Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/323830343a356238343a3a2f33322d313238203d3e203238333239.roa
File: 323830343a356238343a3a2f33322d313238203d3e203238333239.roa (raw, json)
Hash identifier: 8oQjwIhylKHaXa+Bo4k7CwqHZyzEonGyi3LkoANO2yY=
Subject key identifier: BF:97:60:DA:58:C9:D2:4C:87:90:D2:A4:A2:F4:05:86:71:F5:A5:1F
Certificate issuer: /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial: 4FB77567A6CEB6CA086EF0D8C0DF973F2B9D3A70
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/323830343a356238343a3a2f33322d313238203d3e203238333239.roa
Signing time: Fri 07 Mar 2025 19:14:24 +0000
ROA not before: Fri 07 Mar 2025 19:09:24 +0000
ROA not after: Fri 06 Mar 2026 19:14:24 +0000
asID: 28329
IP address blocks: 2804:5b84::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b7:75:67:a6:ce:b6:ca:08:6e:f0:d8:c0:df:97:3f:2b:9d:3a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Validity
Not Before: Mar 7 19:09:24 2025 GMT
Not After : Mar 6 19:14:24 2026 GMT
Subject: CN=BF9760DA58C9D24C8790D2A4A2F4058671F5A51F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:18:1d:bb:01:fd:09:20:d2:86:2f:26:5a:
62:ab:10:82:47:77:55:90:2d:3c:8b:73:50:b3:53:
ae:a7:37:3d:4a:e4:1f:8f:11:31:48:27:71:50:07:
42:06:11:59:ff:72:5c:52:a0:18:ab:fb:2e:2c:c4:
4f:c9:f6:17:8d:fc:cd:05:92:d5:09:8d:cd:d8:a7:
f5:ec:81:e5:2c:f0:a0:6f:a1:95:d7:38:3d:97:29:
f1:e2:72:eb:18:bb:06:fa:c2:3d:bc:6d:4d:49:62:
c2:08:1d:71:cc:12:7e:25:ee:56:4d:7e:47:ad:93:
3e:a8:dd:0b:b8:cb:f4:86:41:4c:b8:f7:07:08:26:
4d:d9:4a:02:e7:67:9c:f2:25:c8:11:74:b3:c2:b8:
5a:15:4c:d3:02:43:b3:f5:2d:f1:41:52:bd:59:9f:
e5:75:cf:91:57:d6:2b:c0:6b:93:db:95:c0:15:96:
8c:96:a1:bc:1d:56:cb:35:d2:4a:40:aa:22:0d:41:
63:45:6e:ff:3d:0a:9b:67:85:91:72:ba:15:32:41:
63:d3:26:85:00:bf:d1:27:da:27:3c:54:2a:63:67:
39:43:74:65:a7:1e:2b:8e:81:39:d3:38:94:4f:05:
3c:3f:96:54:3d:15:5a:b4:80:b2:38:27:bb:a8:8d:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:60:DA:58:C9:D2:4C:87:90:D2:A4:A2:F4:05:86:71:F5:A5:1F
X509v3 Authority Key Identifier:
keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/323830343a356238343a3a2f33322d313238203d3e203238333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b84::/32
Signature Algorithm: sha256WithRSAEncryption
a7:80:15:42:02:93:55:96:85:1f:5f:b4:29:b4:81:3b:13:c5:
73:47:3a:5a:80:8f:bd:19:65:99:d2:d5:6d:d9:87:00:78:a3:
72:6b:7d:9f:31:3b:08:b6:87:40:d4:8b:a6:e0:ae:8f:c4:36:
7f:c6:a7:35:d7:50:a7:f7:bc:b5:cd:dd:8f:4e:54:6d:87:bd:
38:f8:ba:61:af:6f:81:02:be:d9:08:cf:fb:51:cf:51:18:73:
30:0b:8c:f0:5d:52:f5:4b:45:03:ef:48:da:21:03:cc:7f:f0:
c0:1e:0b:cf:a3:eb:50:ec:6d:1e:9b:d8:6f:b3:7e:ec:e2:cb:
22:bb:29:30:f7:b4:bc:0a:d4:c2:90:56:e6:20:39:c9:cf:c6:
f0:7f:af:02:0f:14:3a:a9:0e:44:b3:4d:d9:10:ac:e0:ff:09:
03:9b:83:99:84:fe:a0:b9:a7:dd:f7:14:b0:76:dc:58:e0:2d:
fc:07:36:8b:93:01:64:12:7e:8e:98:3c:df:26:d6:b8:67:f1:
40:04:34:80:ca:e6:b0:af:b6:a8:7e:df:fd:c8:4d:1b:38:f6:
b9:06:2e:5b:ad:51:6c:1f:48:8c:c8:8e:2c:cf:5c:02:b8:34:
f1:56:4e:bd:3e:7a:38:e1:6c:b1:6d:4f:83:41:8d:49:85:3b:
65:82:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:02:12 2025 by rpki-client