Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
File: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (raw, json)
Hash identifier: HmTEbm+uxwYtnGHqZk1r0ClUuRUht7gj6aodB9kd0zA=
Subject key identifier: 4B:F5:4E:FF:8D:67:EA:3C:6D:BE:A1:F8:6C:9E:9D:05:FC:81:E2:F7
Certificate issuer: /CN=AB5501490ACA7067C26C7BD37A447971D139570B
Certificate serial: 72B893B396C50430C37CAA2350D7CF2B28522E71
Authority key identifier: AB:55:01:49:0A:CA:70:67:C2:6C:7B:D3:7A:44:79:71:D1:39:57:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB5501490ACA7067C26C7BD37A447971D139570B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
Signing time: Tue 01 Jul 2025 13:46:04 +0000
ROA not before: Tue 01 Jul 2025 13:41:04 +0000
ROA not after: Tue 30 Jun 2026 13:46:04 +0000
asID: 262403
IP address blocks: 2804:3e0::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b8:93:b3:96:c5:04:30:c3:7c:aa:23:50:d7:cf:2b:28:52:2e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB5501490ACA7067C26C7BD37A447971D139570B
Validity
Not Before: Jul 1 13:41:04 2025 GMT
Not After : Jun 30 13:46:04 2026 GMT
Subject: CN=4BF54EFF8D67EA3C6DBEA1F86C9E9D05FC81E2F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:0a:5c:74:be:a4:d8:4d:eb:35:d6:19:c2:
7d:34:0f:ca:c3:8d:47:13:95:0d:79:56:f8:8b:61:
80:39:7e:9a:1a:27:02:b1:e1:64:8a:5e:eb:16:d0:
29:cc:55:90:ab:4b:24:be:84:e8:2e:ef:ba:92:a7:
6d:cf:47:7a:a2:0c:7e:f1:db:3d:68:59:81:f7:20:
d1:3f:02:98:df:3c:91:f7:71:38:e1:03:f8:f5:b4:
d4:56:d3:d3:44:85:85:e6:37:48:c2:7f:fe:06:b7:
a3:f7:6a:35:24:6a:48:d2:75:3b:a7:9f:6e:50:81:
b1:35:b2:63:84:af:0b:d1:68:3f:30:a7:e5:07:b0:
91:77:e4:34:2d:65:dd:c3:a7:b2:9b:50:af:0a:88:
f3:91:ba:4e:54:e7:48:f4:ef:95:28:e5:10:a6:10:
4e:ea:42:a0:e2:9f:3b:ea:21:84:d3:19:dd:17:9d:
db:68:c7:c7:10:c2:c3:ff:c7:4c:35:76:0b:12:b1:
f1:13:f4:17:eb:55:33:89:fd:49:62:ed:b5:af:7a:
a9:0b:c8:94:76:7c:58:da:49:27:75:2a:cf:eb:94:
74:16:08:f9:dc:27:01:42:94:82:a7:34:8d:a4:94:
b5:49:e2:e1:59:e4:ec:9b:50:0a:86:77:a0:61:41:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F5:4E:FF:8D:67:EA:3C:6D:BE:A1:F8:6C:9E:9D:05:FC:81:E2:F7
X509v3 Authority Key Identifier:
keyid:AB:55:01:49:0A:CA:70:67:C2:6C:7B:D3:7A:44:79:71:D1:39:57:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/AB5501490ACA7067C26C7BD37A447971D139570B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB5501490ACA7067C26C7BD37A447971D139570B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3e0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:1f:5a:da:1a:0d:f7:1c:2a:b7:62:82:e7:2b:be:78:c2:0b:
15:a3:6f:ec:15:e9:de:c3:70:cb:2e:f5:60:68:98:7d:fe:64:
b5:cb:e8:16:1b:de:d4:59:98:6a:58:be:83:54:02:53:86:41:
ac:ef:42:c3:c8:98:8a:39:7f:c0:c9:17:26:66:ca:53:ba:79:
02:21:40:88:30:06:97:67:01:f5:d7:d0:1a:36:6a:0b:69:f7:
95:7e:41:31:bf:44:f8:94:24:d0:71:a8:b5:1d:60:05:ea:df:
0f:7f:be:52:a0:91:2b:99:18:27:f9:8c:ff:c2:5d:98:78:ad:
ea:2c:cd:9f:45:64:3d:d7:4e:02:fb:45:29:6a:a5:4e:10:5b:
17:8e:ef:8f:fe:f2:e1:62:e5:29:68:c8:27:0f:2a:45:3e:e4:
76:15:57:c8:ad:20:d8:98:cc:9b:ee:14:37:c6:a4:5f:d2:f9:
53:97:92:8b:a2:e9:bd:91:68:e1:2c:36:d0:54:1c:5d:e0:d9:
e7:c0:bd:d0:b4:92:97:b2:b0:78:e3:be:ff:00:db:6d:26:00:
99:e4:dc:63:6b:42:cc:d9:0a:fd:89:fb:c4:a6:2f:d0:04:39:
3a:0b:e0:0c:bc:66:90:af:64:8c:a4:5f:4b:c7:cb:ab:cd:3b:
17:2f:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 18:29:59 2025 by rpki-client