Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a326161383a3a2f33322d3438203d3e20323634303838.roa
File: 323830343a326161383a3a2f33322d3438203d3e20323634303838.roa (raw, json)
Hash identifier: cMnBlhBJXCDjTrZyi2HlqF/1schPYYEJhpT+nzxsxH8=
Subject key identifier: 18:11:C7:CA:2E:C4:8F:85:07:B2:1C:7D:D2:93:6E:D3:90:A3:06:EB
Certificate issuer: /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial: 086D40502C47EB83DEF606BC552BFE5332B9E27E
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a326161383a3a2f33322d3438203d3e20323634303838.roa
Signing time: Tue 22 Jul 2025 16:57:00 +0000
ROA not before: Tue 22 Jul 2025 16:52:00 +0000
ROA not after: Tue 21 Jul 2026 16:57:00 +0000
asID: 264088
IP address blocks: 2804:2aa8::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6d:40:50:2c:47:eb:83:de:f6:06:bc:55:2b:fe:53:32:b9:e2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Validity
Not Before: Jul 22 16:52:00 2025 GMT
Not After : Jul 21 16:57:00 2026 GMT
Subject: CN=1811C7CA2EC48F8507B21C7DD2936ED390A306EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:c3:0a:4f:32:87:c6:91:04:24:e1:ab:10:
9d:10:b5:40:b2:8a:cb:58:a0:31:9e:a3:d6:13:f6:
0e:c7:a9:ab:0c:21:2b:7a:c2:dd:27:39:60:5f:0a:
cb:03:cc:63:c2:49:ff:46:cc:29:f0:d2:0b:62:e3:
23:28:d0:3d:8b:62:7e:d5:96:96:2b:91:a8:3c:92:
04:91:27:1a:17:92:3d:53:65:72:a5:33:c8:65:b6:
bc:cf:63:51:29:24:d8:2c:b3:e6:af:da:bb:de:c0:
b4:e7:97:04:80:9e:49:6b:5b:a4:2b:77:bd:6f:c7:
65:a8:fb:17:b0:18:b9:94:2c:a4:b6:bb:b2:ea:d3:
10:48:04:55:82:1b:69:5d:6b:5e:d7:45:77:8f:17:
7f:04:bf:d5:7b:8d:ea:28:b4:d5:87:e6:35:2b:ac:
02:69:cc:e8:f6:b5:d6:62:cc:89:96:d3:53:76:9e:
a5:5b:ef:75:ce:03:1b:51:1a:d4:d6:cd:5e:3c:a3:
79:bf:76:5e:e5:1b:41:29:7d:37:b7:49:b3:53:78:
84:dd:07:36:f9:13:45:e3:ca:01:a5:99:b6:06:27:
0e:d5:03:a2:0f:1d:fa:15:83:41:23:04:2f:08:92:
c5:57:a0:da:d0:37:fd:d5:5c:55:51:fc:1b:77:20:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:C7:CA:2E:C4:8F:85:07:B2:1C:7D:D2:93:6E:D3:90:A3:06:EB
X509v3 Authority Key Identifier:
keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a326161383a3a2f33322d3438203d3e20323634303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2aa8::/32
Signature Algorithm: sha256WithRSAEncryption
45:2c:c2:2c:50:65:ac:17:01:40:47:4b:01:50:ad:b5:8a:7a:
c3:1f:79:d1:15:00:5e:42:ab:ca:9c:ac:a1:5c:49:26:ae:64:
dc:b0:40:e5:bb:6c:2d:38:a2:8c:59:9c:6a:ef:e0:a1:32:4c:
a8:be:e2:a5:a9:0c:0b:cc:09:8f:36:be:b3:5b:34:03:79:ad:
ce:6e:8c:28:a4:7e:75:46:1f:97:91:c0:22:80:f3:b0:55:00:
f8:08:09:05:9a:56:52:d8:4d:7a:d6:41:68:cf:61:27:ef:53:
3b:cb:87:6d:d8:31:ea:9a:05:ac:3f:7b:02:ee:12:08:20:1c:
9c:b7:db:ec:96:0b:fe:73:16:1c:cb:4b:68:f1:d4:1e:2a:cf:
41:76:40:21:a3:7a:67:74:25:80:fe:5d:e1:3b:e2:f5:3b:e2:
d4:4c:e5:aa:10:40:58:9e:33:77:f4:65:16:ed:a5:f0:00:80:
31:01:8f:90:c6:0e:71:65:11:16:04:fb:88:69:b7:59:55:f6:
b2:03:ba:f8:16:10:0c:c1:e6:37:73:1d:92:22:01:58:3e:dc:
3d:1b:96:2b:f7:1f:49:3c:11:dc:9e:93:c2:5d:2b:26:31:0d:
f8:bb:b2:b3:5b:31:a3:da:9e:e9:9b:2f:b7:21:4c:7f:ab:55:
17:bf:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:37:08 2025 by rpki-client