Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: nt1x85yOmCtMEcSVl9yPzpPzi9raRbO8ATCO/BpdMUg=
Subject key identifier: 93:BA:70:50:31:63:27:93:C6:F3:7A:A0:F3:11:5C:3E:F9:42:F8:F0
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 768A24BF1E61D4B3FCA161136F7AC6FDF46ABD
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:44:57 +0000
ROA not before: Mon 24 Mar 2025 20:39:57 +0000
ROA not after: Mon 23 Mar 2026 20:44:57 +0000
asID: 267991
IP address blocks: 2804:5654:1000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8a:24:bf:1e:61:d4:b3:fc:a1:61:13:6f:7a:c6:fd:f4:6a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:39:57 2025 GMT
Not After : Mar 23 20:44:57 2026 GMT
Subject: CN=93BA705031632793C6F37AA0F3115C3EF942F8F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:3c:f5:75:7e:d5:b6:e2:9d:ea:ce:f8:8e:
2e:cb:61:02:4a:e7:5b:7a:51:e4:91:d1:29:d3:2f:
07:4a:ba:cf:07:6e:de:94:64:f7:2a:3c:66:25:9d:
36:79:5b:38:b5:95:30:27:76:aa:c5:8e:2d:2f:11:
32:15:91:2f:33:83:d0:46:23:bc:0c:d5:49:6a:5d:
44:14:cb:f9:8b:af:20:97:63:a9:f5:01:78:08:8f:
6f:c5:ae:7d:40:81:ad:01:4d:be:c0:c5:05:1a:e3:
85:34:1c:65:d1:18:4b:b2:95:49:84:0b:6d:ac:b3:
fd:b9:6d:60:d9:f2:74:bb:2a:4e:d9:e1:40:20:b5:
cd:4a:19:de:34:7e:ee:fd:93:43:a5:ad:aa:b4:b8:
59:2f:c1:44:29:6f:58:89:89:97:ca:eb:87:53:a1:
96:62:a5:38:01:f9:39:71:74:b1:39:23:54:0e:51:
e1:b4:33:1c:fd:54:7c:b9:0b:33:4c:81:2e:78:04:
e9:cc:11:d1:56:ed:10:d3:91:25:ee:a9:61:af:49:
91:6a:26:f1:e6:4c:13:07:df:3a:c4:db:d0:0f:f8:
1d:f8:f8:85:43:ce:bb:71:00:7e:9a:1e:7d:a8:f3:
3d:4f:aa:e0:cb:fb:b0:31:e6:e3:36:53:da:0f:ef:
0b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BA:70:50:31:63:27:93:C6:F3:7A:A0:F3:11:5C:3E:F9:42:F8:F0
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a313030303a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654:1000::/36
Signature Algorithm: sha256WithRSAEncryption
6d:d1:90:d3:15:4b:51:a7:23:21:97:85:ad:b8:a3:4c:10:f8:
b9:02:0a:8c:d7:ae:6c:4c:32:3f:ad:43:d1:79:0a:14:24:5b:
ee:63:e6:b6:ee:39:ad:63:28:d3:5f:ad:4b:15:ae:d6:dd:da:
5e:44:fd:ef:23:30:c5:12:84:5d:9b:1f:2d:3d:cc:24:dc:45:
6a:91:77:a9:12:04:c2:1f:7a:ff:e3:4c:60:fe:7b:29:19:05:
04:55:5c:00:0e:83:f9:82:2c:90:21:d7:45:87:95:55:29:3c:
90:3c:ca:7e:2a:6e:63:cd:db:f9:9d:b5:07:df:8c:b4:d2:5c:
7a:55:20:ec:8b:db:f7:53:a2:d5:62:b1:f7:04:4a:d3:1f:7e:
75:36:b7:d9:af:e4:dd:73:68:43:f1:f6:7c:be:50:37:94:98:
c3:d3:69:13:1b:dd:02:11:74:7a:ec:20:66:8f:57:66:f2:9e:
a4:6a:43:3c:79:dc:72:b3:60:08:79:7e:3d:5e:89:22:9a:16:
88:a4:16:67:42:56:74:7f:4c:72:70:48:c8:54:ba:b1:43:bc:
10:92:46:a6:3f:ea:59:66:fd:b7:78:e4:c9:f2:33:00:48:74:
38:2b:dd:4e:3c:0c:0b:5d:58:1a:27:dd:3f:83:1c:d0:9b:b0:
e7:a5:5d:0b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgITdookvx5h1LP8oWETb3rG/fRqvTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhDRjI0REMyQTE2RjZGREQ1QTFGMEI3QjM4QkY3Qzc3MDdB
RTNCQUFBMB4XDTI1MDMyNDIwMzk1N1oXDTI2MDMyMzIwNDQ1N1owMzExMC8GA1UE
AxMoOTNCQTcwNTAzMTYzMjc5M0M2RjM3QUEwRjMxMTVDM0VGOTQyRjhGMDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKi0PPV1ftW24p3qzviOLsthAkrn
W3pR5JHRKdMvB0q6zwdu3pRk9yo8ZiWdNnlbOLWVMCd2qsWOLS8RMhWRLzOD0EYj
vAzVSWpdRBTL+YuvIJdjqfUBeAiPb8WufUCBrQFNvsDFBRrjhTQcZdEYS7KVSYQL
bayz/bltYNnydLsqTtnhQCC1zUoZ3jR+7v2TQ6WtqrS4WS/BRClvWImJl8rrh1Oh
lmKlOAH5OXF0sTkjVA5R4bQzHP1UfLkLM0yBLngE6cwR0VbtENORJe6pYa9JkWom
8eZMEwffOsTb0A/4Hfj4hUPOu3EAfpoefajzPU+q4Mv7sDHm4zZT2g/vC1UCAwEA
AaOCAlswggJXMB0GA1UdDgQWBBSTunBQMWMnk8bzeqDzEVw++UL48DAfBgNVHSME
GDAWgBTPJNwqFvb91aHwt7OL98dweuO6qjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9EOFRVU2MyTFRwSGdMdGFCYW8xOVlUUVI3S0UzZmtINGFEWVRDMmkxMXky
Ti8wL0NGMjREQzJBMTZGNkZERDVBMUYwQjdCMzhCRjdDNzcwN0FFM0JBQUEuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQ0YyNERDMkExNkY2RkRENUEx
RjBCN0IzOEJGN0M3NzA3QUUzQkFBQS5jZXIwgbYGCCsGAQUFBwELBIGpMIGmMIGj
BggrBgEFBQcwC4aBlnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5Mk4vMC8z
MjM4MzAzNDNhMzUzNjM1MzQzYTMxMzAzMDMwM2EzYTJmMzMzNjJkMzMzNjIwM2Qz
ZTIwMzIzNjM3MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEG
CCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKARWVBAwDQYJKoZIhvcNAQELBQAD
ggEBAG3RkNMVS1GnIyGXha24o0wQ+LkCCozXrmxMMj+tQ9F5ChQkW+5j5rbuOa1j
KNNfrUsVrtbd2l5E/e8jMMUShF2bHy09zCTcRWqRd6kSBMIfev/jTGD+eykZBQRV
XAAOg/mCLJAh10WHlVUpPJA8yn4qbmPN2/mdtQffjLTSXHpVIOyL2/dTotVisfcE
StMffnU2t9mv5N1zaEPx9ny+UDeUmMPTaRMb3QIRdHrsIGaPV2bynqRqQzx53HKz
YAh5fj1eiSKaFoikFmdCVnR/THJwSMhUurFDvBCSRqY/6llm/bd45MnyMwBIdDgr
3U48DAtdWBon3T+DHNCbsOelXQs=
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:15:12 2025 by rpki-client