Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/323830343a373161633a3a2f33322d3334203d3e20323730383034.roa
File: 323830343a373161633a3a2f33322d3334203d3e20323730383034.roa (raw, json)
Hash identifier: kWizhYXctWqFAzO8qbRxcj9EfIIFpy8OQc4fAFfox+4=
Subject key identifier: 58:39:BD:FA:F8:67:AC:6C:18:0E:F5:B5:D3:A1:DE:63:E0:4A:36:4F
Certificate issuer: /CN=2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060
Certificate serial: 3B6BBFB72E97F03C9B675EA20335A94AF41DE268
Authority key identifier: 2E:2E:DC:BC:8E:8A:B4:AB:73:02:5D:D0:0A:EC:CD:06:42:B9:00:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/323830343a373161633a3a2f33322d3334203d3e20323730383034.roa
Signing time: Tue 25 Mar 2025 14:34:22 +0000
ROA not before: Tue 25 Mar 2025 14:29:22 +0000
ROA not after: Tue 24 Mar 2026 14:34:22 +0000
asID: 270804
IP address blocks: 2804:71ac::/32 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6b:bf:b7:2e:97:f0:3c:9b:67:5e:a2:03:35:a9:4a:f4:1d:e2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060
Validity
Not Before: Mar 25 14:29:22 2025 GMT
Not After : Mar 24 14:34:22 2026 GMT
Subject: CN=5839BDFAF867AC6C180EF5B5D3A1DE63E04A364F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:55:66:b6:c1:8d:1c:fa:b5:f6:e9:d1:47:
24:d2:ec:13:c3:22:87:13:fe:10:3d:f1:1a:e4:03:
98:16:9e:86:5c:d3:fb:3e:e7:fa:12:67:9e:f1:0d:
c2:19:0b:9a:3e:1b:d1:7a:fb:93:1d:37:3d:a1:27:
9b:e6:4a:b1:6a:48:a2:ba:6b:12:62:e3:ba:2b:29:
dd:21:6c:83:ee:aa:b7:bb:f4:ce:74:15:ce:78:69:
89:95:14:c1:a8:5a:e6:97:6d:16:c1:4f:14:b4:e0:
ee:ee:38:2d:2b:be:9a:9b:4e:09:26:b7:29:69:da:
b6:3b:12:4b:5e:ce:5b:3d:e8:5d:b3:35:d0:6e:02:
bf:05:ef:44:8d:a0:09:c9:22:ca:ba:12:03:cf:c1:
67:49:e6:a7:8c:3c:77:0a:19:66:0a:c6:64:2d:af:
6d:ba:ee:d5:94:26:41:17:fe:a4:a3:17:d9:38:45:
4c:ca:ae:e1:c5:9c:82:de:fe:26:7c:1c:55:9b:7d:
7f:42:7f:6e:79:9c:34:a3:27:10:7b:08:7d:83:c8:
83:dc:cd:ad:40:77:6a:d2:e5:d4:56:73:53:07:1b:
13:1d:59:fd:56:0b:9b:b2:0d:be:61:9c:87:23:60:
85:af:f6:d0:2f:68:37:44:3c:5d:10:00:18:60:5e:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:BD:FA:F8:67:AC:6C:18:0E:F5:B5:D3:A1:DE:63:E0:4A:36:4F
X509v3 Authority Key Identifier:
keyid:2E:2E:DC:BC:8E:8A:B4:AB:73:02:5D:D0:0A:EC:CD:06:42:B9:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/323830343a373161633a3a2f33322d3334203d3e20323730383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:71ac::/32
Signature Algorithm: sha256WithRSAEncryption
26:42:3f:77:f9:bb:00:28:63:c1:af:b2:f1:e8:55:b8:58:1b:
f3:d0:51:83:40:01:fd:30:3f:1f:a4:30:79:14:fc:c9:e7:9c:
f9:72:2a:e8:3f:cf:62:fc:05:c5:88:49:c8:7e:e9:99:63:c5:
78:c2:7f:7b:23:af:5e:9c:3e:53:a9:f6:32:a5:11:f0:8f:7c:
5a:2d:f6:04:73:fd:b0:c4:fd:49:0b:64:d0:48:e3:5d:0c:3c:
41:02:4a:6c:2e:11:b9:9d:ed:35:62:24:0a:2d:4b:54:12:c4:
1a:b4:24:1a:a1:7a:e7:4d:ca:d9:d7:58:db:35:09:ea:e3:09:
e0:f0:b0:58:0a:0d:ae:9a:93:27:8e:65:8e:e9:e6:21:8a:8c:
22:a1:e1:8c:ef:58:7e:3d:31:bb:17:a6:b5:5f:37:2e:e7:10:
a0:ec:e0:3b:ff:4c:ee:e5:7b:15:a4:2e:19:72:c7:c7:ac:6d:
bc:42:01:de:e8:98:69:1a:8b:8f:2d:1e:84:0c:84:6f:06:b1:
64:05:31:09:0a:1f:36:8a:3e:88:c4:ef:c9:c3:92:ea:4b:1d:
c1:12:77:66:7a:61:d9:76:0b:e6:86:32:53:e3:c2:9a:92:d4:
69:55:b0:72:a1:34:77:f6:55:3c:d1:6a:4b:1b:d4:6e:72:a4:
b6:1c:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:18:49 2025 by rpki-client