Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/323830343a376462343a3a2f33322d313238203d3e20323731353737.roa
File: 323830343a376462343a3a2f33322d313238203d3e20323731353737.roa (raw, json)
Hash identifier: HQn13L1S3KDRBGqCUgwknTsFis1jKVGkKgT60cPEH6I=
Subject key identifier: AD:41:37:03:6A:13:7D:66:85:5A:D8:B8:C8:5E:ED:4A:A6:DF:2D:71
Certificate issuer: /CN=55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA
Certificate serial: 3E31F06305614947DCFCB9708C51135392571346
Authority key identifier: 55:C4:39:C5:11:DB:67:E8:CF:A8:BF:43:F7:CB:33:D8:E7:4A:B8:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/323830343a376462343a3a2f33322d313238203d3e20323731353737.roa
Signing time: Sun 06 Jul 2025 05:27:46 +0000
ROA not before: Sun 06 Jul 2025 05:22:46 +0000
ROA not after: Sun 05 Jul 2026 05:27:46 +0000
asID: 271577
IP address blocks: 2804:7db4::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:31:f0:63:05:61:49:47:dc:fc:b9:70:8c:51:13:53:92:57:13:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA
Validity
Not Before: Jul 6 05:22:46 2025 GMT
Not After : Jul 5 05:27:46 2026 GMT
Subject: CN=AD4137036A137D66855AD8B8C85EED4AA6DF2D71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:53:f3:97:ee:c8:18:8f:c5:ec:d6:8a:a0:
30:bf:c7:97:c7:09:e9:65:e8:85:4c:ec:af:36:ea:
20:0e:1d:58:07:5f:5b:f2:89:a1:0f:ea:49:bb:b6:
87:7e:bb:57:64:ff:3c:0b:6a:42:b4:bd:49:f6:b7:
80:e5:9b:ad:a7:ed:fd:09:cd:a3:1c:d8:58:5f:a6:
d9:b7:6e:30:03:f9:71:85:c2:e6:fc:75:d2:40:14:
90:96:24:23:1b:39:11:e3:41:d4:f1:bd:2f:de:c7:
9c:ae:2c:6b:61:3b:cf:e6:eb:57:b6:6f:b9:b4:f1:
8c:10:3b:76:6f:83:18:79:28:0d:52:65:94:72:95:
b5:70:cb:5b:f3:af:8b:e6:3a:78:06:6e:fb:3e:5b:
a2:92:1a:18:01:a6:c2:a5:0d:f6:02:a3:fc:36:b2:
f2:7f:cd:ec:06:ba:c5:5a:c9:0e:a9:f2:ea:d6:12:
1f:a3:7c:8d:54:6d:29:75:f5:3a:69:e1:0f:45:4a:
f3:24:61:56:0e:ff:63:54:56:64:cc:4c:f3:4e:9f:
6d:c9:00:5e:1f:01:63:b5:6b:a6:7b:d5:47:85:6f:
75:99:b0:dd:1f:e8:84:28:65:fa:04:cd:5f:c9:17:
f7:3e:b9:4d:1e:33:ec:fa:32:85:c5:4f:ac:d6:5b:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:37:03:6A:13:7D:66:85:5A:D8:B8:C8:5E:ED:4A:A6:DF:2D:71
X509v3 Authority Key Identifier:
keyid:55:C4:39:C5:11:DB:67:E8:CF:A8:BF:43:F7:CB:33:D8:E7:4A:B8:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55C439C511DB67E8CFA8BF43F7CB33D8E74AB8FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/323830343a376462343a3a2f33322d313238203d3e20323731353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7db4::/32
Signature Algorithm: sha256WithRSAEncryption
45:e6:dc:27:c7:09:59:e8:a9:10:22:b5:d4:21:db:f2:cd:67:
04:f8:db:73:5c:e0:f6:31:99:42:c2:45:0e:ad:b4:df:68:22:
bf:38:64:b7:03:44:dd:61:70:91:36:ac:16:99:9f:ac:b7:37:
98:45:0f:09:d8:75:dc:d4:6c:bf:6a:0c:bf:46:a1:28:aa:7a:
6a:7f:d5:50:01:f4:cf:89:fc:c5:b9:f6:bf:53:72:d9:8d:a3:
cc:b6:6e:2e:10:37:02:df:37:11:f2:b1:71:e9:fb:a7:cf:42:
b1:46:e5:0d:a3:d4:7c:86:58:09:48:7b:9a:2b:c1:36:5d:41:
83:b6:fb:3c:05:d3:6a:38:88:41:cc:e5:a2:6b:4a:d4:1f:ac:
49:b7:0c:c2:f3:47:8c:72:85:8c:21:e9:84:68:fc:10:d0:1d:
7e:8f:25:0a:a1:3c:cd:9f:7c:27:08:9c:bb:44:b4:9a:5e:97:
d8:b5:bf:c6:80:98:6f:c0:9b:8a:02:8d:65:cc:2e:97:3b:19:
52:6f:a5:e7:04:6c:39:da:7d:63:60:cf:f7:2d:0d:56:c7:48:
cd:2b:1f:58:af:91:ed:fd:0a:b7:68:31:cf:a5:77:46:f6:6d:
2a:0b:ae:0d:10:92:a9:ee:98:09:6a:02:c2:5c:bd:e7:7f:fe:
15:ec:de:0e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUPjHwYwVhSUfc/LlwjFETU5JXE0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVDNDM5QzUxMURCNjdFOENGQThCRjQzRjdDQjMzRDhF
NzRBQjhGQTAeFw0yNTA3MDYwNTIyNDZaFw0yNjA3MDUwNTI3NDZaMDMxMTAvBgNV
BAMTKEFENDEzNzAzNkExMzdENjY4NTVBRDhCOEM4NUVFRDRBQTZERjJENzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTwlPzl+7IGI/F7NaKoDC/x5fH
Cell6IVM7K826iAOHVgHX1vyiaEP6km7tod+u1dk/zwLakK0vUn2t4Dlm62n7f0J
zaMc2Fhfptm3bjAD+XGFwub8ddJAFJCWJCMbORHjQdTxvS/ex5yuLGthO8/m61e2
b7m08YwQO3Zvgxh5KA1SZZRylbVwy1vzr4vmOngGbvs+W6KSGhgBpsKlDfYCo/w2
svJ/zewGusVayQ6p8urWEh+jfI1UbSl19Tpp4Q9FSvMkYVYO/2NUVmTMTPNOn23J
AF4fAWO1a6Z71UeFb3WZsN0f6IQoZfoEzV/JF/c+uU0eM+z6MoXFT6zWWwplAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUrUE3A2oTfWaFWti4yF7tSqbfLXEwHwYDVR0j
BBgwFoAUVcQ5xRHbZ+jPqL9D98sz2OdKuPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXpmOXR5MUN1eTZ2U3h2UjdRWlh6QmRMeTRrMjV3SjZkSFROeDE4TDFZ
bjEvMC81NUM0MzlDNTExREI2N0U4Q0ZBOEJGNDNGN0NCMzNEOEU3NEFCOEZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1QzQzOUM1MTFEQjY3RThD
RkE4QkY0M0Y3Q0IzM0Q4RTc0QUI4RkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V6Zjl0eTFDdXk2dlN4dlI3UVpYekJkTHk0azI1d0o2ZEhUTngxOEwxWW4xLzAv
MzIzODMwMzQzYTM3NjQ2MjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBH20MA0GCSqGSIb3DQEBCwUAA4IBAQBF5twn
xwlZ6KkQIrXUIdvyzWcE+NtzXOD2MZlCwkUOrbTfaCK/OGS3A0TdYXCRNqwWmZ+s
tzeYRQ8J2HXc1Gy/agy/RqEoqnpqf9VQAfTPifzFufa/U3LZjaPMtm4uEDcC3zcR
8rFx6funz0KxRuUNo9R8hlgJSHuaK8E2XUGDtvs8BdNqOIhBzOWia0rUH6xJtwzC
80eMcoWMIemEaPwQ0B1+jyUKoTzNn3wnCJy7RLSaXpfYtb/GgJhvwJuKAo1lzC6X
OxlSb6XnBGw52n1jYM/3LQ1Wx0jNKx9Yr5Ht/Qq3aDHPpXdG9m0qC64NEJKp7pgJ
agLCXL3nf/4V7N4O
-----END CERTIFICATE-----
Generated at Thu Sep 18 09:28:53 2025 by rpki-client