Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
File: 323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier: PjCOucS5GCDoY704ivLA67VIqdDQLIM1GcaF4XYgTAk=
Subject key identifier: AF:2D:56:0A:BB:1E:D6:3B:98:76:6D:DB:41:54:C8:D1:77:D0:2F:F0
Certificate issuer: /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial: 7AFEB83E6EA20966F5DEA734468BFF948C1EBDA9
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
Signing time: Mon 26 May 2025 16:07:20 +0000
ROA not before: Mon 26 May 2025 16:02:20 +0000
ROA not after: Mon 25 May 2026 16:07:20 +0000
asID: 267961
IP address blocks: 2804:55dc:2000::/35 maxlen: 35
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fe:b8:3e:6e:a2:09:66:f5:de:a7:34:46:8b:ff:94:8c:1e:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
Validity
Not Before: May 26 16:02:20 2025 GMT
Not After : May 25 16:07:20 2026 GMT
Subject: CN=AF2D560ABB1ED63B98766DDB4154C8D177D02FF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:2d:bf:7e:dd:7d:38:78:01:4b:f7:c6:a8:
19:c7:4b:fe:a1:d8:8c:63:a1:73:2f:4f:86:36:72:
4b:5a:e9:89:65:e1:03:0d:4e:c0:73:85:bb:79:69:
ed:0e:fb:15:12:93:8c:f4:14:a0:1f:3e:2f:75:99:
33:89:b9:31:23:74:58:e9:3f:7b:d6:a7:0e:98:89:
33:48:06:ad:93:22:0e:03:10:69:c3:7c:82:4e:d0:
66:1f:67:49:aa:a9:52:7e:ae:8e:f9:d7:27:07:54:
70:03:7a:45:b1:cb:01:29:a7:53:0b:64:67:05:24:
b9:42:e9:1b:21:30:2a:de:42:55:2a:8b:48:80:48:
db:b2:b1:33:96:5f:10:32:45:28:b6:82:b5:81:a3:
c1:e1:a9:4e:06:89:9a:21:72:da:b4:d6:7e:32:08:
ff:f4:0d:93:f3:1d:a0:fa:f6:29:6d:bb:1f:61:84:
97:28:e7:7f:bc:ec:09:07:08:60:48:d5:dc:c4:e7:
50:3f:1a:09:86:34:0d:6c:56:cb:fb:18:58:89:f2:
3c:e2:a6:71:8d:35:34:23:56:f6:ec:7c:13:8c:66:
04:73:cd:03:ae:78:08:43:b5:a7:5a:0b:44:4c:a5:
2c:ca:22:a8:df:5b:92:14:96:63:f7:74:8a:3e:a8:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2D:56:0A:BB:1E:D6:3B:98:76:6D:DB:41:54:C8:D1:77:D0:2F:F0
X509v3 Authority Key Identifier:
keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a323030303a3a2f33352d3335203d3e20323637393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:55dc:2000::/35
Signature Algorithm: sha256WithRSAEncryption
6d:a7:e7:f1:63:9e:8d:be:78:55:33:91:de:40:f5:45:e5:38:
62:53:1c:8d:30:fe:28:52:b9:af:dc:29:4d:91:0c:c2:58:80:
0c:9b:9c:42:ee:79:47:cb:0a:35:6b:2d:b3:f9:2d:c8:6a:e5:
fa:ad:52:f5:cb:6f:72:da:89:b9:df:d4:e1:da:e1:bf:e7:be:
c1:87:8e:82:18:1b:a7:21:15:66:37:8e:47:d7:0c:0a:3f:ba:
ff:ef:ea:25:15:c6:51:c9:c1:86:15:58:d7:58:98:7c:31:33:
6d:9f:1c:d6:06:63:85:8b:dd:4f:31:c2:12:58:82:22:ab:d0:
19:21:ea:22:40:36:8e:de:a9:c6:16:e2:b1:11:43:97:9c:3a:
8b:4f:ba:40:10:0e:94:0c:a7:1f:3d:39:d9:cc:a1:c2:76:a0:
73:46:58:e3:1e:f0:67:11:3f:82:89:dc:82:9f:bc:9d:b7:3a:
66:4f:f1:95:18:7a:e7:a6:b8:58:21:6f:7a:63:b8:62:9e:33:
12:24:d9:fe:0f:af:c8:78:5a:1c:01:2a:eb:3d:14:9c:28:57:
f6:67:ce:3a:22:70:38:a6:c5:5e:b9:1e:62:a0:4f:26:9e:70:
78:bf:b3:68:4b:e6:1a:74:a7:41:cd:e5:6d:c8:b4:58:9e:71:
4c:c0:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:39:51 2025 by rpki-client