Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33332d3333203d3e20323730373933.roa
File: 323830343a373138303a3a2f33332d3333203d3e20323730373933.roa (raw, json)
Hash identifier: tzwsqAnHggagJb5s4uRg7B0ujRQQ5XZzgn6/yabJWA0=
Subject key identifier: EF:51:3E:CA:41:84:75:76:0E:43:27:70:8C:7B:97:19:02:57:D6:21
Certificate issuer: /CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Certificate serial: 34F2F780980E59DB51D1F67250B6C8711B4260B6
Authority key identifier: C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33332d3333203d3e20323730373933.roa
Signing time: Mon 07 Apr 2025 20:01:46 +0000
ROA not before: Mon 07 Apr 2025 19:56:46 +0000
ROA not after: Mon 06 Apr 2026 20:01:46 +0000
asID: 270793
IP address blocks: 2804:7180::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f2:f7:80:98:0e:59:db:51:d1:f6:72:50:b6:c8:71:1b:42:60:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Validity
Not Before: Apr 7 19:56:46 2025 GMT
Not After : Apr 6 20:01:46 2026 GMT
Subject: CN=EF513ECA418475760E4327708C7B97190257D621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:6f:bb:a7:35:13:d8:90:9e:16:0a:3f:ca:
71:be:cf:75:4d:e4:36:b8:24:4d:89:29:1e:69:82:
78:48:81:64:8b:89:3e:0d:5c:62:10:eb:49:15:ff:
e8:5c:4f:85:42:f3:64:66:04:57:35:89:d7:06:96:
9d:e9:0d:29:af:81:63:7d:2c:58:40:86:90:33:c2:
e7:60:61:1c:25:1f:37:11:69:a7:b6:f1:e2:0c:0a:
f4:ef:73:7c:ab:a5:35:a5:52:d4:e1:a4:60:a6:bb:
c6:20:61:7b:23:c5:10:a9:f5:f0:e1:91:d7:b1:69:
d0:66:de:c5:03:27:4e:45:89:73:2f:f2:57:6b:1e:
57:15:56:4d:7e:b2:c3:a5:33:11:56:46:6f:a9:a0:
d3:b5:6a:7d:6b:15:97:b7:a5:a1:e1:70:a6:2d:88:
a5:18:b4:2d:ab:47:df:99:e1:ef:92:78:13:65:b1:
87:eb:37:28:ba:41:a4:f7:a2:e4:de:bd:c2:b6:88:
a9:eb:9e:61:dd:bd:d9:8f:4d:cc:80:df:52:71:78:
5f:f6:bc:f0:65:a6:08:af:e1:29:b2:7c:7a:94:ab:
b4:d2:bd:92:06:85:df:61:cc:19:82:dc:ef:30:68:
b1:f3:78:80:51:8d:b0:58:2b:68:48:cc:0c:00:73:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:3E:CA:41:84:75:76:0E:43:27:70:8C:7B:97:19:02:57:D6:21
X509v3 Authority Key Identifier:
keyid:C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33332d3333203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7180::/33
Signature Algorithm: sha256WithRSAEncryption
0a:4d:09:67:8e:d3:35:d2:54:5e:4f:2b:cc:79:14:c8:12:20:
f1:5b:ad:10:51:7e:7d:19:72:a8:98:50:6e:c7:60:b7:a1:58:
17:01:7c:c2:63:4f:7f:79:2a:86:43:f3:ad:72:04:3f:cb:74:
8f:56:55:7c:89:c2:d2:01:0d:97:41:9d:19:57:d9:5c:ca:e6:
46:0c:4e:70:0c:9b:aa:b9:38:ee:ac:1b:82:72:1a:f9:46:0c:
1b:24:79:e7:d9:61:62:aa:f3:d0:22:1a:24:3f:94:bb:7b:46:
ff:60:d0:ae:c3:9a:84:e2:f2:b1:67:dc:b5:56:5e:15:6f:d5:
7b:ae:1c:7d:24:80:e1:a1:43:a7:46:01:0a:9d:2e:bf:53:52:
24:45:22:d8:a1:0e:bd:3d:fc:6d:3a:a1:2d:be:15:1d:4b:4e:
02:91:70:1e:fb:19:2c:ff:b1:5a:fd:25:c2:b6:ac:eb:99:35:
2d:20:0d:62:4b:7f:94:9e:d2:10:32:54:53:7b:7a:39:90:6c:
a9:e3:76:d2:c6:f4:17:8f:76:b7:3d:85:b3:35:c7:21:a8:c8:
ec:59:d3:fe:e2:15:54:4b:72:08:35:c6:26:1c:90:7b:0c:78:
64:bb:1a:72:69:ad:83:6b:7b:e2:34:b2:44:69:44:dd:1f:10:
57:4b:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:10:45 2025 by rpki-client