Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3a2f34302d3430203d3e20323636353436.roa
File: 323830343a336461633a3a2f34302d3430203d3e20323636353436.roa (raw, json)
Hash identifier: WZ+a2zrF8pWa6gpGZk7pXVOqwA2xYwdeadzMPtmSiV8=
Subject key identifier: 18:DD:4D:1F:B4:DF:7F:36:39:95:6B:AC:A5:57:92:99:F9:6A:40:B2
Certificate issuer: /CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Certificate serial: 5303F40065B8006D43D5DC042D74F6CD737B451C
Authority key identifier: A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3a2f34302d3430203d3e20323636353436.roa
Signing time: Tue 18 Mar 2025 20:06:35 +0000
ROA not before: Tue 18 Mar 2025 20:01:35 +0000
ROA not after: Tue 17 Mar 2026 20:06:35 +0000
asID: 266546
IP address blocks: 2804:3dac::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:03:f4:00:65:b8:00:6d:43:d5:dc:04:2d:74:f6:cd:73:7b:45:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A
Validity
Not Before: Mar 18 20:01:35 2025 GMT
Not After : Mar 17 20:06:35 2026 GMT
Subject: CN=18DD4D1FB4DF7F3639956BACA5579299F96A40B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:f9:e3:ba:16:f5:53:e8:bc:87:46:6a:e5:
66:fd:da:36:ac:d6:c2:52:13:57:73:1e:7f:1a:f6:
76:44:67:0c:b7:77:4d:b3:ef:cd:64:59:c0:06:3a:
87:94:87:24:8f:c9:07:bc:e2:8f:70:ad:2f:f5:87:
05:ef:fd:7e:23:26:c9:51:d4:ac:7b:27:c9:de:b6:
21:7b:43:c4:38:bb:6e:17:be:a3:d5:d1:f5:7f:1b:
18:03:fb:a9:fd:d3:35:12:43:fd:f4:97:ec:03:f1:
b3:06:56:38:46:eb:2b:68:e5:88:e5:26:56:73:f1:
cb:38:60:b3:53:69:38:89:55:2b:32:d3:72:21:67:
52:40:a6:e9:8f:41:37:a2:0b:4a:1e:27:14:b0:b2:
26:d2:2f:63:3b:1e:3b:50:f2:a6:b4:55:47:74:e3:
45:0e:a6:6a:9e:fd:45:2f:8d:65:59:99:2d:5c:d9:
db:b4:da:4f:68:f7:f7:66:41:c4:b7:cd:bf:14:84:
98:59:1a:62:1e:b2:41:41:5f:7e:ec:0d:88:83:b3:
58:08:79:2d:9e:90:66:26:75:65:85:4e:46:29:6b:
8b:75:d0:1f:69:1d:06:63:78:52:ff:74:c1:9e:00:
a5:53:41:02:62:ca:5e:d8:69:45:31:93:06:bb:87:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DD:4D:1F:B4:DF:7F:36:39:95:6B:AC:A5:57:92:99:F9:6A:40:B2
X509v3 Authority Key Identifier:
keyid:A7:80:A1:AD:6E:BB:B6:D7:8B:2F:F5:DA:DD:9A:31:70:7A:4B:EE:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A780A1AD6EBBB6D78B2FF5DADD9A31707A4BEE8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/323830343a336461633a3a2f34302d3430203d3e20323636353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3dac::/40
Signature Algorithm: sha256WithRSAEncryption
6b:1c:97:3e:b9:9e:71:ce:84:16:8d:eb:2c:54:13:c9:b1:9f:
ed:d8:3b:47:71:5e:b2:8d:01:1b:ea:ef:01:35:ff:20:38:79:
57:dd:0c:81:56:cb:8d:49:c5:36:48:b8:65:47:9b:9e:d4:8e:
ea:f2:89:95:85:38:bd:5c:c3:0d:6a:14:fc:98:83:21:85:a9:
05:72:ef:59:21:31:01:f1:6f:d6:37:4d:a7:f3:19:33:1a:03:
6c:ef:ea:19:5e:50:b6:40:e9:cb:05:a5:bc:e1:12:0f:bc:02:
0b:3a:fc:82:8b:29:6b:25:60:cc:d8:c4:26:12:18:3e:18:be:
7e:fe:59:da:9c:51:45:5d:8d:a8:b3:a7:3d:e1:7c:07:c6:85:
0e:ff:dd:f3:4c:2a:f8:24:96:ea:c7:a8:cf:67:5a:3b:5d:81:
84:dc:17:b0:b3:78:a2:98:75:b3:a4:0e:47:a8:51:9f:0d:e4:
49:3d:3f:80:c6:c4:b2:84:86:67:5b:7b:14:64:59:ff:67:05:
bf:9e:2f:fb:f0:15:71:a3:4e:0f:10:f8:99:53:e6:68:fc:77:
4a:5d:0c:f5:6b:b1:f5:81:9f:c0:83:85:7b:35:00:43:39:de:
22:bd:58:e8:ec:be:56:1e:36:fd:29:b8:68:35:2e:ba:e3:31:
9f:c5:fd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:07:09 2025 by rpki-client