Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/323830343a363661383a3a2f33322d3336203d3e20323639353734.roa
File: 323830343a363661383a3a2f33322d3336203d3e20323639353734.roa (raw, json)
Hash identifier: lhhdyTtZIetsOGcCDGlmE/43aWHqN1ap7HeJKU/aVxg=
Subject key identifier: 6D:63:8A:DE:66:65:7C:B0:FA:56:B2:F7:2F:5C:31:DB:0B:A1:02:B3
Certificate issuer: /CN=4FCC7017425B1CB23CD1BE04EE4FFAD00F434520
Certificate serial: 4A0D2033329DE5D5FC979C0E5A992A610B062B64
Authority key identifier: 4F:CC:70:17:42:5B:1C:B2:3C:D1:BE:04:EE:4F:FA:D0:0F:43:45:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/323830343a363661383a3a2f33322d3336203d3e20323639353734.roa
Signing time: Mon 21 Jul 2025 14:15:11 +0000
ROA not before: Mon 21 Jul 2025 14:10:11 +0000
ROA not after: Mon 20 Jul 2026 14:15:11 +0000
asID: 269574
IP address blocks: 2804:66a8::/32 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0d:20:33:32:9d:e5:d5:fc:97:9c:0e:5a:99:2a:61:0b:06:2b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FCC7017425B1CB23CD1BE04EE4FFAD00F434520
Validity
Not Before: Jul 21 14:10:11 2025 GMT
Not After : Jul 20 14:15:11 2026 GMT
Subject: CN=6D638ADE66657CB0FA56B2F72F5C31DB0BA102B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:fc:8b:42:f1:cb:f1:a8:40:72:04:7c:ee:
9d:2d:97:a6:0d:97:8f:19:d8:d9:35:d9:79:55:e4:
a0:bd:3a:32:0a:17:94:3d:b8:2d:a2:7a:cf:48:2d:
e1:24:1a:15:60:75:04:68:b9:e6:2e:d5:61:bc:be:
62:3d:a8:2c:a4:b4:3a:31:70:50:61:01:aa:02:5d:
5e:18:01:f6:94:a5:e4:de:55:77:e0:91:3b:22:3a:
93:0a:23:8d:e0:ae:57:62:bb:21:26:38:f8:d8:40:
5f:9a:17:8f:7f:39:43:72:37:49:d5:8e:93:45:cb:
f7:79:f0:2a:69:91:02:bd:27:9a:ac:05:da:53:06:
f1:dd:3d:65:af:60:57:08:6f:c8:53:b6:0e:71:b0:
73:0d:7e:77:6b:3a:92:ea:2d:9f:8a:64:49:23:3a:
5d:4f:ea:1a:5e:6b:ee:de:f9:0f:50:b6:91:d2:ec:
93:17:5c:5c:10:69:44:9a:fc:2e:76:4a:d1:f7:23:
fb:b9:ef:0d:d3:eb:f4:02:0d:e9:84:37:ba:40:70:
ca:60:8f:61:a3:97:87:11:ed:8c:42:c3:11:ad:b4:
2c:55:2b:e4:45:89:1e:ec:6b:99:cb:02:4e:d6:e5:
61:a2:32:a9:00:d5:18:f9:4a:0e:49:6f:65:36:d8:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:63:8A:DE:66:65:7C:B0:FA:56:B2:F7:2F:5C:31:DB:0B:A1:02:B3
X509v3 Authority Key Identifier:
keyid:4F:CC:70:17:42:5B:1C:B2:3C:D1:BE:04:EE:4F:FA:D0:0F:43:45:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FCC7017425B1CB23CD1BE04EE4FFAD00F434520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/3/323830343a363661383a3a2f33322d3336203d3e20323639353734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:66a8::/32
Signature Algorithm: sha256WithRSAEncryption
0c:ef:9c:63:f3:82:73:ab:85:67:83:66:7c:22:79:aa:dd:ec:
8c:16:8a:4d:3b:0b:d5:d5:59:9b:8c:46:fc:a4:f0:c4:31:d0:
32:ff:a2:6c:bb:56:4f:a6:fd:fb:ab:78:6b:a9:7c:51:ed:fe:
e2:c0:60:3e:79:93:07:c8:dc:ed:23:7e:c9:a9:3b:e9:97:ba:
6c:09:32:a2:b4:aa:ac:fc:d4:08:b3:3c:c3:8d:8a:29:9d:5b:
a2:8d:5c:aa:9a:f6:fa:1b:42:81:ab:48:fb:5a:1b:f3:55:e1:
ed:10:a0:d7:5a:51:64:43:8e:98:85:ea:ce:66:0a:8d:b6:4a:
a8:08:87:92:3d:0f:89:94:3b:8e:6a:c7:06:d6:44:b9:07:7f:
2f:4d:f7:d5:2e:0c:a6:38:11:be:78:48:b7:69:62:e2:4a:95:
b2:51:99:fb:8e:81:15:a3:bb:59:75:95:b1:c6:fc:67:40:66:
6c:14:d3:47:ef:80:1f:2a:c0:9a:ba:80:be:9c:f9:17:e6:5c:
ff:71:0e:93:de:68:2c:42:35:e1:bf:0e:8b:f9:36:7b:e0:e7:
ac:b9:01:91:52:4f:85:4d:aa:b3:84:41:6c:f9:be:25:7f:03:
25:83:a3:76:0b:53:85:1c:c9:00:0b:36:da:25:a8:fb:60:30:
ca:1b:a1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:26 2025 by rpki-client