Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a633130303a3a2f34382d3438203d3e20323733373238.roa
File: 323830343a386235633a633130303a3a2f34382d3438203d3e20323733373238.roa (raw, json)
Hash identifier: /NN1OZjlSbA13xFdR4rBanoIwRyJ+BGNfkTNM5H5okY=
Subject key identifier: 85:10:A7:CF:C7:2F:70:56:E2:32:1E:FD:CE:59:9D:D1:BF:2D:B0:7C
Certificate issuer: /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial: 415F1F17670138D00C3165F023622A58A3C87AFF
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a633130303a3a2f34382d3438203d3e20323733373238.roa
Signing time: Fri 02 May 2025 14:08:22 +0000
ROA not before: Fri 02 May 2025 14:03:22 +0000
ROA not after: Fri 01 May 2026 14:08:22 +0000
asID: 273728
IP address blocks: 2804:8b5c:c100::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5f:1f:17:67:01:38:d0:0c:31:65:f0:23:62:2a:58:a3:c8:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Validity
Not Before: May 2 14:03:22 2025 GMT
Not After : May 1 14:08:22 2026 GMT
Subject: CN=8510A7CFC72F7056E2321EFDCE599DD1BF2DB07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:50:3a:f3:20:e2:d9:cf:62:cb:a2:78:b9:
63:66:0d:de:12:ad:c3:2f:d4:b3:f3:2c:48:8e:33:
a4:4d:c9:26:a1:d3:2c:61:ba:c4:33:15:d6:82:8a:
30:bf:17:37:83:16:cc:ee:09:e5:2e:80:66:b2:97:
57:86:14:77:d8:7c:08:42:d9:c7:3c:15:aa:84:7a:
83:39:14:31:d2:58:93:e8:5d:34:60:47:76:82:82:
1e:5c:7a:38:74:3d:ac:1a:c3:0b:d5:fe:4e:fe:35:
26:c8:73:ae:2e:00:8c:f6:66:a6:99:db:ea:ad:db:
81:29:98:8c:c9:e6:1b:38:d1:95:6b:00:a2:f7:59:
26:79:6f:66:f6:e5:a3:8b:56:34:a3:2a:bb:88:91:
8d:a0:42:14:b4:97:d2:ba:72:95:b0:e7:e6:02:89:
ce:67:00:60:15:b6:02:d9:c1:70:85:09:24:76:e8:
14:9a:17:fc:12:ef:c9:ec:1d:e0:4e:6f:4e:7a:ef:
1c:30:56:09:c3:f0:ea:36:a9:24:a3:72:c1:ed:89:
dc:46:cb:c5:b5:c7:a1:a4:bf:1d:86:b3:b1:8d:a2:
13:de:09:bf:2f:50:39:10:58:f5:5d:79:ed:7f:dd:
39:84:85:1f:28:40:e2:78:56:d9:50:8d:7a:da:ac:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:10:A7:CF:C7:2F:70:56:E2:32:1E:FD:CE:59:9D:D1:BF:2D:B0:7C
X509v3 Authority Key Identifier:
keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a633130303a3a2f34382d3438203d3e20323733373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8b5c:c100::/48
Signature Algorithm: sha256WithRSAEncryption
0f:17:43:44:e9:33:01:08:8d:cf:fa:eb:80:15:97:04:0a:64:
0c:e2:e1:15:98:3e:95:b6:1e:a6:55:64:bb:95:37:ed:be:f1:
fa:b4:b6:67:18:bc:7b:67:82:0b:1e:a1:30:27:66:ac:f1:29:
5e:27:01:f1:77:3f:bc:c2:7d:b7:e0:b5:81:9e:8f:d4:06:0d:
a9:c8:b7:0e:7f:50:34:bf:14:12:88:dc:de:c6:78:53:a2:d9:
ea:a1:a9:c4:e3:a5:42:c2:57:73:7b:6f:c1:b5:5d:b6:8c:8c:
7c:32:5a:b2:33:19:8e:50:b7:61:0a:b7:76:49:9e:9b:55:67:
78:88:26:86:03:fd:33:e3:fe:19:12:d8:b2:44:66:8d:81:46:
f3:87:ce:47:34:ee:34:f0:82:25:6c:b0:95:f2:bf:67:f7:93:
4b:af:d8:e9:63:73:50:b8:77:4d:b6:5e:51:cb:37:e0:b4:9b:
55:64:d6:99:4f:aa:92:d3:a3:7a:56:5b:c4:a9:8b:be:08:4f:
3d:15:06:22:ff:d0:10:4a:b0:75:14:ef:cc:b4:65:32:78:18:
f9:7b:d7:aa:8e:70:9c:d8:f9:6c:b5:1d:1c:38:d3:55:4e:96:
d8:45:6f:45:f6:06:73:d5:02:1d:57:fd:79:05:59:a3:50:06:
db:d8:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:54:34 2025 by rpki-client