Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/323830343a366635343a3a2f33322d3334203d3e20323730363533.roa
File: 323830343a366635343a3a2f33322d3334203d3e20323730363533.roa (raw, json)
Hash identifier: xf4jTxMsQXdP95qYqDMbmLLAPkTTxISTwfWFlsj+IZo=
Subject key identifier: 04:E1:BC:33:53:F3:A2:80:50:F8:74:6C:18:CE:1B:1A:2D:C3:17:BA
Certificate issuer: /CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
Certificate serial: 6BDAFCF7A99246D64065DC0FE79D4FD40C838406
Authority key identifier: E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/323830343a366635343a3a2f33322d3334203d3e20323730363533.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 270653
IP address blocks: 2804:6f54::/32 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:da:fc:f7:a9:92:46:d6:40:65:dc:0f:e7:9d:4f:d4:0c:83:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=04E1BC3353F3A28050F8746C18CE1B1A2DC317BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:90:00:51:57:99:e1:07:ca:0d:5e:d3:8f:39:
be:17:a8:22:f6:b3:ec:f4:71:8f:53:ae:d2:76:c5:
7a:60:f6:ce:95:62:ad:d3:55:7c:88:8f:5f:aa:d3:
21:e1:d0:0d:2f:e3:5d:96:a5:3b:ee:83:1c:ee:b7:
f0:e0:1d:b1:9d:f6:bc:9e:5f:8e:72:94:dc:ff:fa:
63:b9:8b:6b:d6:7a:74:f0:c7:8f:33:78:de:a8:1b:
73:8b:65:ed:c9:d4:35:85:05:1c:2e:8a:53:b7:ae:
a6:84:03:b9:e0:8a:fd:18:c8:c5:13:25:fe:62:ca:
56:c4:3d:5a:d4:c9:77:c7:27:c7:b8:58:58:19:62:
34:98:52:f9:dd:55:45:36:e4:e2:9f:f4:38:04:f0:
9e:60:2f:bb:57:39:9f:13:2c:34:88:37:04:8f:3d:
0f:55:da:50:ba:37:fd:fa:74:35:0d:97:06:85:4b:
57:e4:b9:b6:43:7e:6d:e8:bf:8c:dd:94:cf:c4:43:
16:18:80:a5:83:de:66:14:70:16:89:1f:d0:02:c1:
36:d7:ba:8d:14:13:c7:56:20:4d:27:1d:d1:80:40:
46:44:09:4b:77:75:89:78:37:ac:03:44:61:98:50:
e4:a9:83:c0:5a:4e:ad:d1:de:8d:4e:aa:77:27:bd:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:BC:33:53:F3:A2:80:50:F8:74:6C:18:CE:1B:1A:2D:C3:17:BA
X509v3 Authority Key Identifier:
keyid:E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/323830343a366635343a3a2f33322d3334203d3e20323730363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6f54::/32
Signature Algorithm: sha256WithRSAEncryption
99:33:22:0f:d8:e9:7e:5a:42:9d:57:5c:bd:e8:13:9c:92:9b:
c0:9a:92:69:fa:ab:56:82:e8:ea:6a:67:36:05:c5:5c:50:0a:
83:d8:1d:11:10:2d:77:66:de:de:13:75:fa:84:32:ef:07:d6:
66:51:95:94:dd:9f:b2:59:d8:fe:67:18:88:5c:c4:da:27:bb:
c8:75:5f:d2:2a:39:da:8e:71:5d:4d:89:19:39:3f:26:24:f5:
c4:a2:45:85:91:f3:36:17:40:85:46:0e:dd:f3:c3:36:d4:62:
66:ba:16:11:76:23:f3:57:ec:4f:0b:68:17:aa:86:0c:d7:c4:
34:fa:ef:e5:7d:0c:72:13:a8:12:a0:04:59:df:a8:e7:82:7f:
22:70:f7:c3:e0:20:23:80:db:8a:46:10:d1:75:c2:d9:43:df:
1f:42:48:35:a9:59:18:76:3d:3c:79:04:8e:ec:d9:42:f4:86:
e7:9f:df:76:db:83:02:92:5b:dd:88:51:e6:5d:d6:9b:43:aa:
1b:3c:3d:5c:69:d8:6e:a5:44:ca:ce:75:30:46:3a:46:6b:ff:
6b:42:e9:c8:1c:77:49:25:98:48:4e:bd:05:e1:7f:19:a1:5e:
a1:01:78:65:18:73:6b:42:b7:d1:2d:55:8f:13:fa:28:03:cf:
15:da:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:31:32 2025 by rpki-client