Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/323830343a366538303a3a2f33322d3438203d3e20323730363031.roa
File: 323830343a366538303a3a2f33322d3438203d3e20323730363031.roa (raw, json)
Hash identifier: j6ysahu6sk664R+fhe6jdnaVhVLgPFKQgO2/ZHWGWdQ=
Subject key identifier: 6B:DD:04:01:21:FE:4D:00:10:98:1B:45:BA:95:4A:DF:20:A3:03:A4
Certificate issuer: /CN=D6DC68A6023AA2D9CE6A0F13893738F3846790E6
Certificate serial: 46A13EF0E840A0EF2C45904F0709C45EE145F3B0
Authority key identifier: D6:DC:68:A6:02:3A:A2:D9:CE:6A:0F:13:89:37:38:F3:84:67:90:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6DC68A6023AA2D9CE6A0F13893738F3846790E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/323830343a366538303a3a2f33322d3438203d3e20323730363031.roa
Signing time: Fri 28 Mar 2025 12:49:04 +0000
ROA not before: Fri 28 Mar 2025 12:44:04 +0000
ROA not after: Fri 27 Mar 2026 12:49:04 +0000
asID: 270601
IP address blocks: 2804:6e80::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a1:3e:f0:e8:40:a0:ef:2c:45:90:4f:07:09:c4:5e:e1:45:f3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6DC68A6023AA2D9CE6A0F13893738F3846790E6
Validity
Not Before: Mar 28 12:44:04 2025 GMT
Not After : Mar 27 12:49:04 2026 GMT
Subject: CN=6BDD040121FE4D0010981B45BA954ADF20A303A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:d2:40:91:cb:e3:ff:85:b2:c2:0a:67:36:
18:04:7b:18:c7:41:40:c6:22:90:f7:ed:39:ac:92:
54:88:82:f4:c7:28:9a:5d:3a:43:d4:f7:e9:f4:d4:
46:b7:4b:d5:aa:06:21:c9:be:04:88:79:2c:cd:e1:
ac:65:7a:be:86:76:e1:b5:cc:9f:9a:5c:9f:d5:9f:
4a:11:e9:b5:a5:1c:f0:c9:43:28:34:1b:f2:cc:b0:
04:03:31:ec:76:87:54:b7:66:78:aa:bb:d7:f8:04:
d4:dc:7e:98:80:f4:c0:a9:0f:65:24:cb:7b:25:94:
ef:fc:29:71:b0:92:48:94:52:67:d5:47:28:70:93:
fb:83:dd:02:c2:0e:ad:0c:56:75:fe:33:86:c6:6a:
4d:a1:8e:44:c5:c3:35:23:24:4c:cd:d8:eb:4e:15:
cd:ce:4a:c3:66:21:4c:e0:b1:e0:ca:08:00:58:41:
f4:71:06:57:29:c4:80:22:6a:49:86:9c:91:d4:a8:
86:46:f6:9e:25:ad:46:8f:5e:95:84:5b:18:45:1e:
0a:4a:77:8f:f2:66:56:4c:e6:c9:1a:97:f1:da:dc:
d7:89:ac:9d:67:51:54:77:4a:e4:ec:69:79:72:59:
b0:50:76:73:f8:78:97:be:d2:17:50:52:ba:06:fe:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DD:04:01:21:FE:4D:00:10:98:1B:45:BA:95:4A:DF:20:A3:03:A4
X509v3 Authority Key Identifier:
keyid:D6:DC:68:A6:02:3A:A2:D9:CE:6A:0F:13:89:37:38:F3:84:67:90:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/D6DC68A6023AA2D9CE6A0F13893738F3846790E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6DC68A6023AA2D9CE6A0F13893738F3846790E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FueGG8kEtk1XthtHL4KGD526peGzqkN68jsaQdncPb8N/0/323830343a366538303a3a2f33322d3438203d3e20323730363031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
67:39:57:a5:2b:58:b9:11:fa:26:0c:25:2f:b7:30:93:85:be:
9d:8f:d3:2c:92:b6:8a:c8:12:86:8b:97:2b:d9:73:69:71:bd:
e3:f3:ef:0e:32:0d:3d:b4:04:2e:39:26:18:36:99:ff:47:fe:
c6:03:59:e0:44:f7:2d:e5:8f:4a:3a:dc:b2:26:df:0c:ea:26:
51:ec:12:81:d8:c9:c5:3f:83:8b:6c:7d:46:32:ed:e1:bd:fa:
df:96:8b:4f:91:06:d2:dc:ca:09:c5:ea:b0:fc:d6:47:30:54:
d0:2a:ff:1a:6f:55:9d:df:5f:7f:a8:76:f5:62:c2:f4:84:31:
c9:5a:50:4f:fb:af:7a:72:44:5d:9c:a3:1a:b1:8c:30:aa:79:
52:1f:ab:ad:28:fd:ef:63:d1:2f:c9:07:3a:91:2f:e4:f4:66:
e8:ba:88:fa:9c:12:61:e2:de:0e:28:40:b8:f5:b5:6c:62:f0:
6d:4b:a9:68:02:71:c0:79:5a:16:9c:02:ff:6f:f2:a7:f6:6f:
40:3d:84:41:b0:de:42:b3:ba:c2:4c:38:93:20:8e:66:ca:03:
f3:71:74:a3:6f:da:f7:eb:4f:fa:84:13:b2:e1:63:f1:14:22:
65:f8:de:d7:68:8c:21:7c:08:47:03:b5:78:e4:3c:73:fb:b6:
04:a9:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:46:48 2025 by rpki-client