Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e2033333536.roa
File: 323830343a6439303a3a2f33322d3536203d3e2033333536.roa (raw, json)
Hash identifier: xwJvEOEv/2dXGC6OdaXXALXwsEobkwvxgPa5h7zsGVg=
Subject key identifier: DA:E7:A6:BE:4D:AA:38:A7:79:20:7A:4F:BF:61:FA:ED:21:55:5A:22
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 6DE63266C3281994473F68498D42CC5C5A12917D
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e2033333536.roa
Signing time: Thu 06 Mar 2025 00:58:54 +0000
ROA not before: Thu 06 Mar 2025 00:53:54 +0000
ROA not after: Thu 05 Mar 2026 00:58:54 +0000
asID: 3356
IP address blocks: 2804:d90::/32 maxlen: 56
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e6:32:66:c3:28:19:94:47:3f:68:49:8d:42:cc:5c:5a:12:91:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Mar 6 00:53:54 2025 GMT
Not After : Mar 5 00:58:54 2026 GMT
Subject: CN=DAE7A6BE4DAA38A779207A4FBF61FAED21555A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fd:b3:b2:ac:99:13:bd:71:d4:aa:b8:bd:ab:
4d:2e:65:92:b9:3b:5d:87:38:4c:f2:07:dd:45:64:
ee:4d:09:82:33:b2:69:3a:10:97:43:86:8d:28:9d:
10:e8:74:19:7b:36:a5:f7:5d:7d:df:83:a9:e7:47:
b7:0a:57:d8:34:da:e7:54:b7:61:ee:7b:ac:9e:1d:
f6:59:4c:99:c7:01:0c:78:66:db:e4:19:09:1f:9b:
b4:a8:14:ae:91:d9:fd:42:bd:ec:20:a8:79:5c:cc:
08:18:07:d0:d3:1d:2c:e7:a1:2e:ec:c2:52:96:b7:
5e:3a:ab:eb:03:97:33:dd:c3:70:bf:0c:39:05:ef:
74:c6:d1:8d:77:87:46:36:9a:b9:f0:bd:92:06:b8:
88:cc:a3:74:ec:2e:ff:5c:29:a0:9f:c0:c5:d9:00:
e7:d0:f9:89:0b:65:00:89:7a:38:0e:63:3a:51:3c:
b8:01:62:23:0f:07:4d:66:c4:92:32:7b:85:46:0e:
18:b2:05:b2:f0:e2:90:69:24:fa:1d:f3:86:19:a5:
b8:4f:8e:17:56:e8:2c:90:45:b0:0f:da:c4:4c:b2:
31:b4:6b:4d:a9:6b:1e:98:3a:af:f9:09:92:a6:8e:
c8:f1:fd:ec:89:35:5b:9e:71:83:97:50:3f:f5:9f:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:A6:BE:4D:AA:38:A7:79:20:7A:4F:BF:61:FA:ED:21:55:5A:22
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d90::/32
Signature Algorithm: sha256WithRSAEncryption
2b:d0:c1:ae:ac:45:eb:d6:f5:fb:82:6b:60:18:d9:d8:a6:dd:
08:e1:a5:71:f2:53:31:b4:0f:ee:61:c2:00:0f:ae:70:1e:2d:
83:c9:a4:d7:d6:a5:7d:a2:be:83:c1:e4:e0:99:a5:18:7e:9b:
92:6e:b8:3c:fc:4f:98:49:a9:ec:37:42:63:c9:98:e6:78:ad:
f4:98:3e:05:31:ca:34:55:75:56:5a:1f:3c:1c:3b:89:01:15:
55:71:c6:68:33:c0:1e:a1:5e:03:f8:b9:b4:fa:e0:e3:12:5b:
7c:b7:61:66:60:fa:37:2d:b7:68:7d:3c:ce:42:c4:23:43:3c:
4c:a4:1d:4b:60:2e:dd:12:95:26:4b:50:c5:ee:b8:af:70:1e:
20:9b:95:22:2a:14:d4:8f:d2:0e:f9:4c:04:af:0f:7b:60:cf:
a8:23:f0:30:2c:5b:23:89:9e:dc:c7:91:73:27:a3:24:d3:f7:
e7:29:89:42:a1:bc:cd:ac:cd:24:bc:28:a5:0c:7e:63:52:66:
83:c0:aa:d7:7d:f6:1d:1e:1f:21:13:88:34:7d:1f:d3:ae:f9:
d3:19:c4:b3:53:46:44:69:b9:74:97:1c:1a:b7:41:4a:f8:9a:
c6:42:89:4e:f0:2a:b1:24:a5:3f:e8:01:71:b8:61:a3:17:ad:
5f:4c:d8:4c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUbeYyZsMoGZRHP2hJjULMXFoSkX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzMzEwOThCODREQzkyOTZCQkRBRUU5RDJDMDVCRTJB
QzNDQzVBMjAeFw0yNTAzMDYwMDUzNTRaFw0yNjAzMDUwMDU4NTRaMDMxMTAvBgNV
BAMTKERBRTdBNkJFNERBQTM4QTc3OTIwN0E0RkJGNjFGQUVEMjE1NTVBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz/bOyrJkTvXHUqri9q00uZZK5
O12HOEzyB91FZO5NCYIzsmk6EJdDho0onRDodBl7NqX3XX3fg6nnR7cKV9g02udU
t2Hue6yeHfZZTJnHAQx4ZtvkGQkfm7SoFK6R2f1CvewgqHlczAgYB9DTHSznoS7s
wlKWt146q+sDlzPdw3C/DDkF73TG0Y13h0Y2mrnwvZIGuIjMo3TsLv9cKaCfwMXZ
AOfQ+YkLZQCJejgOYzpRPLgBYiMPB01mxJIye4VGDhiyBbLw4pBpJPod84YZpbhP
jhdW6CyQRbAP2sRMsjG0a02pax6YOq/5CZKmjsjx/eyJNVuecYOXUD/1nxmrAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU2uemvk2qOKd5IHpPv2H67SFVWiIwHwYDVR0j
BBgwFoAUTDMQmLhNySlrva7p0sBb4qw8xaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3JBemlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1h
Y1UvMi80QzMzMTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMzMxMDk4Qjg0REM5Mjk2
QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdyQXppb3dlZk5tRnJ3Ylc1MVN5UEthRDNIMXdOVWoxSndVUHdndWptYWNVLzIv
MzIzODMwMzQzYTY0MzkzMDNhM2EyZjMzMzIyZDM1MzYyMDNkM2UyMDMzMzMzNTM2
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQNkDANBgkqhkiG9w0BAQsFAAOCAQEAK9DBrqxF69b1+4Jr
YBjZ2KbdCOGlcfJTMbQP7mHCAA+ucB4tg8mk19alfaK+g8Hk4JmlGH6bkm64PPxP
mEmp7DdCY8mY5nit9Jg+BTHKNFV1VlofPBw7iQEVVXHGaDPAHqFeA/i5tPrg4xJb
fLdhZmD6Ny23aH08zkLEI0M8TKQdS2Au3RKVJktQxe64r3AeIJuVIioU1I/SDvlM
BK8Pe2DPqCPwMCxbI4me3MeRcyejJNP35ymJQqG8zazNJLwopQx+Y1Jmg8Cq1332
HR4fIROINH0f06750xnEs1NGRGm5dJccGrdBSviaxkKJTvAqsSSlP+gBcbhhoxet
X0zYTA==
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:44:25 2025 by rpki-client