Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
File: 323830343a383039383a3a2f33322d3438203d3e20323731373631.roa (raw, json)
Hash identifier: CLGpGZDv4m+pojiniwfua1TP6KJbVQ6BK7vU/fvZ1K8=
Subject key identifier: 21:FF:04:82:8D:99:D1:CB:77:01:A3:D8:9B:02:09:50:5B:A5:72:91
Certificate issuer: /CN=3063696774AF70B4C4AD74E6ECFFA375F9E4930E
Certificate serial: 23F8C62F08388A6175DCD86168E4F61BF9B3F450
Authority key identifier: 30:63:69:67:74:AF:70:B4:C4:AD:74:E6:EC:FF:A3:75:F9:E4:93:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3063696774AF70B4C4AD74E6ECFFA375F9E4930E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
Signing time: Tue 08 Apr 2025 13:23:53 +0000
ROA not before: Tue 08 Apr 2025 13:18:53 +0000
ROA not after: Tue 07 Apr 2026 13:23:53 +0000
asID: 271761
IP address blocks: 2804:8098::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f8:c6:2f:08:38:8a:61:75:dc:d8:61:68:e4:f6:1b:f9:b3:f4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3063696774AF70B4C4AD74E6ECFFA375F9E4930E
Validity
Not Before: Apr 8 13:18:53 2025 GMT
Not After : Apr 7 13:23:53 2026 GMT
Subject: CN=21FF04828D99D1CB7701A3D89B0209505BA57291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:f4:c0:8b:9a:1c:db:aa:2d:28:c4:43:80:
2b:a6:66:a7:e0:b8:b5:98:66:a3:7d:1a:d6:e6:0f:
f1:0f:07:1b:e6:dc:bf:94:a5:38:8e:c5:64:c5:65:
94:2b:e9:a8:d3:f4:21:1e:66:ae:42:5f:5d:27:e5:
e2:ec:fe:96:1d:b4:78:7d:03:78:d3:0a:9a:51:3a:
7e:0b:89:68:0a:66:e2:d2:40:a4:4b:f1:8d:ad:e3:
08:e9:86:b7:c0:b4:3e:a8:dd:81:cc:6c:76:bb:84:
92:29:3f:3a:ec:4d:1b:23:4b:63:6a:d2:3a:38:ff:
4b:ea:63:da:89:d0:c3:15:65:cf:cb:9f:1f:14:6f:
04:03:0a:b6:f4:b7:b7:71:14:06:d9:5c:d9:52:58:
83:67:6f:a7:a9:ca:00:97:fe:85:2f:7d:90:07:88:
4c:41:97:55:c5:35:ae:55:6b:0a:47:9d:7e:ff:4a:
d0:22:31:56:a6:d9:41:77:59:4a:18:cc:2c:c3:f9:
1c:9c:17:fc:b8:02:61:0d:3f:b1:6d:4d:91:cb:09:
81:a4:1c:6e:7b:db:6d:44:a0:45:65:b4:c6:8b:1d:
a9:d9:20:6c:15:0a:76:1d:33:19:95:54:7a:39:44:
89:0b:39:9b:b7:db:f5:2e:ff:d1:64:6b:e3:e6:57:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:04:82:8D:99:D1:CB:77:01:A3:D8:9B:02:09:50:5B:A5:72:91
X509v3 Authority Key Identifier:
keyid:30:63:69:67:74:AF:70:B4:C4:AD:74:E6:EC:FF:A3:75:F9:E4:93:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/3063696774AF70B4C4AD74E6ECFFA375F9E4930E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3063696774AF70B4C4AD74E6ECFFA375F9E4930E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8098::/32
Signature Algorithm: sha256WithRSAEncryption
2b:40:88:37:2f:fd:31:40:1d:62:bb:bf:0a:73:fc:14:ce:e0:
97:df:95:e7:c5:6d:a8:d5:39:ec:57:a1:0e:95:d9:02:49:15:
7f:4a:e8:55:44:9a:37:d7:68:9c:a5:77:db:f2:0a:ac:0e:c2:
59:a7:cd:0c:1c:1e:3f:2d:dd:fa:c6:1c:9e:4b:f4:26:dd:e9:
75:eb:e3:d3:1c:65:01:61:c5:ef:d0:6e:3b:c7:5a:39:1c:db:
91:05:8f:9e:55:1a:7a:47:b1:05:92:ac:6c:8c:7d:90:08:de:
94:69:e6:b5:bd:66:7b:90:9b:62:ca:a6:8f:9f:0e:7b:39:11:
df:7c:63:3a:98:32:c6:62:70:65:33:4c:8c:2a:94:aa:90:13:
38:ba:ca:de:21:cf:09:17:b1:e9:ee:c3:b1:db:5a:98:33:f1:
85:40:32:5f:82:39:a9:10:70:ec:3d:57:60:b3:09:e2:82:ac:
50:d1:62:0a:b7:e0:33:d9:a0:4e:89:44:a8:1c:de:cd:8b:db:
06:25:f9:07:37:e9:e9:da:fd:5a:c6:12:e2:d1:ac:ae:31:e8:
69:a8:35:4e:5d:d3:d6:a0:ce:62:aa:e7:75:04:16:4f:82:51:
49:5b:f8:ae:e0:2d:23:8c:c0:dd:f8:48:b6:b7:87:34:92:6f:
94:b2:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:14:57 2025 by rpki-client