Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/323830343a356263383a3a2f33322d3438203d3e20323638383639.roa
File: 323830343a356263383a3a2f33322d3438203d3e20323638383639.roa (raw, json)
Hash identifier: LYRJB/cMQJjFPGjuWg7bLzognOa/2n/mwnXF5/+KR1E=
Subject key identifier: 4E:50:D6:F0:55:3D:BC:1F:04:BC:C4:DE:F7:86:BB:60:8C:4A:63:3D
Certificate issuer: /CN=FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885
Certificate serial: 51AD942B6A073D82FD43D93D495E35A3698EFF6B
Authority key identifier: FF:D6:8C:C4:BE:F4:9F:85:D6:EE:0A:8F:DD:D4:A7:70:AE:D8:18:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/323830343a356263383a3a2f33322d3438203d3e20323638383639.roa
Signing time: Sun 25 May 2025 03:58:14 +0000
ROA not before: Sun 25 May 2025 03:53:14 +0000
ROA not after: Sun 24 May 2026 03:58:14 +0000
asID: 268869
IP address blocks: 2804:5bc8::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ad:94:2b:6a:07:3d:82:fd:43:d9:3d:49:5e:35:a3:69:8e:ff:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885
Validity
Not Before: May 25 03:53:14 2025 GMT
Not After : May 24 03:58:14 2026 GMT
Subject: CN=4E50D6F0553DBC1F04BCC4DEF786BB608C4A633D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:22:c1:a8:34:2c:8e:5f:0e:15:ff:d9:2a:
7a:ae:fd:24:a9:66:ec:c9:da:3a:10:0b:1d:16:4b:
60:f1:c7:e0:63:05:4c:1d:81:61:81:c4:c4:b4:6a:
8d:4f:92:c6:cb:1f:dd:0c:99:1f:c6:5d:1e:7b:d3:
24:f9:cc:2c:2f:f8:6a:53:cd:d6:27:93:39:bc:e8:
fb:6c:61:70:bd:01:26:3c:6e:7b:6e:87:ed:45:0f:
6a:77:b1:65:8c:7a:46:f4:88:69:76:df:88:e1:e7:
fd:6f:5d:88:5e:06:5e:ce:00:c0:0f:39:99:45:d9:
f6:f4:d8:e7:9e:f3:6d:79:43:51:e4:ba:ab:77:c9:
d3:44:d8:55:c8:6c:43:51:a9:0a:91:c3:fa:75:17:
3a:a5:17:98:a2:de:a8:69:da:f4:df:01:46:be:80:
b3:2b:7e:fb:8e:d6:fa:09:a9:2e:2b:bf:6d:1b:17:
bd:0a:d5:92:e7:46:04:15:3e:d8:43:b2:e5:f3:03:
54:fe:97:39:18:e4:d1:34:54:c3:5a:86:05:93:0a:
5a:14:8c:d8:16:54:b1:35:34:7d:81:86:71:b2:f7:
f9:c6:1f:b7:cb:56:c0:04:ab:60:72:e7:59:20:f3:
18:9d:c4:e0:87:02:7b:9d:16:90:8e:f9:ff:ce:b8:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:D6:F0:55:3D:BC:1F:04:BC:C4:DE:F7:86:BB:60:8C:4A:63:3D
X509v3 Authority Key Identifier:
keyid:FF:D6:8C:C4:BE:F4:9F:85:D6:EE:0A:8F:DD:D4:A7:70:AE:D8:18:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD68CC4BEF49F85D6EE0A8FDDD4A770AED81885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vfUNUa2zYk4YiMhCyTKaqzdG82XWsjeyuErT3eS6nkZ/0/323830343a356263383a3a2f33322d3438203d3e20323638383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5bc8::/32
Signature Algorithm: sha256WithRSAEncryption
83:62:a0:7d:df:a7:71:c4:23:d6:fb:0a:41:a4:07:3d:92:5e:
68:f9:05:7f:aa:01:08:76:89:e7:4e:56:66:59:c7:a7:ef:b0:
f7:68:2b:db:e1:b7:18:35:bc:31:31:f9:f0:4a:71:d6:86:d1:
5a:cb:c6:18:06:1a:12:4b:07:97:6d:0a:7a:67:6c:71:20:c6:
6a:dd:91:4f:21:7e:95:38:f1:b2:40:ce:f4:02:0f:68:5b:4e:
93:a0:b0:7e:d4:66:5c:99:7e:98:d6:a4:20:8a:db:f3:c2:e1:
e3:26:85:a1:80:7c:5c:5d:9a:b1:5a:f1:a6:4f:ca:d6:e9:35:
a9:a0:26:1a:8f:02:da:ca:28:67:39:d8:dd:1e:ee:5a:5e:74:
33:1c:ab:31:e3:ca:a8:2b:2a:a8:d4:df:cc:a3:c4:a4:0a:70:
b3:aa:cf:77:9f:3c:e6:4e:63:39:1d:8a:ae:71:93:17:49:4d:
d1:79:40:a4:21:2a:96:9d:0c:4c:07:cc:09:63:c9:69:7f:ec:
8d:39:33:4b:f1:20:b7:aa:72:dd:40:e7:07:4a:32:08:69:fe:
54:7a:f3:43:b2:e8:cf:16:66:23:b5:1b:9c:2a:d2:f2:df:4b:
52:76:bb:39:23:23:06:a8:d0:de:c9:31:5a:aa:c5:3d:84:ec:
dd:a9:d5:fa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUa2UK2oHPYL9Q9k9SV41o2mO/2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZENjhDQzRCRUY0OUY4NUQ2RUUwQThGRERENEE3NzBB
RUQ4MTg4NTAeFw0yNTA1MjUwMzUzMTRaFw0yNjA1MjQwMzU4MTRaMDMxMTAvBgNV
BAMTKDRFNTBENkYwNTUzREJDMUYwNEJDQzRERUY3ODZCQjYwOEM0QTYzM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPCLBqDQsjl8OFf/ZKnqu/SSp
ZuzJ2joQCx0WS2Dxx+BjBUwdgWGBxMS0ao1PksbLH90MmR/GXR570yT5zCwv+GpT
zdYnkzm86PtsYXC9ASY8bntuh+1FD2p3sWWMekb0iGl234jh5/1vXYheBl7OAMAP
OZlF2fb02Oee8215Q1Hkuqt3ydNE2FXIbENRqQqRw/p1FzqlF5ii3qhp2vTfAUa+
gLMrfvuO1voJqS4rv20bF70K1ZLnRgQVPthDsuXzA1T+lzkY5NE0VMNahgWTCloU
jNgWVLE1NH2BhnGy9/nGH7fLVsAEq2By51kg8xidxOCHAnudFpCO+f/OuNd7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUTlDW8FU9vB8EvMTe94a7YIxKYz0wHwYDVR0j
BBgwFoAU/9aMxL70n4XW7gqP3dSncK7YGIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnZmVU5VYTJ6WWs0WWlNaEN5VEthcXpkRzgyWFdzamV5dUVyVDNlUzZu
a1ovMC9GRkQ2OENDNEJFRjQ5Rjg1RDZFRTBBOEZEREQ0QTc3MEFFRDgxODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRDY4Q0M0QkVGNDlGODVE
NkVFMEE4RkRERDRBNzcwQUVEODE4ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ2ZlVOVWEyellrNFlpTWhDeVRLYXF6ZEc4MlhXc2pleXVFclQzZVM2bmtaLzAv
MzIzODMwMzQzYTM1NjI2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARbyDANBgkqhkiG9w0BAQsFAAOCAQEAg2Kgfd+n
ccQj1vsKQaQHPZJeaPkFf6oBCHaJ505WZlnHp++w92gr2+G3GDW8MTH58Epx1obR
WsvGGAYaEksHl20KemdscSDGat2RTyF+lTjxskDO9AIPaFtOk6CwftRmXJl+mNak
IIrb88Lh4yaFoYB8XF2asVrxpk/K1uk1qaAmGo8C2sooZznY3R7uWl50MxyrMePK
qCsqqNTfzKPEpApws6rPd5885k5jOR2KrnGTF0lN0XlApCEqlp0MTAfMCWPJaX/s
jTkzS/Egt6py3UDnB0oyCGn+VHrzQ7LozxZmI7UbnCrS8t9LUna7OSMjBqjQ3skx
WqrFPYTs3anV+g==
-----END CERTIFICATE-----
Generated at Fri Jun 6 18:05:53 2025 by rpki-client