Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/323830343a373465343a3a2f33322d3334203d3e20323731303130.roa
File: 323830343a373465343a3a2f33322d3334203d3e20323731303130.roa (raw, json)
Hash identifier: dMFqqtSptdHktIaAdR1eE3yHR7eQSgMZlczvbgBocbc=
Subject key identifier: 9D:BD:67:4A:C8:02:AF:30:A1:54:17:7B:7D:49:D5:0C:F3:52:57:E5
Certificate issuer: /CN=C7925017EACBCBFDB8C96704D0075EE40B9E4267
Certificate serial: 01A16E0FDAA817A6F251CCAE77A14C18DFA7C27D
Authority key identifier: C7:92:50:17:EA:CB:CB:FD:B8:C9:67:04:D0:07:5E:E4:0B:9E:42:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.cer
Subject info access: rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/323830343a373465343a3a2f33322d3334203d3e20323731303130.roa
Signing time: Thu 06 Mar 2025 12:09:52 +0000
ROA not before: Thu 06 Mar 2025 12:04:52 +0000
ROA not after: Thu 05 Mar 2026 12:09:52 +0000
asID: 271010
IP address blocks: 2804:74e4::/32 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:0f:da:a8:17:a6:f2:51:cc:ae:77:a1:4c:18:df:a7:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7925017EACBCBFDB8C96704D0075EE40B9E4267
Validity
Not Before: Mar 6 12:04:52 2025 GMT
Not After : Mar 5 12:09:52 2026 GMT
Subject: CN=9DBD674AC802AF30A154177B7D49D50CF35257E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:43:16:63:09:5f:1c:76:90:52:ed:bc:ad:
08:f6:74:40:fe:cf:71:17:69:1e:51:fc:fa:88:4e:
28:47:66:c8:5e:bc:2e:48:08:68:05:e6:b7:1e:33:
cb:7a:26:29:58:6a:dd:2f:85:eb:1e:8a:70:5b:ec:
05:57:f0:cf:02:bf:90:d9:81:f9:e2:a2:57:9e:04:
9c:94:29:a2:5f:24:26:74:85:67:55:0d:20:dd:8b:
5c:92:53:88:87:40:e8:0c:36:78:2a:3c:f9:d5:ce:
1b:fa:56:62:9c:98:ad:03:8e:4f:3e:0e:d5:dc:6e:
2f:3d:d1:a3:50:10:2c:e5:c4:d5:35:c9:0c:91:ed:
7f:db:54:92:64:90:1e:75:53:54:0f:a1:aa:c1:01:
98:ad:6f:9b:a0:a5:3a:4f:fd:d6:5e:02:d0:6b:4a:
76:a0:9e:da:b4:c2:e6:32:fc:86:1e:09:70:64:2c:
0a:dd:93:a4:24:4a:3d:fb:6d:b1:d8:54:e3:73:d1:
98:08:4d:f3:70:6c:77:1b:5d:85:0a:fb:ec:d8:1c:
69:7d:6a:de:3d:19:ce:e0:e9:f4:92:ed:92:bb:2c:
fe:e1:b3:5a:79:9d:83:c2:75:c0:50:ee:e1:6c:89:
ff:c8:3d:6b:09:2a:d6:24:04:9c:ab:8e:ba:01:2e:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BD:67:4A:C8:02:AF:30:A1:54:17:7B:7D:49:D5:0C:F3:52:57:E5
X509v3 Authority Key Identifier:
keyid:C7:92:50:17:EA:CB:CB:FD:B8:C9:67:04:D0:07:5E:E4:0B:9E:42:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7925017EACBCBFDB8C96704D0075EE40B9E4267.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/1/323830343a373465343a3a2f33322d3334203d3e20323731303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:74e4::/32
Signature Algorithm: sha256WithRSAEncryption
ce:fe:2f:96:04:d2:85:d9:f1:d4:de:44:e8:3b:6b:fd:f8:6b:
78:1d:e1:07:c9:d5:37:6d:ac:e1:1a:b1:a4:67:03:e2:d7:eb:
72:7a:ba:06:59:1b:16:e9:25:ef:bd:72:a4:62:96:89:5f:38:
14:50:61:e8:a2:c9:db:e8:78:79:85:23:9d:23:47:e0:5b:c5:
c7:f6:3d:2c:b8:e3:fe:69:05:1f:57:38:17:63:b7:48:50:80:
aa:bd:5a:3a:8b:7f:6d:20:58:35:a8:61:6b:b7:a8:3b:6a:82:
c4:bf:98:6d:71:58:c8:36:b0:60:ef:13:34:e0:31:13:06:46:
08:48:0e:e8:ed:04:a4:36:09:0b:86:05:37:c7:a9:87:98:f2:
cd:c2:8d:f7:06:90:94:ad:b8:6b:06:aa:99:b3:5c:02:10:ad:
ee:58:77:e3:3a:b7:84:ef:e3:64:8e:1a:14:2c:ed:44:d5:ab:
1c:d9:68:97:7f:90:fc:bb:04:4d:7a:ee:a8:2b:c1:5f:de:fd:
a7:57:7b:30:c6:3f:d6:77:62:d4:c9:67:b8:ea:bc:28:78:42:
c5:e7:06:6f:61:ac:31:f3:73:1d:cc:50:f8:22:b3:ea:15:75:
6d:1f:da:b6:33:dc:11:d0:a6:d6:c9:04:a2:6c:7f:b0:bc:f7:
94:09:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:47:24 2025 by rpki-client