![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa
File: 323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier: LvfEo2pkkxMFylt9CDY0HgrUudW8IhRhbj18R61lAkY=
Subject key identifier: 10:88:58:B1:A7:E0:31:AA:D0:64:A0:3E:BE:66:96:FB:19:C7:25:59
Certificate issuer: /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial: 2B4D3DFDE7BFE79C66435659F545DFAE2D56BFDC
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa
Signing time: Tue 24 Sep 2024 19:47:20 +0000
ROA not before: Tue 24 Sep 2024 19:42:20 +0000
ROA not after: Tue 23 Sep 2025 19:47:20 +0000
asID: 264485
IP address blocks: 2804:2050:2abc::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4d:3d:fd:e7:bf:e7:9c:66:43:56:59:f5:45:df:ae:2d:56:bf:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Validity
Not Before: Sep 24 19:42:20 2024 GMT
Not After : Sep 23 19:47:20 2025 GMT
Subject: CN=108858B1A7E031AAD064A03EBE6696FB19C72559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:77:4e:5e:80:d7:bb:bc:4b:b6:3f:df:dd:
7c:17:69:be:dc:dc:b0:05:4c:f0:c1:4b:36:e2:82:
94:52:d1:44:1b:d8:df:29:78:ed:f9:c4:31:60:e2:
bf:36:3d:be:ad:ff:0b:34:50:0d:ef:ec:5e:a9:22:
e4:6a:0a:3f:40:d1:07:16:eb:69:e7:55:0a:62:0b:
34:f0:db:87:52:7c:dc:24:25:74:27:01:25:76:96:
79:9e:22:70:6b:9f:4b:15:8e:b3:49:03:c4:9f:f2:
cf:90:09:d9:c2:c9:4a:e5:62:57:9e:28:b6:56:e9:
81:a0:2d:bb:f5:fe:3c:26:85:79:7a:03:3d:39:86:
45:52:f5:25:77:9b:87:b2:b9:eb:da:44:f1:d5:f7:
68:1e:26:3d:0c:15:7d:0d:e7:54:22:f9:25:42:8d:
60:30:77:49:94:8a:f0:c4:e4:76:d8:27:74:2f:b1:
96:f0:fe:5e:99:fa:f0:1a:9f:de:34:00:b8:f8:38:
c3:43:a7:26:06:ae:f6:64:5c:b1:ed:af:49:c2:d2:
2d:19:02:58:91:f9:b1:55:75:5e:8c:e6:21:b2:f4:
cf:8b:f9:87:7e:92:e2:33:9c:05:b6:06:7d:30:08:
32:fe:78:02:c8:ab:d1:db:38:64:44:4b:82:d7:b1:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:58:B1:A7:E0:31:AA:D0:64:A0:3E:BE:66:96:FB:19:C7:25:59
X509v3 Authority Key Identifier:
keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2050:2abc::/48
Signature Algorithm: sha256WithRSAEncryption
30:b7:a0:02:c1:91:4b:86:09:e2:51:47:00:fe:12:9c:d9:44:
32:dc:69:2d:17:aa:5d:7d:fc:eb:57:8b:82:35:4f:4d:78:ea:
51:a2:21:f3:4a:84:4b:2d:6a:8d:63:b1:16:71:a3:c6:d7:17:
17:17:a3:4d:06:23:1c:c9:49:ff:59:1c:91:2b:0f:d4:b8:23:
7c:1c:e3:b7:2d:73:55:3b:a0:f9:2d:68:93:19:18:38:c0:a6:
3b:c9:c7:84:20:24:98:e7:e6:4d:a8:dd:11:da:98:a1:bd:d9:
7c:e5:7c:7b:d3:a9:5f:aa:f6:99:3b:65:51:61:33:0a:41:e7:
52:85:47:6f:25:b7:0e:79:9f:a9:68:03:43:dc:a1:4f:c2:25:
3c:f9:79:c9:0d:e4:ca:96:6d:09:d7:e6:12:f7:80:bb:8c:0a:
f2:f6:43:d3:3f:7f:56:47:20:05:fc:6b:6f:0f:44:15:a1:40:
3c:03:a2:d0:da:eb:84:84:36:5d:96:9b:23:6c:77:e9:74:13:
b0:d2:f5:74:86:a0:8a:fd:75:4e:65:ca:fb:68:79:e1:11:ae:
86:1f:39:a2:36:02:e7:ba:02:89:a2:57:0a:13:05:c9:f9:91:
34:e4:59:1a:fa:c3:7d:16:42:4e:60:23:62:5e:df:a5:c4:bf:
cb:75:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:09 2025 by rpki-client