Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a343030303a3a2f33362d3336203d3e20323731323930.roa
File: 323830343a373933303a343030303a3a2f33362d3336203d3e20323731323930.roa (raw, json)
Hash identifier: oTrQmFBTPxPMnrPzG7m39oW84Ug5fMeQeBc5WA+29ZA=
Subject key identifier: 0F:59:69:3A:10:D1:8E:9B:FD:30:3A:A3:E1:9D:CB:DE:64:D9:CD:27
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 5A5455CFBFE3734594C61357482FE4A7913F7537
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a343030303a3a2f33362d3336203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:14 +0000
ROA not before: Thu 30 Jan 2025 21:01:14 +0000
ROA not after: Thu 29 Jan 2026 21:06:14 +0000
asID: 271290
IP address blocks: 2804:7930:4000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:54:55:cf:bf:e3:73:45:94:c6:13:57:48:2f:e4:a7:91:3f:75:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:14 2025 GMT
Not After : Jan 29 21:06:14 2026 GMT
Subject: CN=0F59693A10D18E9BFD303AA3E19DCBDE64D9CD27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:eb:ab:fb:c6:3b:04:77:07:2f:a8:56:16:
9d:00:47:6b:ce:02:83:75:8e:04:ce:ac:11:65:b5:
b7:0a:da:e6:21:b9:68:36:8e:c2:3d:86:15:00:8c:
3a:18:18:25:5a:68:2f:81:13:50:65:fd:0a:c1:40:
3e:f6:ce:62:1e:eb:be:ec:4f:33:d5:cf:af:de:ce:
f1:54:f0:ed:aa:3a:82:03:2b:20:6c:74:44:80:46:
48:93:23:6c:ca:77:d8:03:a3:81:c3:6e:9e:70:69:
85:0e:2a:31:1b:4a:6f:c0:db:14:49:a7:1c:36:0a:
2c:81:17:cf:bb:83:f2:d3:63:86:e8:17:5a:01:f2:
e2:da:ff:23:51:c8:46:3d:e1:2c:12:f6:13:f6:93:
df:1e:b8:7a:91:15:9e:56:bf:51:bc:ca:7b:2b:b5:
53:9d:d9:03:95:25:5c:2d:28:17:52:a0:6b:ed:35:
5b:d9:7a:58:eb:22:30:a3:bd:81:12:9b:3a:bc:43:
9d:78:99:2c:5b:05:f1:ef:19:6b:f6:cd:78:80:c1:
45:82:eb:5c:69:2b:9e:26:97:fc:42:46:3b:8a:17:
26:1e:ad:95:b2:c3:a6:d4:5c:72:17:74:33:53:f7:
ca:a2:d2:e4:85:fa:1c:10:57:7e:5b:95:24:e5:39:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:59:69:3A:10:D1:8E:9B:FD:30:3A:A3:E1:9D:CB:DE:64:D9:CD:27
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a343030303a3a2f33362d3336203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930:4000::/36
Signature Algorithm: sha256WithRSAEncryption
82:b3:09:85:52:33:82:7b:ae:ea:d9:0f:3d:42:8d:51:79:42:
65:e7:b9:86:17:8f:3b:bb:3d:d5:ee:84:be:89:90:aa:d6:82:
e4:2f:70:8e:e0:3b:12:28:06:5d:d1:21:da:c6:67:3b:fc:3d:
e1:ef:88:87:b8:cf:5f:6a:47:81:b8:62:a6:18:bf:3e:7a:63:
09:78:59:5e:d2:a1:77:bc:cd:0a:8b:0d:ce:ee:86:a2:7d:81:
5d:80:fd:2f:1c:b4:d2:98:9a:eb:44:88:99:2d:4f:fd:3b:a3:
83:69:74:d1:f0:66:50:30:b2:89:77:a5:97:a7:83:53:53:32:
4c:a2:1f:0d:3a:71:d1:73:59:09:81:d6:fa:b6:c9:c7:80:93:
f2:9d:58:c6:29:86:dc:f3:ee:8c:f7:da:cc:31:67:7a:82:75:
3c:7e:1f:fb:8a:4c:e1:7d:68:58:7b:e6:ae:c6:ae:8b:7d:4c:
58:a2:e5:1f:a5:99:c3:91:ae:c8:54:36:55:10:09:40:c1:76:
e2:f5:03:68:82:fa:34:6c:6f:ba:19:09:04:e4:56:37:b9:29:
89:c6:e6:9f:59:59:67:b6:b4:06:1b:c5:20:cd:89:f9:b9:7b:
bc:23:a3:ae:c8:ae:70:85:7c:20:92:ad:5f:3e:d7:e2:9f:bd:
c6:81:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:40 2025 by rpki-client