Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa
File: 323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier: U83RKljKxsteuUVkubDNX5Lu+NRLGASWibwoeTOdLfk=
Subject key identifier: 59:82:D5:DA:72:C7:E5:33:EF:F2:02:9B:41:60:00:A8:F1:D2:41:9C
Certificate issuer: /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial: 64C374A596F11695F4BC29580BF5B57D54ECCC46
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa
Signing time: Mon 26 May 2025 16:07:24 +0000
ROA not before: Mon 26 May 2025 16:02:24 +0000
ROA not after: Mon 25 May 2026 16:07:24 +0000
asID: 267961
IP address blocks: 2804:55dc:8000::/35 maxlen: 35
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c3:74:a5:96:f1:16:95:f4:bc:29:58:0b:f5:b5:7d:54:ec:cc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
Validity
Not Before: May 26 16:02:24 2025 GMT
Not After : May 25 16:07:24 2026 GMT
Subject: CN=5982D5DA72C7E533EFF2029B416000A8F1D2419C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:23:d0:0d:90:7f:32:11:2b:45:11:a2:fc:99:
71:8f:88:1e:77:1c:ad:58:32:56:8d:10:64:49:98:
a6:9e:44:b4:19:a5:8d:f5:d5:48:bb:33:9d:a7:d5:
2b:1f:c5:31:2f:35:b2:44:95:86:f6:e7:26:78:e7:
72:59:9c:f5:34:57:1d:11:ab:15:16:dc:61:c7:c0:
92:d2:67:43:ce:c3:84:b6:ca:9b:91:3c:d2:80:7a:
55:b5:61:c2:88:28:84:c8:38:dd:34:2f:af:12:5b:
b4:0e:79:2b:af:7a:04:e1:8c:12:bc:b2:d5:31:de:
65:15:96:b3:10:c0:9b:ce:18:ea:24:f8:4c:b0:ff:
ba:b1:ff:e8:ec:e1:37:84:d5:ec:60:be:74:9c:05:
21:fa:af:51:47:cc:a0:fe:b2:2f:bb:e9:82:59:84:
7b:2b:52:0a:d1:fa:0c:7f:96:cf:f8:0e:2d:3a:6b:
53:d4:82:09:07:82:ee:87:2b:b9:9f:f0:71:60:37:
af:c2:79:5e:e9:43:fd:13:61:c4:2d:18:d1:63:33:
5b:cf:9e:a0:3b:44:bc:e4:e6:3b:9b:a4:03:86:a9:
12:3a:0a:55:cc:4c:61:0a:8f:2a:52:08:35:87:a2:
43:93:e3:a0:b6:da:a9:64:45:3f:7d:eb:8f:a7:45:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:82:D5:DA:72:C7:E5:33:EF:F2:02:9B:41:60:00:A8:F1:D2:41:9C
X509v3 Authority Key Identifier:
keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a383030303a3a2f33352d3335203d3e20323637393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:55dc:8000::/35
Signature Algorithm: sha256WithRSAEncryption
4d:78:ba:c9:c8:9d:16:de:42:9e:1e:c9:9c:9d:0f:fd:c6:aa:
19:cb:2e:d6:a1:bb:36:c1:5d:72:5e:34:87:a0:1c:a2:37:7b:
af:f1:c0:89:9d:13:05:1a:b3:9d:53:0e:1d:e5:d0:25:69:97:
4d:cb:7e:0d:68:e8:02:40:66:5d:eb:30:80:71:c4:88:d3:dc:
92:c4:2d:79:4d:0d:c9:9d:99:32:95:fe:22:37:3c:8b:6e:ef:
02:3a:98:53:41:ff:9c:c1:57:63:6e:a8:df:a6:d3:ef:0d:f4:
4e:db:58:9e:0a:15:37:f7:bd:85:20:a9:19:35:76:04:fc:ca:
2d:58:f6:cf:49:e2:7a:e3:07:bf:98:50:0f:2f:0f:08:2a:66:
99:e9:91:a9:7a:ff:d0:7c:9f:40:e3:70:c0:ec:50:70:ea:5c:
0e:78:95:40:fe:86:19:19:90:de:c1:fd:9c:91:fd:1a:6f:95:
de:cf:f9:a2:34:a0:df:c4:b9:d5:70:8d:0d:95:1e:b8:e4:e0:
53:45:bd:24:b3:59:79:4e:8d:2f:74:d5:d5:23:c2:12:db:31:
da:32:40:d4:57:d0:c4:50:5e:5b:9b:83:7b:e1:66:3f:3c:42:
bc:c9:d4:bc:bf:13:d6:02:11:94:c0:6f:8a:8b:09:d6:a6:9a:
97:3e:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:11:31 2025 by rpki-client