Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33342d3334203d3e20323635303830.roa
File: 323830343a333237383a3a2f33342d3334203d3e20323635303830.roa (raw, json)
Hash identifier: lUIvVWvZ/7tVDiPTzGxFSynwwxjtVj9Vgqe9oTyFKUE=
Subject key identifier: 50:03:9A:2A:71:20:BF:64:47:53:4C:8F:8D:BF:1E:B2:C3:3D:B1:14
Certificate issuer: /CN=1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0
Certificate serial: 76A183CE7FA85EC47FB861F034490FC064433CAD
Authority key identifier: 1D:C2:A9:E1:70:84:A1:FF:48:DC:F3:DA:9B:DC:1A:FF:64:BC:E4:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33342d3334203d3e20323635303830.roa
Signing time: Mon 07 Apr 2025 18:32:20 +0000
ROA not before: Mon 07 Apr 2025 18:27:20 +0000
ROA not after: Mon 06 Apr 2026 18:32:20 +0000
asID: 265080
IP address blocks: 2804:3278::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a1:83:ce:7f:a8:5e:c4:7f:b8:61:f0:34:49:0f:c0:64:43:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0
Validity
Not Before: Apr 7 18:27:20 2025 GMT
Not After : Apr 6 18:32:20 2026 GMT
Subject: CN=50039A2A7120BF6447534C8F8DBF1EB2C33DB114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:30:4c:b9:a9:80:e7:a2:ce:07:45:2b:7e:
ce:69:31:54:91:d1:e1:21:24:62:57:7d:63:25:9e:
da:61:16:b6:03:77:b4:b6:0f:3e:df:7d:10:39:0c:
29:c7:29:4f:50:61:d5:cc:a3:67:0d:71:f9:7e:a5:
67:25:0a:2c:dd:db:67:32:b9:7a:ef:f4:1e:7d:51:
29:b8:44:fd:e8:97:e1:77:88:59:74:97:64:72:b2:
1e:e9:47:93:0b:50:67:f7:81:89:b7:e9:89:86:a5:
81:79:80:d2:dc:40:25:cc:a7:60:9e:68:21:52:f3:
4f:40:77:22:68:1c:cf:28:43:91:1d:e5:c6:07:2a:
04:68:10:ec:a8:38:37:18:e4:f1:aa:b2:9a:ed:51:
87:8e:23:18:a4:05:0b:6b:78:12:92:06:6a:37:f4:
ce:51:94:75:be:d4:39:3b:bc:bb:91:54:e2:be:47:
17:87:17:16:b6:93:df:b1:7d:bd:77:ce:15:f9:4f:
0d:4b:cb:82:fb:46:e4:c0:7c:7e:14:ea:80:94:be:
d0:06:f5:18:10:24:26:ab:aa:71:97:cf:88:f6:b3:
49:7e:41:dd:be:d7:53:86:6a:c0:a4:d0:92:32:c1:
f9:84:1a:ff:2b:e4:d3:51:f7:db:1b:46:31:0a:81:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:03:9A:2A:71:20:BF:64:47:53:4C:8F:8D:BF:1E:B2:C3:3D:B1:14
X509v3 Authority Key Identifier:
keyid:1D:C2:A9:E1:70:84:A1:FF:48:DC:F3:DA:9B:DC:1A:FF:64:BC:E4:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DC2A9E17084A1FF48DCF3DA9BDC1AFF64BCE4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33342d3334203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3278::/34
Signature Algorithm: sha256WithRSAEncryption
a7:f1:b2:50:67:ca:d6:81:be:63:e2:04:d3:20:91:ad:e1:76:
72:2e:bd:32:a7:66:73:68:f6:03:a8:27:08:45:4d:5a:90:00:
17:70:e5:7b:68:4c:85:1e:9e:48:46:57:b1:36:b3:73:b5:6b:
c9:42:a9:87:03:f4:d6:c4:1d:56:8d:68:35:58:20:93:6a:2c:
f3:a0:91:e2:55:85:bd:c5:34:32:dc:5e:ed:8b:12:17:7c:f0:
03:a0:2b:8d:fc:a5:3f:03:b6:1a:43:fe:21:96:f1:79:07:a4:
31:e2:b1:47:ac:8f:2b:9d:0d:2f:c6:04:d9:48:cf:0d:05:a9:
a2:42:03:65:21:f4:51:b1:f2:97:76:dd:a8:52:80:b1:fd:67:
b2:44:47:64:89:0e:cc:4c:8b:91:2c:04:2b:01:e9:2c:f5:13:
43:81:4a:eb:fa:db:42:06:c7:1a:f2:df:2b:c7:3b:0d:27:b7:
a7:5d:d6:80:19:ab:97:98:76:35:ed:e7:bf:ab:3f:70:ff:e4:
b3:34:ba:44:59:65:9c:55:09:89:3d:8e:b8:a5:31:63:88:84:
73:d9:a7:73:4c:2e:8a:45:fa:90:9d:10:51:0f:45:ea:60:30:
77:20:63:3f:e0:be:d5:17:b7:f0:6d:3d:be:4a:fd:00:d0:a5:
c3:64:d1:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdqGDzn+oXsR/uGHwNEkPwGRDPK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURDMkE5RTE3MDg0QTFGRjQ4RENGM0RBOUJEQzFBRkY2
NEJDRTRGMDAeFw0yNTA0MDcxODI3MjBaFw0yNjA0MDYxODMyMjBaMDMxMTAvBgNV
BAMTKDUwMDM5QTJBNzEyMEJGNjQ0NzUzNEM4RjhEQkYxRUIyQzMzREIxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14zBMuamA56LOB0Urfs5pMVSR
0eEhJGJXfWMlntphFrYDd7S2Dz7ffRA5DCnHKU9QYdXMo2cNcfl+pWclCizd22cy
uXrv9B59USm4RP3ol+F3iFl0l2Rysh7pR5MLUGf3gYm36YmGpYF5gNLcQCXMp2Ce
aCFS809AdyJoHM8oQ5Ed5cYHKgRoEOyoODcY5PGqsprtUYeOIxikBQtreBKSBmo3
9M5RlHW+1Dk7vLuRVOK+RxeHFxa2k9+xfb13zhX5Tw1Ly4L7RuTAfH4U6oCUvtAG
9RgQJCarqnGXz4j2s0l+Qd2+11OGasCk0JIywfmEGv8r5NNR99sbRjEKgYhBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUAOaKnEgv2RHU0yPjb8essM9sRQwHwYDVR0j
BBgwFoAUHcKp4XCEof9I3PPam9wa/2S85PAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZYa0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUx
dlcvMC8xREMyQTlFMTcwODRBMUZGNDhEQ0YzREE5QkRDMUFGRjY0QkNFNEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEQzJBOUUxNzA4NEExRkY0
OERDRjNEQTlCREMxQUZGNjRCQ0U0RjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGWGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzAv
MzIzODMwMzQzYTMzMzIzNzM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM1
MzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQyeAAwDQYJKoZIhvcNAQELBQADggEBAKfxslBn
ytaBvmPiBNMgka3hdnIuvTKnZnNo9gOoJwhFTVqQABdw5XtoTIUenkhGV7E2s3O1
a8lCqYcD9NbEHVaNaDVYIJNqLPOgkeJVhb3FNDLcXu2LEhd88AOgK438pT8DthpD
/iGW8XkHpDHisUesjyudDS/GBNlIzw0FqaJCA2Uh9FGx8pd23ahSgLH9Z7JER2SJ
DsxMi5EsBCsB6Sz1E0OBSuv620IGxxry3yvHOw0nt6dd1oAZq5eYdjXt57+rP3D/
5LM0ukRZZZxVCYk9jrilMWOIhHPZp3NMLopF+pCdEFEPRepgMHcgYz/gvtUXt/Bt
Pb5K/QDQpcNk0dY=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:41:58 2025 by rpki-client