Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33332d3333203d3e20323633393230.roa
File: 323830343a323763303a3a2f33332d3333203d3e20323633393230.roa (raw, json)
Hash identifier: MTiAGVkYJRaNBYaG/TgnnCtEvc9/wf2ZYSnCwu4LpR0=
Subject key identifier: 47:60:2F:88:55:2E:1A:CA:5F:2D:A1:35:59:15:41:D4:60:D8:3B:AE
Certificate issuer: /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial: 7A6952ACA66265FFAE806F15430AA22FC1A381EF
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33332d3333203d3e20323633393230.roa
Signing time: Tue 27 May 2025 20:34:47 +0000
ROA not before: Tue 27 May 2025 20:29:47 +0000
ROA not after: Tue 26 May 2026 20:34:47 +0000
asID: 263920
IP address blocks: 2804:27c0::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:69:52:ac:a6:62:65:ff:ae:80:6f:15:43:0a:a2:2f:c1:a3:81:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Validity
Not Before: May 27 20:29:47 2025 GMT
Not After : May 26 20:34:47 2026 GMT
Subject: CN=47602F88552E1ACA5F2DA135591541D460D83BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:e8:73:3f:69:7b:2b:6d:78:69:8e:18:66:
24:12:71:e8:5e:f7:6d:04:f4:c5:98:0a:53:1d:72:
43:2f:02:8b:43:13:4e:91:fd:6f:32:eb:52:e9:37:
55:f6:8c:40:c0:cc:eb:00:07:43:57:b1:ba:c4:ea:
89:c0:75:70:be:87:80:54:a2:46:49:0c:06:de:90:
af:02:52:94:ec:38:3b:2f:a1:ea:e9:8a:73:d8:dc:
0c:b1:3a:52:2b:9d:b7:6d:80:69:f7:63:c0:40:b2:
41:b2:cb:2e:58:be:bc:d2:36:8e:f8:97:16:08:6f:
88:13:cc:1f:cf:f5:5b:94:d5:23:de:21:79:f9:23:
9e:73:ba:2a:13:cd:ff:3e:0f:22:5c:8f:23:ea:8a:
18:04:73:29:73:3c:88:1c:0a:a1:3b:64:34:34:da:
61:e1:65:2d:ff:c1:53:d1:9f:68:9c:94:e4:8d:db:
92:fa:0f:8e:0b:e3:9b:70:32:c2:2a:82:fa:0d:2b:
3a:67:06:91:e2:6c:ba:4d:2f:a0:79:eb:75:8d:93:
b5:38:60:9b:ea:c7:b6:42:d5:b9:16:41:46:51:2a:
10:2e:49:96:a5:25:69:df:25:9b:b5:33:eb:20:d0:
65:4b:09:9a:43:93:75:f8:e4:5c:6d:81:ed:a5:f7:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:2F:88:55:2E:1A:CA:5F:2D:A1:35:59:15:41:D4:60:D8:3B:AE
X509v3 Authority Key Identifier:
keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33332d3333203d3e20323633393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:27c0::/33
Signature Algorithm: sha256WithRSAEncryption
29:c1:7d:e0:45:15:2e:da:d6:b7:60:e9:1c:91:51:ba:2a:43:
c5:65:89:c7:0b:dd:bf:64:79:2f:1a:d7:a3:26:4c:19:48:e2:
d6:6e:56:28:25:96:3f:8e:4e:47:eb:6c:ca:18:d1:ec:c2:50:
d7:17:0e:63:cf:09:fb:56:33:54:1e:af:d1:4a:aa:c1:ef:81:
d3:de:5c:16:43:3e:62:b6:9f:6f:f2:cb:ce:6c:00:da:10:f2:
c5:d8:2e:24:b1:05:23:f1:6c:11:b4:3a:d0:80:18:15:c3:ab:
7d:1a:d4:43:44:4d:68:8a:28:18:71:76:6d:4e:d5:b9:6b:53:
ec:37:e7:22:ca:56:22:99:c3:da:fe:97:59:96:eb:52:8c:b9:
51:44:64:73:d8:24:15:09:5a:5e:f1:c9:d3:73:02:ef:a5:1e:
6e:0c:c2:c2:d2:b1:47:54:62:77:c3:e6:93:2f:d7:40:31:f7:
a6:07:72:82:65:96:57:be:03:b4:60:c9:0d:fc:b3:84:91:c3:
28:88:94:5f:e6:e9:96:88:dd:03:bf:36:a4:33:bf:81:50:88:
b4:28:f0:6d:9a:e0:58:3c:85:63:0e:78:40:b3:34:50:7c:fd:
52:dc:5b:14:69:17:71:7b:c5:50:6e:bc:11:2e:29:b2:9f:23:
0a:68:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:54:52 2025 by rpki-client