![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3830303a3a2f34302d3430203d3e20323732373130.roa
File: 323830343a383737343a3830303a3a2f34302d3430203d3e20323732373130.roa (raw, json)
Hash identifier: R1qc40T/8nG3ZpIWK9VXiY0+t0a80IWJCNrNLQ7EckY=
Subject key identifier: 9E:1B:5C:5C:5A:7C:46:F1:12:72:0D:04:B1:7B:F7:E7:DD:44:44:64
Certificate issuer: /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial: 49F15168951712DBDE755B62D71A1E876F5DE729
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3830303a3a2f34302d3430203d3e20323732373130.roa
Signing time: Fri 30 Aug 2024 14:26:36 +0000
ROA not before: Fri 30 Aug 2024 14:21:36 +0000
ROA not after: Fri 29 Aug 2025 14:26:36 +0000
asID: 272710
IP address blocks: 2804:8774:800::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f1:51:68:95:17:12:db:de:75:5b:62:d7:1a:1e:87:6f:5d:e7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Validity
Not Before: Aug 30 14:21:36 2024 GMT
Not After : Aug 29 14:26:36 2025 GMT
Subject: CN=9E1B5C5C5A7C46F112720D04B17BF7E7DD444464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:f7:69:d5:be:fe:81:0c:c6:85:9c:3e:2d:
17:7c:94:5d:13:38:cd:c9:f8:d6:1d:d1:9f:dd:df:
6c:f0:18:7c:a9:6d:3a:9c:bf:ed:9b:b5:6b:fc:73:
f9:2c:34:a6:7b:0d:51:86:ad:69:40:b6:2c:f7:70:
61:f9:1b:fd:11:ea:f0:5d:69:f3:10:3c:18:ab:bc:
a7:01:af:10:25:e8:f4:0f:cd:eb:2d:d8:61:0d:62:
93:79:b6:5f:ef:83:ed:17:71:90:84:b2:1b:14:8e:
b1:a4:05:b7:8f:7b:73:93:51:6b:84:61:4b:57:b0:
25:82:d3:49:57:bd:c0:64:3e:43:7f:b9:eb:68:7f:
ce:7b:2f:df:ec:b7:bf:c4:30:62:9c:87:09:ef:69:
6a:86:04:ec:17:8b:8a:bb:dd:6b:8e:d2:e3:ce:35:
d5:9f:31:e0:2a:88:a7:b5:62:ee:7e:0f:32:5b:e3:
17:b3:08:64:b4:96:6d:af:9e:20:50:d3:31:94:ca:
82:f9:13:0b:81:cb:19:8b:70:09:f3:13:96:0e:44:
4a:2a:d3:69:04:c1:8c:3e:9e:ae:86:6e:77:d3:fe:
4d:18:18:11:e4:ab:9f:41:7e:49:ad:6f:e7:08:95:
4d:11:43:fe:68:20:ec:9e:52:62:fe:45:6c:68:d5:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:5C:5C:5A:7C:46:F1:12:72:0D:04:B1:7B:F7:E7:DD:44:44:64
X509v3 Authority Key Identifier:
keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3830303a3a2f34302d3430203d3e20323732373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8774:800::/40
Signature Algorithm: sha256WithRSAEncryption
76:7c:d2:f5:82:82:59:bc:84:b6:28:d2:7f:26:cf:e8:33:b1:
c8:0b:28:9d:88:e7:c5:06:5a:f4:f6:4d:9e:a2:70:32:f0:a0:
81:f5:d1:e6:b2:d3:7b:5d:b2:d4:94:03:91:6c:0e:ab:fa:d0:
6b:ec:67:d5:9e:0d:a8:65:bb:a7:59:1a:ad:fe:86:cd:93:38:
f8:e8:9c:d8:eb:69:e2:fc:17:bd:1f:45:a3:e3:7a:72:db:9e:
88:09:6a:c2:91:1d:3f:6c:a5:8a:a5:4e:73:78:67:5b:c4:80:
5c:69:ba:ae:33:1b:3e:40:e3:93:bd:d7:23:19:4d:81:f9:c6:
81:6b:3c:2c:33:8c:85:20:87:c0:08:4b:78:03:be:fe:87:ec:
95:ca:e4:4d:f1:7c:dc:75:9e:2b:b6:29:33:7e:7b:19:28:56:
22:ea:f7:94:b7:33:03:a4:5f:4a:63:19:20:3a:8c:ee:da:2e:
a7:ab:d4:28:c6:2e:93:a7:ba:0f:c6:ee:df:c3:7f:66:24:8e:
bf:20:28:2d:d6:51:1c:99:6c:81:96:f2:66:fa:92:62:9c:26:
c9:95:68:0a:9c:6a:81:a0:ab:77:99:83:9e:29:1f:0c:a8:16:
37:a3:27:7a:17:cd:27:5c:93:05:f3:a4:af:dd:ab:d7:20:14:
e1:31:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:34 2025 by rpki-client