Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a383030303a3a2f33362d3336203d3e20323731323930.roa
File: 323830343a373933303a383030303a3a2f33362d3336203d3e20323731323930.roa (raw, json)
Hash identifier: JxK8QT5ABR8U8Bcl2ySSBPSmRp+fekkcOfFOZsCFXS8=
Subject key identifier: E4:5E:D7:31:7F:2E:69:AB:64:2E:10:AB:76:C8:4C:21:5B:75:29:C6
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 6F3B375659455DC0249844FF6ED51271DDBB11A3
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a383030303a3a2f33362d3336203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:18 +0000
ROA not before: Thu 30 Jan 2025 21:01:18 +0000
ROA not after: Thu 29 Jan 2026 21:06:18 +0000
asID: 271290
IP address blocks: 2804:7930:8000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3b:37:56:59:45:5d:c0:24:98:44:ff:6e:d5:12:71:dd:bb:11:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:18 2025 GMT
Not After : Jan 29 21:06:18 2026 GMT
Subject: CN=E45ED7317F2E69AB642E10AB76C84C215B7529C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:f7:ad:82:87:b6:27:87:47:5b:67:9f:8d:
68:66:d6:42:7c:50:3d:ef:70:89:ca:06:5f:fe:68:
c8:fc:56:51:af:73:35:df:0a:a0:30:3c:98:5c:19:
87:79:86:e1:71:6d:7f:a7:e5:ec:eb:b0:ac:59:d5:
10:1e:21:9f:f4:e7:c3:aa:de:c9:d7:34:1b:e4:26:
63:b3:74:e2:55:ca:4f:25:e5:c2:39:ad:86:00:da:
b8:c4:24:f3:90:b9:b6:e2:90:74:c8:1b:16:c9:79:
80:ea:81:1c:54:c0:9f:8c:21:76:a6:6d:b3:e4:8d:
ca:84:7d:c5:c3:a8:84:fc:16:74:cc:12:58:1d:f9:
1f:5d:70:cc:f1:3b:dd:c4:45:f1:77:6d:5a:4d:09:
83:7c:5c:93:a3:e3:07:f0:0c:ce:72:f5:e5:6f:fa:
84:6b:81:1b:1d:9a:1e:c6:65:39:8a:d8:39:5f:c8:
aa:9d:4d:2e:89:66:b3:6f:3f:bb:54:a1:e9:09:ae:
7c:79:de:8a:6c:d0:0b:80:0b:67:2f:75:fc:ab:da:
23:0f:17:36:45:86:3a:3c:5b:c3:44:04:e1:49:04:
9c:79:b0:98:04:7c:38:aa:ee:4c:11:5c:a8:20:45:
ee:e9:26:72:c2:33:99:c2:ea:74:32:da:93:c4:67:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5E:D7:31:7F:2E:69:AB:64:2E:10:AB:76:C8:4C:21:5B:75:29:C6
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a383030303a3a2f33362d3336203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930:8000::/36
Signature Algorithm: sha256WithRSAEncryption
43:dc:3f:ac:89:49:4c:41:4c:1b:e3:c0:f5:ca:bb:9c:95:2e:
8e:90:0f:2a:33:22:47:33:ed:02:5a:49:3f:5e:75:71:35:5b:
8d:c3:76:9f:d3:e9:47:bb:dd:1e:b2:cb:8f:e7:82:5a:a0:d2:
01:d1:d0:b7:5c:dc:f6:b9:f4:dd:ee:6e:4a:66:c6:04:a2:23:
30:96:5f:84:8a:25:1b:64:f4:6b:3f:d5:d4:4f:26:01:fe:c7:
86:ec:fc:08:09:c7:0d:a7:3c:08:66:b0:9e:c1:eb:05:eb:95:
14:c2:9d:e0:2d:c9:bb:7f:bc:18:96:fc:e2:00:cf:f3:f9:9d:
57:be:c7:20:62:11:58:b7:f8:29:e6:89:88:54:f4:7d:a6:3e:
16:6f:98:f3:60:16:aa:ed:a6:60:2b:e9:7e:d5:6c:72:d8:32:
88:aa:22:1e:51:d7:3b:1c:38:d2:a9:bc:c6:37:f3:94:7b:f0:
c7:0f:92:01:a5:c9:ef:5d:87:31:6a:e2:35:bb:91:f5:b2:64:
c3:da:fa:62:6a:9b:99:9a:94:8d:6c:90:a4:35:93:95:84:14:
ad:eb:59:eb:b8:de:ee:57:5c:0b:bc:46:71:bf:ad:f9:56:88:
22:10:65:94:de:ed:29:7c:4f:9a:89:ad:09:2d:2f:ca:a8:68:
6b:25:b0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:09:47 2025 by rpki-client