Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a623030303a3a2f33362d3336203d3e20323731323930.roa
File: 323830343a373933303a623030303a3a2f33362d3336203d3e20323731323930.roa (raw, json)
Hash identifier: vrMf6b8sdCkYdYZlqKLF0XueLsYDZHLP6rvcXKMaIPM=
Subject key identifier: E2:07:8E:A5:7A:95:34:B9:97:2A:5D:77:06:89:0E:A4:F1:BF:9D:A5
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 49940624F8F0419549C4BA22A1B36867E10161C9
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a623030303a3a2f33362d3336203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:16 +0000
ROA not before: Thu 30 Jan 2025 21:01:16 +0000
ROA not after: Thu 29 Jan 2026 21:06:16 +0000
asID: 271290
IP address blocks: 2804:7930:b000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:94:06:24:f8:f0:41:95:49:c4:ba:22:a1:b3:68:67:e1:01:61:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:16 2025 GMT
Not After : Jan 29 21:06:16 2026 GMT
Subject: CN=E2078EA57A9534B9972A5D7706890EA4F1BF9DA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:9a:0f:c2:44:75:1f:09:cf:58:f0:df:09:
58:dd:ce:a3:e0:e4:35:e5:52:b3:e6:68:50:5b:45:
e5:dc:9e:64:62:ef:f2:a1:45:11:f7:00:d8:a2:9d:
10:ee:fb:c4:8a:c6:f1:1c:d9:6e:93:b8:45:7d:9c:
95:41:50:2e:d7:c1:d1:42:c3:95:7e:2a:ce:94:55:
9d:16:94:92:01:f6:09:b8:97:66:3b:86:aa:0d:64:
5a:09:ac:69:01:c7:35:cb:e5:a6:f0:b2:b0:0f:c0:
b4:ac:a6:68:65:c7:4b:9d:91:ea:65:1a:7b:7e:1d:
e5:ff:48:49:9d:68:f0:2f:74:96:04:93:77:0c:07:
55:eb:6b:8d:dd:9d:4a:f2:f4:a5:9e:75:fa:1f:ad:
4e:13:78:da:10:77:5f:19:75:c1:2f:6d:d7:62:81:
46:30:6b:9d:3b:70:93:d3:83:5f:f8:a1:9d:dc:60:
7f:f1:ab:cf:c4:0c:e8:a4:e6:71:3e:f2:2a:9a:63:
c3:01:46:02:a8:9f:cf:cf:21:2a:c3:be:7a:c1:bf:
84:c5:02:16:93:ac:99:90:d8:69:97:9a:97:61:e2:
18:36:5c:33:b6:64:91:57:91:63:b9:86:08:ea:63:
32:f8:01:a3:f9:36:14:bd:48:b4:34:d9:2e:71:4d:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:07:8E:A5:7A:95:34:B9:97:2A:5D:77:06:89:0E:A4:F1:BF:9D:A5
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a623030303a3a2f33362d3336203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930:b000::/36
Signature Algorithm: sha256WithRSAEncryption
8c:0e:9d:d1:58:90:84:f3:61:66:20:a8:09:51:fd:70:df:64:
79:89:bd:ab:07:8f:df:be:87:17:bd:ab:04:2a:db:e0:cb:7b:
50:de:0d:2a:17:c4:2b:60:ac:99:d0:f2:7b:ac:f0:66:98:21:
b7:94:b5:8a:4b:83:59:b2:6a:ad:30:b7:0f:71:44:2b:78:cf:
3c:63:66:d5:0c:3d:f3:de:a1:80:a0:c6:e3:0b:11:d5:9b:e2:
60:15:4c:48:4b:62:96:34:7e:23:75:17:83:ad:c9:c9:37:6b:
cf:91:04:83:97:99:f0:96:dd:fd:09:2f:30:aa:26:b3:4c:2a:
3f:df:e3:8c:11:cd:3e:04:40:62:a9:7f:19:bd:f0:a0:4b:71:
b3:08:02:e6:a0:43:2e:8b:93:b4:d9:cc:9f:da:33:85:32:21:
7b:cb:ba:19:be:5a:81:57:1b:c3:1a:89:df:f4:91:f8:f9:18:
9a:bb:51:a2:8a:2a:d0:6d:48:f0:5f:a5:4d:7d:2f:92:54:3b:
28:d7:b5:72:77:19:12:c1:a7:2d:d3:35:23:43:a2:15:a8:d3:
9b:0c:30:6b:cc:46:85:f7:8f:c0:31:87:36:36:62:87:d9:c0:
45:a9:e4:7c:88:e2:7a:7f:8a:89:98:98:7b:c7:bc:a4:18:50:
91:df:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:21:27 2025 by rpki-client