Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
File: 323830343a393261383a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier: sfZBvRnD3brcz4EdPF6GMh+yPqodQjApXmrmzsLpdiU=
Subject key identifier: 25:07:4F:05:6F:CA:3D:00:F7:85:5B:CE:F6:46:5B:DB:50:C5:7B:D1
Certificate issuer: /CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
Certificate serial: 43F13A3C5C4615E0754F3338FC5259264F742161
Authority key identifier: BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
Signing time: Fri 23 May 2025 21:55:09 +0000
ROA not before: Fri 23 May 2025 21:50:09 +0000
ROA not after: Fri 22 May 2026 21:55:09 +0000
asID: 274726
IP address blocks: 2804:92a8::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f1:3a:3c:5c:46:15:e0:75:4f:33:38:fc:52:59:26:4f:74:21:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
Validity
Not Before: May 23 21:50:09 2025 GMT
Not After : May 22 21:55:09 2026 GMT
Subject: CN=25074F056FCA3D00F7855BCEF6465BDB50C57BD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:e9:3e:62:7c:4f:85:49:95:96:e3:d3:b3:
8f:c1:fe:80:e4:94:b3:d1:d0:f0:01:9f:d5:1a:30:
1f:20:7d:d9:07:9f:1a:3b:f7:70:03:3b:08:d9:c0:
97:a0:3d:94:d9:d0:3d:a5:bb:16:a2:0d:b9:0e:fe:
92:b4:cd:ae:d8:9e:e5:f1:ef:91:d2:b2:de:5f:6c:
78:a4:20:25:89:87:ba:af:33:95:86:8a:43:ef:17:
de:d5:e4:0a:a7:02:91:5f:bc:a6:44:c5:ef:a1:93:
c4:e5:48:b4:8f:26:cf:07:b4:d0:cf:f9:46:bb:b3:
86:fc:58:6c:71:2a:83:b9:f1:ff:17:16:42:77:3d:
45:88:e5:e0:7d:33:70:16:37:b3:98:60:7b:fd:47:
54:37:50:78:fd:c3:70:5b:6e:fe:89:7b:73:4f:81:
4e:7b:6c:a9:1d:d2:24:99:9c:33:59:4b:92:62:54:
01:f2:f3:fd:63:ef:71:bd:8a:7e:85:75:38:de:9a:
9b:2b:3e:01:92:78:02:09:5f:c8:b1:b1:1a:ca:0b:
1f:f6:89:48:3f:42:dd:30:97:d7:c2:88:9f:b7:5d:
3f:1d:58:02:d8:6c:cf:83:0e:4c:54:96:ea:55:8f:
6c:e1:bb:1e:76:f8:5b:3c:80:3a:84:f7:7f:d7:70:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:07:4F:05:6F:CA:3D:00:F7:85:5B:CE:F6:46:5B:DB:50:C5:7B:D1
X509v3 Authority Key Identifier:
keyid:BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:92a8::/34
Signature Algorithm: sha256WithRSAEncryption
30:34:bf:9a:f8:8f:70:bf:a8:e9:25:d5:b6:14:0a:db:9f:e8:
c0:d4:a0:90:5b:d1:c9:f0:27:b2:38:71:ff:d1:d3:d0:21:fd:
22:be:64:36:8f:53:a8:55:27:7b:aa:8e:f8:7f:4c:9c:db:51:
03:40:6a:e8:f6:31:5f:8f:30:8a:d4:d0:ae:13:c6:a9:49:d0:
4b:73:b7:7f:e8:fc:75:2d:e4:2b:57:9a:18:d1:37:f0:98:67:
ce:8e:5b:dc:29:3a:69:ed:bb:28:7d:cc:55:69:b4:5c:50:db:
e7:4c:51:6f:57:6b:49:c1:ac:d4:09:ad:25:e0:d0:e0:26:fd:
35:13:ef:82:6e:0e:61:79:42:e9:af:54:cf:07:28:b0:e9:59:
fe:f3:2e:2e:ed:6e:46:ec:74:7b:09:7e:9c:fe:c5:5e:9c:30:
a1:f3:8d:d9:73:2b:3c:3d:48:0a:bd:ac:a8:8b:9b:f1:1c:28:
c7:9e:58:be:e7:de:f0:49:4c:65:c7:bc:b6:21:1b:53:3c:c8:
f2:df:65:ef:53:69:4e:3d:bf:1a:07:a4:23:21:66:b3:d7:70:
5d:a6:a0:f0:df:c3:88:fa:78:64:7b:10:ca:53:88:1e:a9:96:
a3:39:4a:5a:79:e9:f9:1b:05:3d:81:47:9f:05:39:f6:9f:66:
dd:a8:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:03:19 2025 by rpki-client