
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/323830343a353934633a3a2f33322d313238203d3e203532383730.roa
File: 323830343a353934633a3a2f33322d313238203d3e203532383730.roa (raw, json)
Hash identifier: 0UM4wrz0i54Wn/xLAIKfFUxi3cJH/Yp23jknlxWGpzY=
Subject key identifier: 23:F6:E4:41:AF:B4:ED:E2:E5:ED:63:B0:D9:BD:1E:C1:EC:4D:22:1E
Certificate issuer: /CN=2F8C4EECD957464FDCE83518985B0C91CC92EBC4
Certificate serial: 3C15547561A957FB79447308BF499DF9EFF889A9
Authority key identifier: 2F:8C:4E:EC:D9:57:46:4F:DC:E8:35:18:98:5B:0C:91:CC:92:EB:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F8C4EECD957464FDCE83518985B0C91CC92EBC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/323830343a353934633a3a2f33322d313238203d3e203532383730.roa
Signing time: Fri 20 Jun 2025 16:36:03 +0000
ROA not before: Fri 20 Jun 2025 16:31:03 +0000
ROA not after: Fri 19 Jun 2026 16:36:03 +0000
asID: 52870
IP address blocks: 2804:594c::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:15:54:75:61:a9:57:fb:79:44:73:08:bf:49:9d:f9:ef:f8:89:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F8C4EECD957464FDCE83518985B0C91CC92EBC4
Validity
Not Before: Jun 20 16:31:03 2025 GMT
Not After : Jun 19 16:36:03 2026 GMT
Subject: CN=23F6E441AFB4EDE2E5ED63B0D9BD1EC1EC4D221E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:74:bf:b9:d0:89:e0:03:f7:09:16:c3:2a:
e1:4d:8f:ce:20:d6:33:b7:c6:6e:52:35:a8:07:18:
12:8c:3d:4e:90:0f:10:ac:d3:77:0f:6e:e6:d8:00:
e4:a8:29:a1:6c:ad:2f:3a:16:6f:ab:b2:9c:bd:41:
de:ab:c1:63:83:1d:47:b0:6a:68:bc:17:d6:b5:a3:
1b:4e:0e:e0:9b:ce:26:51:35:76:97:76:d2:68:ef:
ab:e5:e2:fb:2f:49:1b:8a:c7:0c:cd:1f:5f:07:2d:
10:cc:dd:39:b4:58:34:f9:6f:46:b8:d6:88:32:a3:
74:f2:c8:71:1a:38:c5:fc:b3:07:04:d6:cc:d1:9e:
5a:c6:e5:f2:b9:2d:54:be:5c:c9:ce:2b:75:e3:fe:
69:c5:bc:f4:37:68:57:30:f5:6c:50:3b:d5:5d:56:
39:f2:22:43:b8:73:8c:e1:f9:91:58:da:e2:fa:e8:
dd:21:e0:95:6c:12:6e:64:4f:4c:5f:db:0c:7b:79:
f7:a8:83:45:26:ab:c7:24:34:71:79:10:69:63:ff:
2b:ae:43:7a:24:8a:25:07:48:06:89:ad:2c:0d:b9:
85:37:fe:0c:3d:15:ea:8f:df:64:e8:48:b7:46:33:
cb:8d:c4:9e:7c:83:8b:49:60:65:fd:57:fb:e2:79:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:E4:41:AF:B4:ED:E2:E5:ED:63:B0:D9:BD:1E:C1:EC:4D:22:1E
X509v3 Authority Key Identifier:
keyid:2F:8C:4E:EC:D9:57:46:4F:DC:E8:35:18:98:5B:0C:91:CC:92:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/2F8C4EECD957464FDCE83518985B0C91CC92EBC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F8C4EECD957464FDCE83518985B0C91CC92EBC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/323830343a353934633a3a2f33322d313238203d3e203532383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:594c::/32
Signature Algorithm: sha256WithRSAEncryption
37:2a:92:a3:07:97:00:d9:e5:64:26:60:fd:60:5d:b0:4b:51:
dc:a2:b4:ea:af:04:26:d6:2e:40:6a:b5:03:da:44:74:fb:81:
7b:90:8a:b5:a9:a8:79:c7:1b:52:89:69:6f:f3:ad:c8:0e:c9:
85:d7:f8:66:de:b8:3a:e0:3e:09:f5:6b:3a:27:17:30:5c:f3:
de:84:92:83:b1:1c:d7:ad:f7:6b:e2:4d:a9:68:28:b7:97:e1:
a9:f7:e5:f9:63:83:d9:8d:35:98:7b:34:b2:be:ab:98:72:e6:
e5:35:d8:8c:11:cc:db:78:a5:bb:8d:6d:91:64:42:9a:7d:6b:
1e:30:19:63:a7:e2:66:e6:b4:ca:e4:23:7e:50:62:c0:84:d8:
e5:24:0c:9c:85:b4:57:d6:57:46:75:9f:4d:8d:fc:5c:5b:53:
f8:5b:0a:3a:33:ab:17:fc:fa:0e:fe:a4:97:6e:e3:ea:a6:d2:
69:b2:7d:bd:c8:0f:c5:b2:30:39:48:3f:a1:c9:6c:58:d4:e6:
de:2e:8e:6c:bc:c1:03:6c:19:ae:0b:6e:53:d3:06:e7:75:61:
51:a9:6c:2e:74:40:8f:d4:64:ce:df:19:66:9b:6b:3b:7a:2e:
f7:56:9d:46:6e:40:c1:4e:8f:c7:c1:88:4e:9f:71:42:f1:e5:
6f:fe:15:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:33:14 2025 by rpki-client