Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a353030303a3a2f33362d3336203d3e20323731323930.roa
File: 323830343a373933303a353030303a3a2f33362d3336203d3e20323731323930.roa (raw, json)
Hash identifier: 2Ucb8JHFX/mRbt6hvuWJ/SlNTNXdEzdiidbkksBhr/o=
Subject key identifier: 3B:1A:D8:5B:B0:7E:59:84:CF:C0:38:06:4E:CF:05:8F:8D:17:72:21
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 19535020AE32AC41DCFC1EB00C30402329793F56
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a353030303a3a2f33362d3336203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:20 +0000
ROA not before: Thu 30 Jan 2025 21:01:20 +0000
ROA not after: Thu 29 Jan 2026 21:06:20 +0000
asID: 271290
IP address blocks: 2804:7930:5000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:53:50:20:ae:32:ac:41:dc:fc:1e:b0:0c:30:40:23:29:79:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:20 2025 GMT
Not After : Jan 29 21:06:20 2026 GMT
Subject: CN=3B1AD85BB07E5984CFC038064ECF058F8D177221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:65:37:37:c1:07:fa:0d:ae:e2:69:21:3e:
1b:ef:83:42:89:de:6d:b4:d4:03:8f:ee:12:ae:dc:
3c:fe:70:b2:e4:fa:97:d4:fb:1f:ee:83:31:34:42:
1d:6e:31:86:17:13:12:2a:66:17:8e:0b:7d:d4:ed:
2a:80:a5:65:d4:7c:5d:25:75:7e:33:58:eb:25:fe:
1c:b7:92:63:c1:7b:d3:6e:f9:ca:68:89:3a:07:23:
60:84:9f:10:0d:f5:40:ad:ef:9b:fc:26:6a:1d:12:
f4:d9:5f:78:cc:c5:a4:f1:d8:10:62:30:e9:4d:ea:
c8:6d:54:b0:1c:18:35:89:66:9a:01:dc:f2:a4:ad:
50:56:74:41:ed:ab:b6:61:31:18:34:bc:e6:97:4c:
69:fa:9a:fc:7a:a3:cf:24:57:98:e6:0a:4d:c9:3e:
3a:41:1b:44:23:ec:b1:be:1a:4a:5e:99:ff:0e:58:
df:00:86:9e:40:68:91:59:fc:53:e4:1d:bc:fb:31:
3b:07:1f:03:3e:3f:37:d3:c9:84:28:39:16:dc:f9:
b8:b8:12:5e:b7:ff:74:cd:cc:52:57:18:45:d1:af:
f6:a7:9c:04:c2:96:6e:e0:25:8f:78:9b:12:98:33:
82:3a:fa:88:a9:46:9b:1d:ff:2a:47:85:99:a7:b9:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1A:D8:5B:B0:7E:59:84:CF:C0:38:06:4E:CF:05:8F:8D:17:72:21
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a353030303a3a2f33362d3336203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930:5000::/36
Signature Algorithm: sha256WithRSAEncryption
62:ac:85:8b:12:c2:57:79:b2:e1:08:51:1a:ea:f8:e0:a9:20:
eb:18:bb:31:e0:b6:45:66:25:5d:27:3e:d8:d3:4a:fa:57:36:
e8:96:a2:95:7e:d7:21:82:29:fc:88:0e:97:57:45:ef:2d:f0:
c2:e8:92:ec:37:d4:67:3f:8e:0e:4e:59:a2:e1:42:f4:4a:75:
bd:da:22:5a:0a:2c:eb:45:0b:0c:c8:d5:f9:bb:33:51:62:32:
2c:fb:0b:4d:e3:e8:37:d8:b2:c6:5f:bc:f2:5d:cc:d3:a4:35:
45:1f:e8:fa:db:17:8a:68:25:ed:25:b3:ef:e5:94:86:8d:28:
c9:5e:71:5c:d1:d8:83:f4:80:ac:67:dc:ec:c8:eb:a5:00:50:
dc:28:f4:d0:67:5c:fe:52:c7:a5:84:29:73:0e:ab:45:3f:bf:
f0:55:e0:4a:13:f1:da:da:f7:16:4e:2a:88:51:1f:93:25:97:
a2:b0:31:47:ec:56:c1:09:01:aa:af:81:a5:10:66:c8:a2:df:
7c:ec:65:8c:dc:d6:35:10:44:7b:2c:52:ac:ff:bc:e7:3c:e0:
a3:7e:09:00:f6:7c:5d:7e:14:2f:ae:89:f3:a9:e5:59:dc:d0:
30:b6:da:2a:c5:c3:8c:d6:4e:8b:79:65:b2:8c:c4:ab:00:64:
f5:d8:9e:8d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGVNQIK4yrEHc/B6wDDBAIyl5P1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ4OEQyNEJGNDBBRTlFMTZBMEU0OTY4NDQ4RUMxRTFG
NUM4N0Y2MjAeFw0yNTAxMzAyMTAxMjBaFw0yNjAxMjkyMTA2MjBaMDMxMTAvBgNV
BAMTKDNCMUFEODVCQjA3RTU5ODRDRkMwMzgwNjRFQ0YwNThGOEQxNzcyMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWWU3N8EH+g2u4mkhPhvvg0KJ
3m201AOP7hKu3Dz+cLLk+pfU+x/ugzE0Qh1uMYYXExIqZheOC33U7SqApWXUfF0l
dX4zWOsl/hy3kmPBe9Nu+cpoiToHI2CEnxAN9UCt75v8JmodEvTZX3jMxaTx2BBi
MOlN6shtVLAcGDWJZpoB3PKkrVBWdEHtq7ZhMRg0vOaXTGn6mvx6o88kV5jmCk3J
PjpBG0Qj7LG+Gkpemf8OWN8Ahp5AaJFZ/FPkHbz7MTsHHwM+PzfTyYQoORbc+bi4
El63/3TNzFJXGEXRr/annATClm7gJY94mxKYM4I6+oipRpsd/ypHhZmnuZkVAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOxrYW7B+WYTPwDgGTs8Fj40XciEwHwYDVR0j
BBgwFoAULYjSS/QK6eFqDkloRI7B4fXIf2IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0I3UlpvYTlDRFYyc2dUeXQ3Y1E1elg1SE40RVBwcjVqakVxZmFDaU1k
VjcvMC8yRDg4RDI0QkY0MEFFOUUxNkEwRTQ5Njg0NDhFQzFFMUY1Qzg3RjYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEODhEMjRCRjQwQUU5RTE2
QTBFNDk2ODQ0OEVDMUUxRjVDODdGNjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCN1Jab2E5Q0RWMnNnVHl0N2NRNXpYNUhONEVQcHI1ampFcWZhQ2lNZFY3LzAv
MzIzODMwMzQzYTM3MzkzMzMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTMyMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEeTBQMA0GCSqGSIb3DQEBCwUA
A4IBAQBirIWLEsJXebLhCFEa6vjgqSDrGLsx4LZFZiVdJz7Y00r6VzbolqKVftch
gin8iA6XV0XvLfDC6JLsN9RnP44OTlmi4UL0SnW92iJaCizrRQsMyNX5uzNRYjIs
+wtN4+g32LLGX7zyXczTpDVFH+j62xeKaCXtJbPv5ZSGjSjJXnFc0diD9ICsZ9zs
yOulAFDcKPTQZ1z+UselhClzDqtFP7/wVeBKE/Ha2vcWTiqIUR+TJZeisDFH7FbB
CQGqr4GlEGbIot987GWM3NY1EER7LFKs/7znPOCjfgkA9nxdfhQvronzqeVZ3NAw
ttoqxcOM1k6LeWWyjMSrAGT12J6N
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:05:16 2025 by rpki-client