Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FkdN4of55Td56823ezTUWcYoAY1cFCYYcNiNU6DR6o7o/0/323830343a393232303a3a2f33322d3438203d3e203631363232.roa
File: 323830343a393232303a3a2f33322d3438203d3e203631363232.roa (raw, json)
Hash identifier: VPl/fh+9Jy+MhtPH57ijB3qLzXKVLr+b3KP2axSOQpI=
Subject key identifier: D9:29:B1:89:84:02:2D:1B:08:C8:E3:16:4C:2F:39:5F:DF:3E:41:95
Certificate issuer: /CN=33A134697E8B26CD751DA1EC91BE83045E4E717B
Certificate serial: 2D9DA02E8787F864FDD7A7FC3EAC6608C2CC6321
Authority key identifier: 33:A1:34:69:7E:8B:26:CD:75:1D:A1:EC:91:BE:83:04:5E:4E:71:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33A134697E8B26CD751DA1EC91BE83045E4E717B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FkdN4of55Td56823ezTUWcYoAY1cFCYYcNiNU6DR6o7o/0/323830343a393232303a3a2f33322d3438203d3e203631363232.roa
Signing time: Sun 25 May 2025 03:59:53 +0000
ROA not before: Sun 25 May 2025 03:54:53 +0000
ROA not after: Sun 24 May 2026 03:59:53 +0000
asID: 61622
IP address blocks: 2804:9220::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9d:a0:2e:87:87:f8:64:fd:d7:a7:fc:3e:ac:66:08:c2:cc:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33A134697E8B26CD751DA1EC91BE83045E4E717B
Validity
Not Before: May 25 03:54:53 2025 GMT
Not After : May 24 03:59:53 2026 GMT
Subject: CN=D929B18984022D1B08C8E3164C2F395FDF3E4195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:2e:c3:bf:d8:50:bc:52:da:1a:cd:21:92:
5d:d4:09:cb:be:92:60:48:46:26:de:a0:06:ed:c5:
d5:07:80:8a:a7:13:7c:86:cb:24:ac:10:1a:4e:41:
5b:64:5c:c7:64:fd:e8:6e:ca:1b:67:96:5f:9c:1a:
fd:ec:9c:37:44:2c:72:5a:f0:ae:e0:a5:ca:2b:a1:
e5:33:3b:60:27:54:b5:6d:8a:9c:b4:e9:1c:31:5c:
b1:43:f0:18:17:80:36:26:60:b0:c0:5d:6a:e7:1e:
b5:ae:a4:05:5c:68:76:91:ba:43:73:82:48:91:15:
94:17:f1:1f:82:05:87:bc:ff:61:6a:40:78:35:36:
24:fe:9c:73:5b:15:0b:fe:43:dd:a9:83:91:c6:b4:
69:0c:af:f9:77:56:32:26:07:bb:8e:42:72:7e:d5:
0a:08:25:d6:cb:f0:b4:62:4d:99:33:a7:1d:6e:6f:
ab:38:ff:27:c1:11:69:8d:36:66:b8:98:6f:69:f7:
21:50:d7:7e:c7:b5:7c:a6:97:86:56:67:70:cd:75:
09:bf:90:70:fa:a5:47:92:40:73:6b:d8:4c:80:8e:
7d:54:ee:c9:c3:dd:90:0c:35:fd:10:04:fe:61:8c:
b9:da:06:06:2c:5f:94:21:9c:0d:33:c9:81:ca:33:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:29:B1:89:84:02:2D:1B:08:C8:E3:16:4C:2F:39:5F:DF:3E:41:95
X509v3 Authority Key Identifier:
keyid:33:A1:34:69:7E:8B:26:CD:75:1D:A1:EC:91:BE:83:04:5E:4E:71:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FkdN4of55Td56823ezTUWcYoAY1cFCYYcNiNU6DR6o7o/0/33A134697E8B26CD751DA1EC91BE83045E4E717B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33A134697E8B26CD751DA1EC91BE83045E4E717B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkdN4of55Td56823ezTUWcYoAY1cFCYYcNiNU6DR6o7o/0/323830343a393232303a3a2f33322d3438203d3e203631363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9220::/32
Signature Algorithm: sha256WithRSAEncryption
94:e8:9c:63:b8:d1:a6:32:d7:a0:db:53:e6:78:3e:f4:30:b5:
73:ef:f8:d1:3e:f6:a2:16:8c:b2:b3:63:cc:c2:07:de:f4:c2:
f5:5f:76:4a:3b:59:d7:0a:1c:ef:62:4b:94:3b:34:71:fe:9f:
57:00:6d:49:dc:96:1f:43:25:a2:20:5b:36:40:cf:b5:1b:36:
63:8a:4d:8d:91:b6:17:52:c1:ad:54:ac:b6:92:ba:40:ae:85:
04:05:22:db:08:e0:02:3e:ae:02:5c:16:7a:65:74:2c:bd:01:
d6:b5:f8:a4:45:78:6a:5e:c1:e2:86:a5:c8:3c:67:5b:a0:3d:
b0:61:d6:06:ff:57:24:b9:02:c5:f5:77:93:ad:73:fb:51:6c:
d7:b9:01:ed:15:8b:b0:a7:c8:ab:a3:38:a3:5c:01:96:99:9c:
c8:cb:dd:39:8c:cc:1a:3a:bb:08:a2:65:6b:30:a2:f4:d3:2d:
90:cc:4b:ca:77:69:65:17:e5:4d:e0:8e:a0:58:cd:d0:da:f9:
46:4a:0f:21:fa:aa:42:b6:78:fc:a8:77:a3:99:d3:91:71:7e:
6e:71:97:fd:b4:41:fc:c3:79:1d:f2:2f:d1:70:67:79:12:11:
28:d7:3f:69:11:02:44:b2:68:fd:d5:91:03:da:c2:c2:40:ed:
a4:f8:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:53:23 2025 by rpki-client