Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33342d3334203d3e20323730373933.roa
File: 323830343a373138303a3a2f33342d3334203d3e20323730373933.roa (raw, json)
Hash identifier: 6/zPw3J8SWAJUM9OedomcrVvVijx2yQyVPJCDpyZnHM=
Subject key identifier: A7:40:8C:CB:8C:10:13:64:FE:E3:6A:DA:AD:E8:AB:CA:E8:48:95:A9
Certificate issuer: /CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Certificate serial: 44DF2D21BD6A0506B8941A414B1F26588304EC2F
Authority key identifier: C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33342d3334203d3e20323730373933.roa
Signing time: Mon 07 Apr 2025 20:01:46 +0000
ROA not before: Mon 07 Apr 2025 19:56:46 +0000
ROA not after: Mon 06 Apr 2026 20:01:46 +0000
asID: 270793
IP address blocks: 2804:7180::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:df:2d:21:bd:6a:05:06:b8:94:1a:41:4b:1f:26:58:83:04:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8A922FEFF2441B1F9212FFA81223123A32DBE79
Validity
Not Before: Apr 7 19:56:46 2025 GMT
Not After : Apr 6 20:01:46 2026 GMT
Subject: CN=A7408CCB8C101364FEE36ADAADE8ABCAE84895A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:62:a8:ff:21:46:a0:e4:bc:86:a9:ec:33:
c9:47:62:a1:e6:f7:b9:b4:b5:46:24:39:8c:47:2a:
3d:62:6e:a5:c6:47:76:41:b9:71:b1:95:07:eb:d1:
e5:80:7d:af:93:09:b7:19:49:fe:fd:84:e7:44:d9:
f5:98:f9:a7:a8:48:2b:86:c9:d9:ad:52:4d:ef:d1:
c3:84:1b:38:6d:b3:01:95:d5:e7:30:5d:59:a0:48:
bf:99:c5:9a:2f:09:a3:f3:53:c6:51:c2:20:20:f4:
8d:54:5d:99:f1:36:1a:12:8b:4d:27:35:45:fd:e7:
6e:a3:05:06:93:eb:99:44:2f:07:7c:89:66:6b:cc:
d5:cf:38:11:05:82:6b:0f:1e:80:41:34:14:cd:6b:
91:8c:ba:ba:81:32:b2:00:d0:18:a0:fd:7e:ca:a1:
a3:7f:80:f8:2d:c9:f8:53:07:3e:23:d4:b5:91:4d:
7a:51:0a:8d:7d:5b:9b:51:81:63:fb:00:fd:13:f5:
ef:be:ca:ce:cc:ed:79:ca:39:16:ef:ca:4e:20:16:
6e:61:62:93:41:70:f6:89:1f:c1:3b:37:98:44:9a:
a9:c6:8d:60:2d:3e:bd:77:a6:cb:86:7b:cf:b7:69:
89:08:b5:49:ba:09:a9:e4:a0:81:86:50:1a:cb:ed:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:40:8C:CB:8C:10:13:64:FE:E3:6A:DA:AD:E8:AB:CA:E8:48:95:A9
X509v3 Authority Key Identifier:
keyid:C8:A9:22:FE:FF:24:41:B1:F9:21:2F:FA:81:22:31:23:A3:2D:BE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/C8A922FEFF2441B1F9212FFA81223123A32DBE79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8A922FEFF2441B1F9212FFA81223123A32DBE79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33342d3334203d3e20323730373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7180::/34
Signature Algorithm: sha256WithRSAEncryption
bb:d0:91:64:7d:9a:64:7c:84:9a:a3:4e:61:90:41:a4:73:ae:
2d:dd:00:af:87:ef:b0:27:c6:f5:d3:8b:c4:b8:6c:c1:ad:46:
9e:02:18:6c:a5:5b:ee:47:e8:93:20:14:43:9d:a8:bd:55:22:
31:63:bb:66:0b:3d:cb:9d:cb:99:cb:fb:7e:66:29:96:0a:25:
3a:58:32:37:da:13:6b:1d:d1:a3:4c:de:9a:64:f2:13:f6:f4:
d6:61:27:97:fa:1a:0c:d8:f6:cb:15:4c:91:bf:a1:f1:9a:80:
06:9f:fe:88:a2:79:ae:49:48:14:ed:56:87:59:02:d4:86:d4:
fb:ad:8b:76:08:0a:f2:03:65:09:70:cb:2d:1d:8a:31:ef:7f:
13:27:42:fa:fa:8b:e1:4f:04:fe:5a:4e:77:80:1f:0c:ac:63:
e5:13:76:c7:26:fd:5d:26:f8:16:d9:cc:32:af:d6:92:76:88:
84:fa:8b:94:da:6d:8f:7c:1c:7c:5b:91:23:ff:51:00:a6:83:
4f:05:c2:ca:69:ae:a4:74:ff:40:0f:33:94:f1:6d:18:65:1e:
8d:b9:da:a9:99:c3:17:38:66:03:93:58:fa:85:70:05:0f:53:
e2:6b:ef:8d:71:b1:31:e6:e6:99:d0:83:62:43:40:a9:00:27:
de:a7:49:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:51 2025 by rpki-client