Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/3/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa
File: 323830343a313736303a3a2f33322d313238203d3e20323633313432.roa (raw, json)
Hash identifier: XdOKT6d4HIlymRjVmoLJXq102GB5gqJMKV1Mum3dw2o=
Subject key identifier: 47:08:67:26:4A:6F:9B:D5:C6:C4:CB:18:09:6D:FA:C0:33:E7:47:F4
Certificate issuer: /CN=9EFC57BCB21F18564776236AED122597B797EEB5
Certificate serial: 34A387FABE1639C460B327C202BD387C4AD39EEC
Authority key identifier: 9E:FC:57:BC:B2:1F:18:56:47:76:23:6A:ED:12:25:97:B7:97:EE:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EFC57BCB21F18564776236AED122597B797EEB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/3/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa
Signing time: Fri 03 Jan 2025 14:19:54 +0000
ROA not before: Fri 03 Jan 2025 14:14:54 +0000
ROA not after: Fri 02 Jan 2026 14:19:54 +0000
asID: 263142
IP address blocks: 2804:1760::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a3:87:fa:be:16:39:c4:60:b3:27:c2:02:bd:38:7c:4a:d3:9e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EFC57BCB21F18564776236AED122597B797EEB5
Validity
Not Before: Jan 3 14:14:54 2025 GMT
Not After : Jan 2 14:19:54 2026 GMT
Subject: CN=470867264A6F9BD5C6C4CB18096DFAC033E747F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9c:6f:53:e8:62:08:c2:33:f0:28:28:35:04:
26:dd:cc:3c:13:a6:e5:1b:47:07:e9:31:1d:54:19:
c6:a4:30:d5:dc:10:92:9d:0d:0f:1f:de:67:ce:d0:
f3:ad:47:a0:b7:ae:b9:80:10:89:fc:e1:51:36:d1:
54:db:24:4b:36:c8:dc:59:04:eb:56:a5:6a:1e:ce:
27:4a:ab:48:89:f9:83:75:b9:22:15:9b:38:98:88:
bd:57:9f:31:1c:b7:d9:9f:8f:a2:ab:b9:9a:8d:af:
5b:15:78:ce:ec:58:50:7e:35:4e:61:0a:a2:03:88:
13:f3:94:f9:01:1d:99:ba:bb:b4:ed:33:26:91:06:
82:40:42:32:83:7d:10:4b:b9:4a:f3:d9:86:90:e0:
05:7a:f2:4b:98:2f:de:e5:89:d9:88:f8:75:f9:47:
d6:fe:9a:57:dd:a3:02:5c:92:88:8e:63:d5:64:6a:
66:61:1e:32:0e:b7:e9:a6:6c:3f:8a:91:25:4a:db:
36:73:f4:6d:a8:9b:6c:a2:2e:cb:a4:11:4c:8d:9f:
34:7e:9c:e8:ed:9e:10:05:c7:77:9a:17:16:0d:8d:
e8:4e:c8:99:a7:d6:3c:7a:d4:e6:50:b0:7e:23:26:
ee:01:03:91:9e:81:95:44:7b:0e:28:de:7e:ce:65:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:67:26:4A:6F:9B:D5:C6:C4:CB:18:09:6D:FA:C0:33:E7:47:F4
X509v3 Authority Key Identifier:
keyid:9E:FC:57:BC:B2:1F:18:56:47:76:23:6A:ED:12:25:97:B7:97:EE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/3/9EFC57BCB21F18564776236AED122597B797EEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EFC57BCB21F18564776236AED122597B797EEB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/3/323830343a313736303a3a2f33322d313238203d3e20323633313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1760::/32
Signature Algorithm: sha256WithRSAEncryption
91:d0:46:91:66:ac:f7:59:84:ea:05:95:ce:b0:61:7a:5d:3a:
9a:d7:0f:49:fb:d5:4d:ad:71:03:5b:9e:51:b3:b9:ac:6d:e1:
75:f0:5c:20:a1:bd:d1:65:7c:ed:c6:2c:31:96:bb:06:9e:45:
c5:ec:f8:9e:c6:7e:ab:14:07:f4:a8:47:ad:48:18:bc:cd:67:
eb:a7:fa:21:0d:81:7a:a5:ac:38:29:00:ff:bc:e1:fe:d9:67:
e0:9b:ad:a9:e0:5a:e7:ed:18:09:b7:b4:07:65:a4:20:21:fe:
b8:87:db:bd:e2:af:e2:e1:70:fb:e1:47:a6:0b:96:8e:38:73:
09:a4:5e:42:c9:2f:1e:24:f3:d0:a5:f2:f1:c8:d0:d1:1f:d4:
05:7d:66:f3:f0:56:08:22:b6:4b:77:8b:7a:71:d2:2b:0c:bb:
43:f1:bb:a7:3e:eb:cb:81:2f:e4:d5:61:c0:38:ea:e0:82:75:
b5:4c:b4:97:e0:02:64:89:c0:e9:de:2f:1f:73:b2:04:22:16:
20:57:84:7d:e4:7a:b6:d2:62:3f:42:e8:96:37:5f:0b:c0:97:
dd:1f:e7:df:94:61:87:b7:d1:62:ad:96:16:54:48:b0:52:1d:
7d:d8:0c:8e:71:1f:68:16:2d:c1:28:6d:13:bc:08:5c:0e:55:
35:5b:5f:11
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUNKOH+r4WOcRgsyfCAr04fErTnuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVGQzU3QkNCMjFGMTg1NjQ3NzYyMzZBRUQxMjI1OTdC
Nzk3RUVCNTAeFw0yNTAxMDMxNDE0NTRaFw0yNjAxMDIxNDE5NTRaMDMxMTAvBgNV
BAMTKDQ3MDg2NzI2NEE2RjlCRDVDNkM0Q0IxODA5NkRGQUMwMzNFNzQ3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsnG9T6GIIwjPwKCg1BCbdzDwT
puUbRwfpMR1UGcakMNXcEJKdDQ8f3mfO0POtR6C3rrmAEIn84VE20VTbJEs2yNxZ
BOtWpWoezidKq0iJ+YN1uSIVmziYiL1XnzEct9mfj6KruZqNr1sVeM7sWFB+NU5h
CqIDiBPzlPkBHZm6u7TtMyaRBoJAQjKDfRBLuUrz2YaQ4AV68kuYL97lidmI+HX5
R9b+mlfdowJckoiOY9VkamZhHjIOt+mmbD+KkSVK2zZz9G2om2yiLsukEUyNnzR+
nOjtnhAFx3eaFxYNjehOyJmn1jx61OZQsH4jJu4BA5GegZVEew4o3n7OZY3zAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQURwhnJkpvm9XGxMsYCW36wDPnR/QwHwYDVR0j
BBgwFoAUnvxXvLIfGFZHdiNq7RIll7eX7rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFlTUUpDWUp2a0tRcVByQmZmeER3cUJHZVo4aVpMSHZ5N204aVQ2UUp4
c1kvMy85RUZDNTdCQ0IyMUYxODU2NDc3NjIzNkFFRDEyMjU5N0I3OTdFRUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFRkM1N0JDQjIxRjE4NTY0
Nzc2MjM2QUVEMTIyNTk3Qjc5N0VFQjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhZU1FKQ1lKdmtLUXFQckJmZnhEd3FCR2VaOGlaTEh2eTdtOGlUNlFKeHNZLzMv
MzIzODMwMzQzYTMxMzczNjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzMTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBdgMA0GCSqGSIb3DQEBCwUAA4IBAQCR0EaR
Zqz3WYTqBZXOsGF6XTqa1w9J+9VNrXEDW55Rs7msbeF18Fwgob3RZXztxiwxlrsG
nkXF7Piexn6rFAf0qEetSBi8zWfrp/ohDYF6paw4KQD/vOH+2Wfgm62p4Frn7RgJ
t7QHZaQgIf64h9u94q/i4XD74UemC5aOOHMJpF5CyS8eJPPQpfLxyNDRH9QFfWbz
8FYIIrZLd4t6cdIrDLtD8bunPuvLgS/k1WHAOOrggnW1TLSX4AJkicDp3i8fc7IE
IhYgV4R95Hq20mI/QuiWN18LwJfdH+fflGGHt9FirZYWVEiwUh192AyOcR9oFi3B
KG0TvAhcDlU1W18R
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:33 2025 by rpki-client