Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130313a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a3930633a3130313a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: Ee0Lc1TA1gR8xBu5RMH4lVAnGR3orqRcPeEax47KlcA=
Subject key identifier: F1:C6:83:98:05:18:24:AC:52:71:71:EF:43:55:DC:51:3C:28:0F:97
Certificate issuer: /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial: 06EE0ABF220C2DFC83F8F5FA8621BED13A92F95E
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130313a3a2f34382d3438203d3e20323632363137.roa
Signing time: Wed 05 Mar 2025 20:35:57 +0000
ROA not before: Wed 05 Mar 2025 20:30:57 +0000
ROA not after: Wed 04 Mar 2026 20:35:57 +0000
asID: 262617
IP address blocks: 2804:90c:101::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ee:0a:bf:22:0c:2d:fc:83:f8:f5:fa:86:21:be:d1:3a:92:f9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Validity
Not Before: Mar 5 20:30:57 2025 GMT
Not After : Mar 4 20:35:57 2026 GMT
Subject: CN=F1C68398051824AC527171EF4355DC513C280F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:9a:08:fc:bb:80:25:4a:87:3b:c2:4c:39:
8c:ed:90:05:74:74:cd:26:bd:17:cd:27:fe:d5:4c:
6c:2c:6c:cc:b8:5a:b0:32:91:c8:d7:0d:7e:14:a9:
54:0d:0b:93:7d:2d:a0:41:dc:32:b5:64:47:fd:04:
64:d4:31:65:e2:cf:a6:cb:18:ab:98:ee:1d:d5:b3:
e9:18:13:e1:1c:2d:81:37:bc:49:65:22:5e:6b:85:
e3:fe:5e:2f:4a:f0:d3:a5:79:58:28:26:f6:8a:7c:
6f:82:df:b1:9e:4a:b1:1c:2c:23:a6:a8:62:0e:53:
c5:8b:37:42:93:22:78:1a:e8:29:41:dc:a0:e5:0a:
42:ab:6a:32:91:ce:a0:41:5d:83:28:63:c3:65:0b:
e0:59:fc:f5:6c:fa:76:c3:fa:32:8e:b3:a2:4c:93:
18:e2:3e:2f:8a:bf:51:70:96:b4:1b:58:d6:bb:67:
3d:16:25:49:2c:ac:57:04:58:44:6e:98:74:e0:79:
d4:ee:5d:16:b3:32:d6:f9:3b:93:e5:26:1a:1b:b8:
77:18:0e:c6:b1:0f:f3:b8:64:ec:58:16:ca:df:fd:
f0:0f:8f:b7:8a:97:ab:1f:46:79:c7:2b:b2:61:36:
dc:4b:4d:8f:40:96:58:05:88:cc:e6:e1:bb:ed:d1:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C6:83:98:05:18:24:AC:52:71:71:EF:43:55:DC:51:3C:28:0F:97
X509v3 Authority Key Identifier:
keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130313a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90c:101::/48
Signature Algorithm: sha256WithRSAEncryption
16:82:72:38:11:c9:3b:14:84:b5:86:ae:ff:a8:ee:ef:25:82:
97:4c:41:69:eb:b5:df:73:2a:b4:de:8b:06:3b:6d:b9:10:20:
e7:a7:7b:32:a2:97:76:6e:0e:47:6a:9a:0f:fa:86:3a:96:9e:
d6:13:94:ca:2a:be:e8:25:96:a7:c6:3a:5e:0a:5b:ef:47:4f:
bd:44:9f:d1:7d:a0:6c:6d:6a:a2:d2:39:6a:f8:32:36:0e:3b:
56:50:54:03:68:ef:75:6b:53:28:6f:34:90:9a:2f:d2:47:3e:
dc:63:cd:ce:a5:53:ae:c8:5b:43:e7:0a:56:74:3c:8e:9e:07:
51:27:2b:d6:72:9f:07:ba:31:6e:b8:60:63:bb:a6:81:55:24:
ef:e6:a7:1f:18:fe:2e:b8:34:7d:4f:f3:f3:1a:07:93:43:1b:
c9:d5:fa:53:7c:5c:8e:11:ba:4a:e7:2b:c6:4e:87:67:a0:4b:
47:0c:4d:7f:05:73:a7:03:e9:3c:94:36:3c:11:79:f2:42:c8:
7d:83:51:03:73:3f:58:f6:0d:9f:42:96:78:e9:67:f8:0c:f6:
69:92:7b:37:d7:9f:80:d9:f7:8c:b1:98:70:ee:a8:e9:8d:39:
20:e7:cc:d8:be:69:15:b9:06:ba:19:7c:87:8b:62:b5:d3:12:
56:a7:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:54:51 2025 by rpki-client