Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a363030303a3a2f33362d3336203d3e20323731323930.roa
File: 323830343a373933303a363030303a3a2f33362d3336203d3e20323731323930.roa (raw, json)
Hash identifier: Awxe3Tmrca4UNFJe2HYvZhsdF/cy7DAQwDkjG1ZRi/U=
Subject key identifier: 3D:0A:0D:48:70:91:DA:11:58:33:08:DB:D2:5D:34:65:E7:99:C1:BC
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 60889FDE68A23AE7D8FB1E824364688E1174EE30
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a363030303a3a2f33362d3336203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:17 +0000
ROA not before: Thu 30 Jan 2025 21:01:17 +0000
ROA not after: Thu 29 Jan 2026 21:06:17 +0000
asID: 271290
IP address blocks: 2804:7930:6000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:88:9f:de:68:a2:3a:e7:d8:fb:1e:82:43:64:68:8e:11:74:ee:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:17 2025 GMT
Not After : Jan 29 21:06:17 2026 GMT
Subject: CN=3D0A0D487091DA11583308DBD25D3465E799C1BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:ea:34:7a:71:f9:f5:4a:a2:12:59:44:e8:
8e:31:2e:8a:a2:4c:e6:25:19:49:fe:42:b0:83:60:
4e:c3:23:5f:39:95:c9:ab:73:4a:7c:1d:c0:d4:06:
a9:e2:11:ae:a8:0a:7c:34:aa:73:ef:a0:e8:ae:38:
56:af:7d:a9:4d:db:e5:86:88:2a:46:5c:7d:59:c3:
33:b4:f8:31:a6:40:c3:3b:00:8a:21:4b:ca:e3:53:
bb:91:54:85:73:4c:2b:9f:8c:2c:1d:3a:5a:d7:fd:
e0:9a:60:b6:f9:9e:89:f6:eb:66:a1:52:b4:07:51:
7b:c1:81:de:dd:5b:21:49:eb:70:e5:2b:03:12:6a:
65:f7:10:dd:f6:af:35:f2:c5:19:b2:ba:f8:01:37:
37:02:88:16:b4:0c:08:0b:69:b8:80:87:91:f3:52:
ae:b1:89:2b:5a:22:0b:0f:3c:df:db:8a:08:42:fa:
77:86:ad:24:f5:66:56:7b:de:e9:dc:ac:7b:cb:4a:
1d:57:ed:da:00:7f:61:ba:95:db:7e:39:3a:b1:3b:
1c:ab:82:29:e4:ae:1e:c0:fe:2a:6e:b6:0c:de:e5:
6c:4c:8e:cd:81:35:64:90:30:db:c9:38:4c:55:d7:
41:c1:31:80:d7:ed:0e:7c:7b:7d:e0:fe:c8:64:f3:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0A:0D:48:70:91:DA:11:58:33:08:DB:D2:5D:34:65:E7:99:C1:BC
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a363030303a3a2f33362d3336203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930:6000::/36
Signature Algorithm: sha256WithRSAEncryption
a2:a1:63:db:07:6a:6d:d1:2f:e5:13:09:40:4b:83:95:6b:38:
b2:30:0e:aa:4a:67:52:ba:e6:78:a0:d3:8c:20:1c:ab:44:96:
47:0d:fa:f5:09:3c:a3:14:31:30:de:1b:4b:80:90:26:98:db:
cf:4e:04:05:7e:89:cc:a0:36:9f:d4:d8:ae:d5:ea:1a:4a:7f:
f3:74:9a:8d:f2:c9:2a:4b:cb:32:60:fe:c3:de:08:58:0b:4b:
96:6c:c7:e7:f5:56:49:b5:27:1d:14:44:f5:42:74:48:6e:31:
17:f7:01:75:28:85:8e:e0:60:ce:17:41:33:f8:c6:a8:86:16:
0e:bd:a2:53:9c:f7:79:e4:de:60:e2:52:73:4c:cf:f9:cf:90:
a7:34:af:7b:05:87:88:8a:5b:85:e0:03:38:65:76:07:d1:ca:
30:70:bb:7e:86:3f:89:fc:2f:7c:24:63:f0:fc:38:13:7c:1f:
75:e4:3e:26:ba:8c:e5:f3:4e:ea:d6:fd:e5:1d:5d:68:f9:c9:
6f:5a:93:56:6f:13:c1:e2:b6:11:b5:40:8e:ce:19:2e:59:3b:
bd:89:23:05:07:e4:64:4c:b3:06:1f:7f:82:d6:0b:6b:3b:ea:
f3:85:8f:64:b1:58:fb:5a:a6:cd:01:0f:fb:cc:f5:5b:05:13:
34:0b:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:32:46 2025 by rpki-client