Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HQSnEdf7aeLRt2DktM6A5rdJnNWG9TDBivgtawwHj8J9/0/323830343a373630303a3a2f33322d313238203d3e20323731303833.roa
File: 323830343a373630303a3a2f33322d313238203d3e20323731303833.roa (raw, json)
Hash identifier: fapTevtdV9ehimpdsaCXyDAWpNldLI5hB4mlOkBOr5o=
Subject key identifier: 87:2C:A4:1B:3B:60:0F:76:B0:30:E4:CB:EB:6F:0B:2B:C2:6C:57:B3
Certificate issuer: /CN=D1C3B274660223153971D48E765C06EA57606BAC
Certificate serial: 024753B5A838F7E213930D3E8A5B9A99ECEA1D6F
Authority key identifier: D1:C3:B2:74:66:02:23:15:39:71:D4:8E:76:5C:06:EA:57:60:6B:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1C3B274660223153971D48E765C06EA57606BAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HQSnEdf7aeLRt2DktM6A5rdJnNWG9TDBivgtawwHj8J9/0/323830343a373630303a3a2f33322d313238203d3e20323731303833.roa
Signing time: Fri 20 Jun 2025 23:38:07 +0000
ROA not before: Fri 20 Jun 2025 23:33:07 +0000
ROA not after: Fri 19 Jun 2026 23:38:07 +0000
asID: 271083
IP address blocks: 2804:7600::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:47:53:b5:a8:38:f7:e2:13:93:0d:3e:8a:5b:9a:99:ec:ea:1d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1C3B274660223153971D48E765C06EA57606BAC
Validity
Not Before: Jun 20 23:33:07 2025 GMT
Not After : Jun 19 23:38:07 2026 GMT
Subject: CN=872CA41B3B600F76B030E4CBEB6F0B2BC26C57B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:49:53:ed:f4:dc:1f:80:b0:b1:e4:5f:aa:3b:
10:4a:85:19:e9:c9:37:b1:20:19:b2:df:ac:10:a0:
36:f0:02:c8:20:ca:a2:58:ac:ef:72:d1:4d:56:55:
2a:ef:b4:5f:66:10:5c:5b:24:bf:49:e4:77:3d:f3:
60:cf:aa:e3:d4:72:d6:9c:5c:35:f4:d2:3c:59:ea:
78:b9:73:fb:6a:67:87:a5:7b:97:90:b3:98:5b:3c:
c3:d3:e5:33:1b:5d:d9:33:11:c3:40:a1:05:b0:90:
3f:48:11:70:fb:a8:32:2b:38:ae:a5:30:6c:79:f2:
e6:b6:a7:4a:e2:eb:a2:09:80:ac:86:41:0a:e1:3d:
01:bd:75:2e:4d:67:e9:ce:07:b6:2e:bf:c5:15:65:
e5:7c:c3:a4:50:f2:07:c4:de:fc:05:08:13:dd:b7:
07:ed:9b:3a:d2:2e:d5:c2:5f:a7:0e:bd:85:a7:64:
03:68:e5:e3:f3:2a:41:0c:d6:b9:3f:05:15:43:4c:
5f:ab:f6:c0:a2:8d:66:d0:07:46:fd:df:5f:ff:32:
f6:8e:ab:5e:c8:56:05:0a:48:80:c9:e2:af:83:00:
ff:7f:3c:c6:19:eb:6b:06:12:58:37:e6:99:65:2c:
ac:da:3e:e4:e9:1b:29:51:a0:94:78:44:32:89:35:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2C:A4:1B:3B:60:0F:76:B0:30:E4:CB:EB:6F:0B:2B:C2:6C:57:B3
X509v3 Authority Key Identifier:
keyid:D1:C3:B2:74:66:02:23:15:39:71:D4:8E:76:5C:06:EA:57:60:6B:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HQSnEdf7aeLRt2DktM6A5rdJnNWG9TDBivgtawwHj8J9/0/D1C3B274660223153971D48E765C06EA57606BAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1C3B274660223153971D48E765C06EA57606BAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQSnEdf7aeLRt2DktM6A5rdJnNWG9TDBivgtawwHj8J9/0/323830343a373630303a3a2f33322d313238203d3e20323731303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7600::/32
Signature Algorithm: sha256WithRSAEncryption
8d:c3:5c:b3:37:70:43:48:aa:12:29:aa:45:7a:f9:50:67:63:
0e:83:a9:c1:54:98:af:e5:9c:0c:55:7c:9a:c4:bc:7a:fa:0c:
52:60:af:a8:0b:57:af:3a:6b:81:cc:d9:a6:92:66:f6:fe:b6:
17:4e:3e:1e:58:91:94:fd:e1:69:a5:f9:e1:74:0c:07:ff:c7:
ab:e3:ba:2a:ed:1b:f4:e3:e4:a6:d5:e9:3a:d6:b9:83:f1:da:
39:f5:26:2c:6b:f8:a8:0f:e1:ac:8d:03:1f:02:0f:14:ef:9a:
94:23:0d:cf:41:46:c3:74:eb:fe:c3:57:76:7c:e7:4c:24:53:
8a:20:90:68:05:19:56:55:84:f6:89:cd:4c:92:20:51:37:64:
6b:4d:b6:69:76:c9:d5:50:66:33:91:90:16:e3:04:88:60:29:
3b:31:42:32:cf:80:38:6a:e8:d2:90:91:2c:67:dc:48:dc:62:
b5:2d:d0:20:6a:00:bd:50:fe:ee:ae:28:9a:75:fe:76:2f:5f:
8d:9b:cb:bd:57:67:9c:a5:c4:ce:46:05:54:70:7a:b9:0f:2e:
13:cb:92:1f:1b:af:fc:b3:7a:9c:35:29:7b:b9:5b:a6:d7:d6:
50:65:0c:81:56:f0:38:6b:93:3d:0e:2a:37:a5:ef:23:85:7a:
cb:34:36:23
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUAkdTtag49+ITkw0+iluamezqHW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFDM0IyNzQ2NjAyMjMxNTM5NzFENDhFNzY1QzA2RUE1
NzYwNkJBQzAeFw0yNTA2MjAyMzMzMDdaFw0yNjA2MTkyMzM4MDdaMDMxMTAvBgNV
BAMTKDg3MkNBNDFCM0I2MDBGNzZCMDMwRTRDQkVCNkYwQjJCQzI2QzU3QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSVPt9NwfgLCx5F+qOxBKhRnp
yTexIBmy36wQoDbwAsggyqJYrO9y0U1WVSrvtF9mEFxbJL9J5Hc982DPquPUctac
XDX00jxZ6ni5c/tqZ4ele5eQs5hbPMPT5TMbXdkzEcNAoQWwkD9IEXD7qDIrOK6l
MGx58ua2p0ri66IJgKyGQQrhPQG9dS5NZ+nOB7Yuv8UVZeV8w6RQ8gfE3vwFCBPd
twftmzrSLtXCX6cOvYWnZANo5ePzKkEM1rk/BRVDTF+r9sCijWbQB0b931//MvaO
q17IVgUKSIDJ4q+DAP9/PMYZ62sGElg35pllLKzaPuTpGylRoJR4RDKJNbozAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUhyykGztgD3awMOTL628LK8JsV7MwHwYDVR0j
BBgwFoAU0cOydGYCIxU5cdSOdlwG6ldga6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFFTbkVkZjdhZUxSdDJEa3RNNkE1cmRKbk5XRzlUREJpdmd0YXd3SGo4
SjkvMC9EMUMzQjI3NDY2MDIyMzE1Mzk3MUQ0OEU3NjVDMDZFQTU3NjA2QkFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQzNCMjc0NjYwMjIzMTUz
OTcxRDQ4RTc2NUMwNkVBNTc2MDZCQUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hRU25FZGY3YWVMUnQyRGt0TTZBNXJkSm5OV0c5VERCaXZndGF3d0hqOEo5LzAv
MzIzODMwMzQzYTM3MzYzMDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMDM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHYAMA0GCSqGSIb3DQEBCwUAA4IBAQCNw1yz
N3BDSKoSKapFevlQZ2MOg6nBVJiv5ZwMVXyaxLx6+gxSYK+oC1evOmuBzNmmkmb2
/rYXTj4eWJGU/eFppfnhdAwH/8er47oq7Rv04+Sm1ek61rmD8do59SYsa/ioD+Gs
jQMfAg8U75qUIw3PQUbDdOv+w1d2fOdMJFOKIJBoBRlWVYT2ic1MkiBRN2RrTbZp
dsnVUGYzkZAW4wSIYCk7MUIyz4A4aujSkJEsZ9xI3GK1LdAgagC9UP7uriiadf52
L1+Nm8u9V2ecpcTORgVUcHq5Dy4Ty5IfG6/8s3qcNSl7uVum19ZQZQyBVvA4a5M9
Dio3pe8jhXrLNDYj
-----END CERTIFICATE-----
Generated at Thu Jul 3 08:04:47 2025 by rpki-client