Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
File: 323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier: 8RSZM5HyymJdv+uJZD31edAh3j1mf0toz1rtXvEg5Y8=
Subject key identifier: 02:5D:1B:1E:74:86:B4:F4:8F:E2:6C:54:B7:C4:4E:FE:7D:9C:DD:66
Certificate issuer: /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial: 62D8A9B0D04A349428EEB9EE483935042D013937
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
Signing time: Fri 18 Apr 2025 17:29:13 +0000
ROA not before: Fri 18 Apr 2025 17:24:13 +0000
ROA not after: Fri 17 Apr 2026 17:29:13 +0000
asID: 273728
IP address blocks: 2804:8b5c:4000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d8:a9:b0:d0:4a:34:94:28:ee:b9:ee:48:39:35:04:2d:01:39:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Validity
Not Before: Apr 18 17:24:13 2025 GMT
Not After : Apr 17 17:29:13 2026 GMT
Subject: CN=025D1B1E7486B4F48FE26C54B7C44EFE7D9CDD66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:f2:b4:eb:0a:31:d6:2a:5e:e9:a1:61:2d:
c0:35:59:47:6a:3a:ae:05:98:05:48:23:b0:53:7d:
1d:eb:a2:37:88:ab:72:1b:2c:a5:81:2c:08:e3:bc:
23:b3:0f:3f:65:e9:41:e6:4c:ed:a6:4d:1c:d6:39:
e7:da:db:53:13:a3:e3:d5:6a:40:f5:18:79:ad:06:
e3:0c:10:fd:8e:c9:3f:e4:fc:98:8f:b8:d1:2a:c0:
00:1b:b2:65:6c:d5:e1:e5:38:28:17:6e:59:ed:bf:
a5:13:a2:fe:b2:9f:d6:80:1a:80:7e:6e:ad:6b:0f:
6b:9b:3e:1b:31:3a:74:2f:cc:2c:f8:99:c9:ba:1e:
6e:6f:3f:f0:87:5d:63:65:99:d2:a2:ed:e3:1c:d2:
d3:80:03:9e:de:8d:e2:53:26:d6:0e:a5:a6:3f:a5:
12:83:3d:f8:b4:c0:9d:6c:4a:04:27:41:52:7f:51:
84:34:99:ff:ab:42:4f:cb:85:97:f2:22:d1:58:2f:
70:51:a1:2f:7c:6b:73:5d:41:46:56:86:7f:a9:9d:
23:1b:d3:24:17:fb:43:26:56:1c:f7:54:ec:96:26:
af:d7:2c:33:75:04:6c:33:1f:85:ad:d0:31:8c:e9:
17:fd:ce:1f:65:1d:eb:7d:30:dc:f7:90:62:6a:05:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:1B:1E:74:86:B4:F4:8F:E2:6C:54:B7:C4:4E:FE:7D:9C:DD:66
X509v3 Authority Key Identifier:
keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a343030303a3a2f33342d3334203d3e20323733373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8b5c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
6e:b6:58:f4:9c:5d:bd:df:e3:16:40:a6:66:40:19:5b:66:f7:
f0:7b:8b:08:67:d6:30:43:21:87:c0:85:c1:31:bd:b6:6b:1f:
83:e9:e6:90:d2:75:dd:16:84:27:2c:c4:b0:6b:7e:1c:af:e1:
03:7a:48:47:b8:b2:6b:31:98:e8:ff:59:24:a3:0e:46:4f:af:
28:29:cf:f9:d9:e6:61:60:13:f0:28:9a:fe:4b:e8:92:61:74:
8d:21:cc:52:15:3a:46:38:a0:5e:69:97:b9:54:d5:e6:e1:a2:
b4:50:cc:b0:43:c1:31:79:5b:b5:23:d7:8f:66:a0:f5:8d:2e:
fe:0a:94:b3:06:cd:9f:09:d1:8b:ef:b5:1e:94:91:e5:b8:ea:
70:96:14:de:79:be:7a:31:5c:e0:39:f2:90:1c:09:61:1b:2f:
07:67:b9:9a:6a:87:b3:8a:dd:c9:32:20:63:9b:02:7c:f8:9a:
81:ad:92:ce:44:68:1b:9e:dc:bc:20:c2:f7:ba:79:47:a1:75:
e2:c0:29:78:a9:72:ef:7b:ca:50:ff:80:8a:82:58:c8:23:a6:
f7:ca:11:21:92:c0:76:d5:0a:51:d3:c0:07:a3:4a:82:6e:45:
da:47:90:c2:8a:09:af:73:bc:79:b8:f8:b3:e3:a2:f4:12:98:
e8:16:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:41:45 2025 by rpki-client