Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: HpPWxcWP3aRrCa2m9H3NHqWmkk/O4hmDGhntffNRSzk=
Subject key identifier: D7:EC:B4:A1:30:FF:72:05:A7:A8:06:B6:A5:3F:4D:3D:81:F0:19:62
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 531E4F4EF986049400EA06C91A40CF8BD21321C6
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:45:07 +0000
ROA not before: Mon 24 Mar 2025 20:40:07 +0000
ROA not after: Mon 23 Mar 2026 20:45:07 +0000
asID: 267991
IP address blocks: 2804:5654:7000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1e:4f:4e:f9:86:04:94:00:ea:06:c9:1a:40:cf:8b:d2:13:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:40:07 2025 GMT
Not After : Mar 23 20:45:07 2026 GMT
Subject: CN=D7ECB4A130FF7205A7A806B6A53F4D3D81F01962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:a0:04:12:a1:6d:fa:b5:fa:91:a6:32:f0:
7c:7b:ad:88:81:5d:21:3a:5b:84:ee:d1:a6:b0:5a:
45:b6:48:c4:73:98:19:5a:45:06:eb:75:ed:1d:de:
de:c1:13:48:dc:24:8c:ce:bb:f8:e3:4d:36:ce:1c:
82:1b:bd:57:7d:ec:1d:ad:f3:c2:3a:92:71:a0:98:
59:3a:41:9a:a2:26:54:0f:3e:cf:02:f4:e7:b1:d0:
74:5f:bf:bd:c5:b2:48:89:4f:95:76:85:bb:9e:cd:
80:2d:8c:a8:d0:6c:0c:59:42:51:e0:9c:78:9a:36:
4b:ba:20:93:40:ec:31:2c:14:3d:d3:3f:6e:1e:84:
18:fe:28:de:2e:55:09:9d:e8:de:f4:e6:6a:c8:2b:
50:80:f8:8c:fe:ce:27:14:55:0b:c3:38:a3:a6:f0:
5a:f7:d6:00:0d:6c:57:40:52:2b:64:04:1e:ce:3b:
7f:f4:13:3a:17:e2:1f:24:97:b1:5d:cc:2c:9e:8d:
9a:13:da:60:53:ab:72:bd:5f:7e:24:26:f9:41:ac:
a1:51:90:ff:c2:bf:63:49:89:36:24:ba:a1:e1:3b:
13:63:96:12:a6:a1:08:a5:d7:06:ec:0d:5f:db:3a:
e7:fd:97:76:35:e9:11:59:1f:a2:5f:89:08:45:c0:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:B4:A1:30:FF:72:05:A7:A8:06:B6:A5:3F:4D:3D:81:F0:19:62
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654:7000::/36
Signature Algorithm: sha256WithRSAEncryption
21:ca:0f:49:7e:45:08:11:ca:7a:cc:34:98:eb:a6:9a:7f:b0:
01:54:48:ca:b7:c7:1a:42:73:7a:26:18:33:84:97:bb:cf:b3:
f7:11:18:fc:35:fc:bd:4b:be:2c:ef:cb:33:f0:fc:f8:4e:85:
b5:8e:43:1e:77:3b:cc:eb:b6:c8:c2:d1:ee:1a:cb:fb:5c:2a:
ce:8b:01:71:c4:fd:b0:c9:50:2f:b1:c0:93:6f:0a:31:5d:50:
e3:5d:3f:69:3b:5f:49:8e:5f:28:45:44:fb:9f:8a:e9:f8:0d:
70:9d:2e:15:1d:32:9d:ce:8f:92:f5:d9:34:fd:4e:68:6d:ef:
f7:1c:dc:2a:ef:e3:ae:66:b4:64:dc:86:87:bf:b7:8a:4c:69:
9b:ae:8c:b3:38:f6:e3:7f:3d:dc:56:2e:63:cb:d5:97:1a:b7:
98:35:a9:25:9d:a6:4a:48:02:e9:5f:d3:b9:74:0e:23:e7:d7:
84:7a:1b:bc:44:c6:0e:64:c8:9f:5e:cb:41:4b:d1:d2:c8:2e:
02:40:d8:ac:a2:6c:38:7e:d5:ff:a3:89:18:ca:2d:1b:59:64:
81:1b:ca:2f:6f:a2:81:ed:67:5d:8a:05:3c:b4:39:cc:a7:c1:
6d:63:b1:d9:fe:c8:47:01:4b:81:03:bd:3b:67:23:e4:2e:67:
6b:96:fd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:33:00 2025 by rpki-client