Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a323030303a3a2f33362d3336203d3e20323731323930.roa
File: 323830343a373933303a323030303a3a2f33362d3336203d3e20323731323930.roa (raw, json)
Hash identifier: COm/nGSCQdY5DdwYx9+8CI5du6OirB3Amvk0Iz2doBQ=
Subject key identifier: A5:47:72:16:7B:DD:4D:67:87:A6:71:54:05:20:6C:EF:45:A0:CF:86
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 19418E98DE5104FF4419AB16B4ABFDD60760B2E7
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a323030303a3a2f33362d3336203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:17 +0000
ROA not before: Thu 30 Jan 2025 21:01:17 +0000
ROA not after: Thu 29 Jan 2026 21:06:17 +0000
asID: 271290
IP address blocks: 2804:7930:2000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:41:8e:98:de:51:04:ff:44:19:ab:16:b4:ab:fd:d6:07:60:b2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:17 2025 GMT
Not After : Jan 29 21:06:17 2026 GMT
Subject: CN=A54772167BDD4D6787A6715405206CEF45A0CF86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:c6:1a:f2:ac:90:a6:fe:8d:01:97:f1:15:
3b:5d:67:ab:5b:80:da:c6:bf:49:a2:29:eb:60:b8:
1c:04:6f:20:d0:92:6e:58:f3:e6:f7:d7:e2:14:5c:
23:1d:39:8d:72:aa:63:0f:05:af:2a:40:95:7c:bf:
a3:ed:93:32:5c:55:ec:10:ca:d2:2b:79:3a:3f:f5:
2d:de:55:31:c9:2c:5d:ad:bf:5b:c8:1e:75:00:c9:
66:c9:7d:94:24:2d:6c:83:a6:73:c2:cc:40:1b:34:
68:1f:4e:53:59:c3:31:c1:de:be:e3:e3:73:3d:08:
f8:a4:48:8d:ee:b7:c3:4a:0f:3c:ff:38:c7:4d:35:
7b:47:1c:07:27:75:02:53:d8:b0:86:27:39:d6:70:
7f:7f:51:9a:81:6f:4f:86:cf:76:be:54:b9:c5:40:
52:ae:d4:db:7c:80:b5:0d:2a:84:00:f4:df:29:5f:
e9:72:df:fd:29:92:86:14:ea:11:b0:68:e0:f8:ba:
18:32:6d:e5:84:4d:cd:73:51:a4:94:10:16:ad:c4:
c4:8c:7e:c0:5e:f0:0e:db:32:03:e8:ab:33:46:4f:
7d:82:e2:cf:0a:b0:06:25:3d:10:be:21:4a:d1:1f:
61:f8:52:ab:0d:fa:7d:2a:5b:4f:f6:fa:f7:9e:76:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:72:16:7B:DD:4D:67:87:A6:71:54:05:20:6C:EF:45:A0:CF:86
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a323030303a3a2f33362d3336203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930:2000::/36
Signature Algorithm: sha256WithRSAEncryption
34:74:d6:0c:d9:28:45:ff:f7:40:b9:72:e1:99:a5:1d:27:4c:
4e:2a:c8:b6:14:f4:e6:88:49:dd:9b:38:9f:b2:26:5c:7c:e8:
3d:7c:fd:db:ac:53:96:56:ad:da:c1:30:01:01:3b:6b:b0:f5:
73:63:29:dd:4b:9f:f9:3e:83:b2:66:4a:b4:40:6f:21:bb:66:
52:c0:c5:06:0f:d1:a8:13:db:dd:bc:0c:ee:71:2f:3c:92:48:
2c:d1:75:46:45:74:c2:d1:20:4e:46:de:b9:4a:e1:9a:7c:ae:
2f:ca:eb:3a:d2:e2:cc:2a:81:7e:5e:29:79:23:f5:24:53:f8:
67:35:fd:b0:b5:cd:87:a5:98:8e:40:22:31:1e:26:d1:a2:0e:
72:c2:dd:15:f5:e4:0e:09:fb:27:b0:e0:02:ff:9d:bc:bf:1f:
cb:f7:6c:39:e8:9e:17:ae:4d:f4:c5:55:29:ab:10:05:e0:98:
81:8c:57:47:25:f4:51:c9:6b:c9:c7:c6:b9:81:00:ce:46:85:
9d:a3:24:15:ae:a3:8d:74:21:6c:6c:f8:bf:72:dc:57:e1:d0:
9e:37:f2:ef:bf:39:c3:2d:95:94:d9:4d:5a:4e:6b:3e:d1:0b:
c7:5e:5c:b6:d8:ff:9b:ca:39:43:dd:85:af:29:83:49:f5:4c:
a4:bc:ea:d9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGUGOmN5RBP9EGasWtKv91gdgsucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ4OEQyNEJGNDBBRTlFMTZBMEU0OTY4NDQ4RUMxRTFG
NUM4N0Y2MjAeFw0yNTAxMzAyMTAxMTdaFw0yNjAxMjkyMTA2MTdaMDMxMTAvBgNV
BAMTKEE1NDc3MjE2N0JERDRENjc4N0E2NzE1NDA1MjA2Q0VGNDVBMENGODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7MYa8qyQpv6NAZfxFTtdZ6tb
gNrGv0miKetguBwEbyDQkm5Y8+b31+IUXCMdOY1yqmMPBa8qQJV8v6PtkzJcVewQ
ytIreTo/9S3eVTHJLF2tv1vIHnUAyWbJfZQkLWyDpnPCzEAbNGgfTlNZwzHB3r7j
43M9CPikSI3ut8NKDzz/OMdNNXtHHAcndQJT2LCGJznWcH9/UZqBb0+Gz3a+VLnF
QFKu1Nt8gLUNKoQA9N8pX+ly3/0pkoYU6hGwaOD4uhgybeWETc1zUaSUEBatxMSM
fsBe8A7bMgPoqzNGT32C4s8KsAYlPRC+IUrRH2H4UqsN+n0qW0/2+veedlUXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpUdyFnvdTWeHpnFUBSBs70Wgz4YwHwYDVR0j
BBgwFoAULYjSS/QK6eFqDkloRI7B4fXIf2IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0I3UlpvYTlDRFYyc2dUeXQ3Y1E1elg1SE40RVBwcjVqakVxZmFDaU1k
VjcvMC8yRDg4RDI0QkY0MEFFOUUxNkEwRTQ5Njg0NDhFQzFFMUY1Qzg3RjYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEODhEMjRCRjQwQUU5RTE2
QTBFNDk2ODQ0OEVDMUUxRjVDODdGNjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCN1Jab2E5Q0RWMnNnVHl0N2NRNXpYNUhONEVQcHI1ampFcWZhQ2lNZFY3LzAv
MzIzODMwMzQzYTM3MzkzMzMwM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTMyMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEeTAgMA0GCSqGSIb3DQEBCwUA
A4IBAQA0dNYM2ShF//dAuXLhmaUdJ0xOKsi2FPTmiEndmzifsiZcfOg9fP3brFOW
Vq3awTABATtrsPVzYyndS5/5PoOyZkq0QG8hu2ZSwMUGD9GoE9vdvAzucS88kkgs
0XVGRXTC0SBORt65SuGafK4vyus60uLMKoF+Xil5I/UkU/hnNf2wtc2HpZiOQCIx
HibRog5ywt0V9eQOCfsnsOAC/528vx/L92w56J4Xrk30xVUpqxAF4JiBjFdHJfRR
yWvJx8a5gQDORoWdoyQVrqONdCFsbPi/ctxX4dCeN/LvvznDLZWU2U1aTms+0QvH
Xly22P+byjlD3YWvKYNJ9UykvOrZ
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:06:52 2025 by rpki-client