT4PMD9sCW3kyqn9XgnhpA0gAjIdeev4eJLNmChjP4=
Subject key identifier: 36:BF:B6:00:AD:E4:D1:64:A7:5D:F7:38:CB:25:73:CB:D3:93:A0:B3
Certificate issuer: /CN=328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38
Certificate serial: 6B8FB1C4FB65B1B31D516620A7BD73CD66BE3678
Authority key identifier: 32:85:73:A0:E4:A7:C9:F4:46:6B:FF:0B:6C:B9:F8:1F:FF:33:EA:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/323830343a376638633a3a2f33322d313238203d3e20323731363935.roa
Signing time: Sat 09 Aug 2025 14:12:56 +0000
ROA not before: Sat 09 Aug 2025 14:07:56 +0000
ROA not after: Sat 08 Aug 2026 14:12:56 +0000
asID: 271695
IP address blocks: 2804:7f8c::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8f:b1:c4:fb:65:b1:b3:1d:51:66:20:a7:bd:73:cd:66:be:36:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38
Validity
Not Before: Aug 9 14:07:56 2025 GMT
Not After : Aug 8 14:12:56 2026 GMT
Subject: CN=36BFB600ADE4D164A75DF738CB2573CBD393A0B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:aa:e3:d2:ff:8e:fc:3f:d9:3f:d3:b2:8c:79:
42:4c:64:89:d4:cd:4e:a3:34:32:db:28:ba:15:0c:
e4:d4:66:36:10:c0:67:e5:a3:ca:42:9b:29:e8:aa:
72:f1:b9:32:9b:cc:d0:e0:40:c8:6b:09:09:08:c5:
d2:b5:6c:2e:77:62:8e:3b:71:d3:a0:e2:d9:52:f2:
f4:db:f9:14:e6:74:67:da:22:e7:10:6d:fe:db:eb:
cd:d0:bd:67:c9:04:a1:ed:b8:79:24:3d:20:1e:13:
2f:9c:1a:33:1b:a2:31:3d:b3:ff:d7:b0:aa:6d:ed:
02:27:3a:95:4d:8f:3a:5d:14:08:be:9a:fb:46:d1:
f2:2d:06:9f:61:13:94:f8:78:d8:94:57:84:7d:a8:
7c:49:88:2c:e7:2a:55:6e:aa:b2:eb:1a:5f:2a:ca:
0b:df:f7:52:1a:72:f8:94:38:c7:5c:ea:43:4e:83:
01:64:3c:a3:0c:e7:15:f2:cf:25:4f:14:1c:c8:2b:
d3:ec:42:2b:00:d7:24:20:85:8b:f9:06:24:1f:2f:
ff:07:70:b2:5f:23:b9:72:f5:1e:29:9d:d3:15:c3:
32:bd:73:e5:97:84:85:af:62:c3:38:52:cb:1d:d2:
5e:86:21:94:05:35:43:ed:65:ea:d8:20:7d:14:5f:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BF:B6:00:AD:E4:D1:64:A7:5D:F7:38:CB:25:73:CB:D3:93:A0:B3
X509v3 Authority Key Identifier:
keyid:32:85:73:A0:E4:A7:C9:F4:46:6B:FF:0B:6C:B9:F8:1F:FF:33:EA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328573A0E4A7C9F4466BFF0B6CB9F81FFF33EA38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PEGshzPBREJYPJPsGRVgmR9usVQrAiSEfKudf6wMZVx/0/323830343a376638633a3a2f33322d313238203d3e20323731363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7f8c::/32
Signature Algorithm: sha256WithRSAEncryption
0a:fb:56:ab:87:c3:e6:02:9f:4b:1c:8a:97:bc:8e:dd:f2:18:
2c:31:17:bf:f3:53:1c:a7:0a:ad:fa:b1:d6:c7:71:fa:94:8d:
99:1f:38:75:a1:e2:64:6c:b0:f5:4b:12:79:1a:4c:a5:e2:aa:
f3:c4:5b:a9:42:7c:68:6f:7a:20:1c:2d:10:af:f5:c2:99:e6:
02:49:e7:25:3b:0e:f1:eb:09:e3:ae:64:3d:dd:59:bb:e2:ba:
ab:4f:d7:ad:8b:e9:06:c5:ce:a4:2c:ab:4c:26:22:d1:60:fb:
64:f1:c5:95:2b:ed:5a:c8:24:db:63:33:d8:e0:c1:26:a5:1d:
df:d4:8b:ab:f1:17:60:e0:25:b1:60:bd:91:22:20:b1:8c:77:
ae:22:b7:c9:66:b8:d4:ba:d8:8f:e0:54:b9:1c:bd:0d:bf:b4:
4f:cc:0f:3f:42:c7:15:18:27:13:00:77:45:0e:85:1e:52:e3:
a8:6e:90:10:3c:0a:31:23:33:ee:d9:b8:cd:56:dd:ab:3f:47:
78:e9:5b:8a:73:03:7f:0d:0f:87:21:e5:80:fc:6f:14:4d:24:
cf:6c:f5:30:83:1a:6f:7c:c6:50:26:48:aa:15:68:8e:fc:82:
a6:74:fd:ec:0f:d9:07:d8:e8:cc:c3:55:62:2d:f7:fe:e1:b1:
94:28:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:10 2025 by rpki-client