Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
File: 323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier: rVFle8eNCGz6K5kxKH6tiSdll0s8bzTJnBMxJnJafWg=
Subject key identifier: A1:1B:65:FA:8B:F0:65:02:D3:CF:E6:66:4B:1C:16:47:E5:8E:91:15
Certificate issuer: /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial: 17C653AE471C79190EEFB24AFA4450CC7D559F37
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
Signing time: Thu 06 Mar 2025 09:31:53 +0000
ROA not before: Thu 06 Mar 2025 09:26:53 +0000
ROA not after: Thu 05 Mar 2026 09:31:53 +0000
asID: 268296
IP address blocks: 2804:4efc:3000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c6:53:ae:47:1c:79:19:0e:ef:b2:4a:fa:44:50:cc:7d:55:9f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Validity
Not Before: Mar 6 09:26:53 2025 GMT
Not After : Mar 5 09:31:53 2026 GMT
Subject: CN=A11B65FA8BF06502D3CFE6664B1C1647E58E9115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:cb:df:d9:e1:fd:89:5f:fe:d3:e1:61:d3:
ed:74:d9:49:9a:01:85:47:c2:70:a0:da:c5:9e:69:
4a:27:86:0b:75:9b:ef:bf:ee:b4:e5:6c:c6:ee:e2:
dd:e4:11:8a:b8:59:c9:58:23:48:e0:60:07:15:cc:
b6:ed:88:d7:05:84:11:d1:38:59:1a:08:09:4a:01:
6d:92:9a:01:02:6e:61:84:5b:4e:78:62:80:9a:fb:
a2:ff:6a:b1:a0:55:9d:bb:62:17:1c:b9:43:0e:c5:
d4:86:11:08:78:32:fd:9a:3e:8d:00:69:9f:6d:87:
c1:49:e5:44:a6:ac:3e:4b:da:37:cb:94:f0:99:99:
69:3e:34:83:f8:88:49:a7:1d:f1:b7:b2:ec:e2:e1:
ff:aa:95:68:27:f0:88:88:c0:47:25:22:6e:a3:ef:
52:bf:95:41:84:d0:5f:64:3b:61:bb:ee:7e:c5:f6:
30:63:8e:b0:52:8e:4a:76:9f:6e:db:70:f5:73:30:
d6:1d:33:dd:0f:84:88:df:c4:09:6a:8d:9e:38:b7:
f6:17:57:5f:b1:0a:84:53:45:68:d7:6a:9b:47:e7:
be:4f:cb:8f:cf:5d:c7:9f:39:bf:12:b9:9d:25:98:
1b:68:aa:da:90:ff:b1:6a:6a:d1:b3:40:97:17:18:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:65:FA:8B:F0:65:02:D3:CF:E6:66:4B:1C:16:47:E5:8E:91:15
X509v3 Authority Key Identifier:
keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4efc:3000::/36
Signature Algorithm: sha256WithRSAEncryption
71:1a:b4:af:f5:99:52:b9:56:0d:99:da:0b:36:7c:c7:08:06:
23:e2:a6:c8:d7:a4:96:e7:23:20:ce:dd:50:23:57:3f:84:9d:
f8:8a:20:df:b9:e2:19:39:bd:ca:af:af:29:41:26:0c:92:6d:
4d:4e:3c:62:e3:8f:ae:73:13:dd:ef:56:33:81:80:50:b4:71:
a4:c5:74:f8:dc:e6:85:31:60:bc:d0:d6:b8:e3:b6:40:5d:ed:
97:d1:54:dc:dc:90:bd:43:d3:3c:e9:94:d3:b4:32:6e:86:b7:
32:c4:65:51:0c:de:8a:6d:ad:a9:ee:3a:3f:86:78:e6:82:a7:
26:d6:93:a2:09:67:b3:6c:ae:4a:65:0f:60:66:2b:b1:00:fd:
e7:7b:30:3d:3a:1d:3b:aa:9f:ec:e4:17:da:ef:db:a8:e0:4d:
4d:98:18:21:d1:7e:08:9e:32:cc:aa:84:b1:92:dc:98:ce:42:
40:62:d6:66:57:72:12:34:81:8b:05:0e:68:d4:07:65:33:c4:
63:dc:88:9b:35:06:fa:8d:ae:26:ca:7a:4d:1c:b2:55:a4:04:
34:99:26:2b:7e:78:a9:b5:c3:5b:29:20:11:f4:83:c4:e6:74:
b3:1b:dc:a1:5c:c6:94:e1:17:64:55:33:6c:3a:24:a4:bf:74:
b2:3b:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:49:36 2025 by rpki-client