Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa
File: 323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa (raw, json)
Hash identifier: np1jqQMR3/lJKXAlveJforFy3ETieWN6bOwuFDnr7iQ=
Subject key identifier: 18:8C:4F:A6:4B:6B:4F:7C:41:FA:6C:86:1E:0C:B4:0C:98:13:F3:6D
Certificate issuer: /CN=09B7AECB18318973134EAE9276452AE4B68453CF
Certificate serial: 32A5FB720BC10D5DAC592CD29AD175565FF98B7C
Authority key identifier: 09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa
Signing time: Mon 26 May 2025 16:07:21 +0000
ROA not before: Mon 26 May 2025 16:02:21 +0000
ROA not after: Mon 25 May 2026 16:07:21 +0000
asID: 267961
IP address blocks: 2804:55dc:c000::/35 maxlen: 35
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a5:fb:72:0b:c1:0d:5d:ac:59:2c:d2:9a:d1:75:56:5f:f9:8b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09B7AECB18318973134EAE9276452AE4B68453CF
Validity
Not Before: May 26 16:02:21 2025 GMT
Not After : May 25 16:07:21 2026 GMT
Subject: CN=188C4FA64B6B4F7C41FA6C861E0CB40C9813F36D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:8e:57:25:0f:38:60:e1:61:5d:a4:33:f3:
31:ea:3d:47:3c:d5:80:99:31:4e:c8:43:f9:ca:c2:
a8:ed:0b:4a:24:26:f1:cf:cd:54:ee:fe:a8:b2:e0:
3f:4e:79:25:72:01:a0:6b:d8:39:ce:59:96:01:24:
fc:36:0a:b4:af:5d:47:5d:2b:21:64:29:37:6a:09:
7d:36:e5:1b:ee:02:4e:78:ac:48:e7:63:20:d8:1b:
5e:a6:8b:22:9d:1b:df:cb:b2:c4:1b:68:62:b1:96:
b7:39:fa:ab:7c:16:7a:92:e6:c5:60:5a:43:fa:db:
40:84:d3:25:23:13:c8:a4:f4:e7:c3:2d:52:3c:9f:
0d:3d:e5:87:6b:6d:ce:bf:04:ea:84:67:3a:30:31:
9d:fd:f2:6e:83:1c:34:ad:e4:87:80:08:af:19:a3:
93:29:6d:09:cd:aa:0f:5d:fc:eb:a7:9a:b6:3b:2b:
9c:5c:ca:54:86:63:aa:23:00:2a:77:e6:4f:cf:57:
f3:86:9b:ef:d2:c1:e9:74:ee:65:ac:1f:ec:cc:a3:
81:1c:98:c5:53:ce:bc:d6:d8:1d:5d:9b:0e:ad:a4:
9e:df:19:f2:19:0b:c0:f4:0b:84:a6:52:f2:39:fa:
08:4e:e0:6d:40:cf:38:49:e8:71:82:ee:80:1e:f8:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:4F:A6:4B:6B:4F:7C:41:FA:6C:86:1E:0C:B4:0C:98:13:F3:6D
X509v3 Authority Key Identifier:
keyid:09:B7:AE:CB:18:31:89:73:13:4E:AE:92:76:45:2A:E4:B6:84:53:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/09B7AECB18318973134EAE9276452AE4B68453CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B7AECB18318973134EAE9276452AE4B68453CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/323830343a353564633a633030303a3a2f33352d3335203d3e20323637393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:55dc:c000::/35
Signature Algorithm: sha256WithRSAEncryption
0d:66:4b:dc:97:f5:84:5d:ad:f4:68:4f:2c:99:d8:49:48:95:
a1:14:71:d6:2b:9c:37:d9:bf:94:67:d0:1a:77:82:1c:9a:6f:
a1:1f:8a:ad:88:d1:30:55:7f:95:86:9e:89:47:ec:fd:df:73:
71:47:e9:59:ac:d7:b6:6a:31:77:d7:a6:58:df:a9:64:01:46:
02:bc:30:38:7c:a2:d4:4c:da:4f:e4:d1:a5:f9:7b:0b:5d:79:
1f:f1:5e:71:d5:68:79:cb:f3:3e:e4:d5:b2:45:e3:47:59:83:
df:e8:48:93:ec:b9:ae:ba:04:11:d8:2f:ed:bd:ca:48:59:c7:
83:6a:98:ef:21:3c:7a:c6:6a:e8:37:d1:4c:fb:bc:62:69:56:
d6:30:56:56:d1:23:9e:e2:4e:61:5e:3a:9b:79:68:f7:0b:c2:
0c:c5:ad:b1:05:be:cd:c7:f1:cb:94:9e:9f:62:42:e3:cd:3b:
41:77:12:1a:c3:ae:7a:cb:f2:e6:59:53:d8:a7:6f:e1:bb:15:
3d:cb:c6:68:31:e4:78:d2:49:91:37:a9:fd:28:f1:75:69:0e:
60:2b:73:f2:19:da:7c:87:13:fe:2c:fa:c3:01:c1:5c:f3:39:
bb:90:90:17:16:e2:50:1f:63:35:4e:0a:d5:91:7e:ed:d5:8e:
76:f8:9d:6a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUMqX7cgvBDV2sWSzSmtF1Vl/5i3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCN0FFQ0IxODMxODk3MzEzNEVBRTkyNzY0NTJBRTRC
Njg0NTNDRjAeFw0yNTA1MjYxNjAyMjFaFw0yNjA1MjUxNjA3MjFaMDMxMTAvBgNV
BAMTKDE4OEM0RkE2NEI2QjRGN0M0MUZBNkM4NjFFMENCNDBDOTgxM0YzNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWS45XJQ84YOFhXaQz8zHqPUc8
1YCZMU7IQ/nKwqjtC0okJvHPzVTu/qiy4D9OeSVyAaBr2DnOWZYBJPw2CrSvXUdd
KyFkKTdqCX025RvuAk54rEjnYyDYG16miyKdG9/LssQbaGKxlrc5+qt8FnqS5sVg
WkP620CE0yUjE8ik9OfDLVI8nw095Ydrbc6/BOqEZzowMZ398m6DHDSt5IeACK8Z
o5MpbQnNqg9d/OunmrY7K5xcylSGY6ojACp35k/PV/OGm+/Swel07mWsH+zMo4Ec
mMVTzrzW2B1dmw6tpJ7fGfIZC8D0C4SmUvI5+ghO4G1AzzhJ6HGC7oAe+CutAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUGIxPpktrT3xB+myGHgy0DJgT820wHwYDVR0j
BBgwFoAUCbeuyxgxiXMTTq6SdkUq5LaEU88wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2V1RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6
aFYvMC8wOUI3QUVDQjE4MzE4OTczMTM0RUFFOTI3NjQ1MkFFNEI2ODQ1M0NGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5QjdBRUNCMTgzMTg5NzMx
MzRFQUU5Mjc2NDUyQUU0QjY4NDUzQ0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dldUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAv
MzIzODMwMzQzYTM1MzU2NDYzM2E2MzMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNzM5MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEVdzAMA0GCSqGSIb3DQEBCwUA
A4IBAQANZkvcl/WEXa30aE8smdhJSJWhFHHWK5w32b+UZ9Aad4Icmm+hH4qtiNEw
VX+Vhp6JR+z933NxR+lZrNe2ajF316ZY36lkAUYCvDA4fKLUTNpP5NGl+XsLXXkf
8V5x1Wh5y/M+5NWyReNHWYPf6EiT7LmuugQR2C/tvcpIWceDapjvITx6xmroN9FM
+7xiaVbWMFZW0SOe4k5hXjqbeWj3C8IMxa2xBb7Nx/HLlJ6fYkLjzTtBdxIaw656
y/LmWVPYp2/huxU9y8ZoMeR40kmRN6n9KPF1aQ5gK3PyGdp8hxP+LPrDAcFc8zm7
kJAXFuJQH2M1TgrVkX7t1Y52+J1q
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:14:05 2025 by rpki-client