Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/323830343a353062633a3a2f33322d3332203d3e20323638343037.roa
File: 323830343a353062633a3a2f33322d3332203d3e20323638343037.roa (raw, json)
Hash identifier: B0f6uqZTvpJoFROV7ReGGUUZtmekwlCfby+0lbXEtrw=
Subject key identifier: 72:88:2A:88:83:01:35:B6:CE:94:9B:9B:1C:70:B9:CA:F8:C2:EF:F9
Certificate issuer: /CN=18380AF093DF48152B3963AA733B302A175459DB
Certificate serial: 02837A49F16523EB80F9A8D6576BD346EF9B46B4
Authority key identifier: 18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/323830343a353062633a3a2f33322d3332203d3e20323638343037.roa
Signing time: Fri 14 Feb 2025 12:58:45 +0000
ROA not before: Fri 14 Feb 2025 12:53:45 +0000
ROA not after: Fri 13 Feb 2026 12:58:45 +0000
asID: 268407
IP address blocks: 2804:50bc::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:83:7a:49:f1:65:23:eb:80:f9:a8:d6:57:6b:d3:46:ef:9b:46:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18380AF093DF48152B3963AA733B302A175459DB
Validity
Not Before: Feb 14 12:53:45 2025 GMT
Not After : Feb 13 12:58:45 2026 GMT
Subject: CN=72882A88830135B6CE949B9B1C70B9CAF8C2EFF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:8c:18:a4:e7:dd:55:24:89:72:d1:ce:00:
ed:3e:ac:36:af:b2:e1:28:5a:36:2f:68:80:51:59:
43:9e:07:a1:61:d5:f9:1e:52:fd:dc:cc:7f:c0:03:
84:ba:76:e3:ae:5d:29:fd:a0:81:de:57:ce:27:ba:
e2:27:ce:aa:33:66:5c:8a:60:f4:e4:a0:95:93:94:
fb:22:e2:e3:3b:9d:77:ae:96:d4:f4:00:d2:61:b8:
44:73:63:70:e4:07:ae:58:cc:b4:86:bc:31:8c:8a:
38:10:c1:73:0f:d8:59:63:cf:b7:e3:70:cd:eb:01:
dd:fa:28:37:a3:dd:5b:84:2a:0b:36:be:3a:d8:c4:
4d:96:7f:70:64:4b:28:ae:c7:e4:00:27:8e:62:4c:
6c:e6:8d:81:5e:55:78:51:81:c2:45:cf:db:ff:bb:
74:df:73:37:6c:17:d7:93:07:10:05:91:a5:cd:70:
24:a7:d0:28:13:b7:29:60:f5:30:05:f0:aa:6a:ac:
67:13:d6:1b:ef:8c:78:c7:ca:5e:a6:47:5f:2d:1a:
e8:e4:9d:00:77:4c:ff:62:9e:30:94:bf:85:75:d2:
cf:20:5d:60:e7:0b:65:36:3c:79:50:ac:af:57:7c:
8f:fe:2e:2b:a6:23:69:f0:41:0c:f5:fe:d9:01:56:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:88:2A:88:83:01:35:B6:CE:94:9B:9B:1C:70:B9:CA:F8:C2:EF:F9
X509v3 Authority Key Identifier:
keyid:18:38:0A:F0:93:DF:48:15:2B:39:63:AA:73:3B:30:2A:17:54:59:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/18380AF093DF48152B3963AA733B302A175459DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18380AF093DF48152B3963AA733B302A175459DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQ1SGUVepxpKUkGXRuV9y6br8TD5nyXL9saXcmk6Pkc/0/323830343a353062633a3a2f33322d3332203d3e20323638343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:50bc::/32
Signature Algorithm: sha256WithRSAEncryption
83:3b:d0:42:c4:5d:11:7c:65:7d:ea:46:0c:1b:e8:00:f9:5c:
56:a3:72:06:d8:07:1c:70:b6:e5:1e:fd:42:85:1d:04:25:02:
95:b4:84:c5:52:50:27:ac:67:eb:0b:fc:12:b9:58:4d:ff:7f:
78:ac:80:4d:db:4a:93:c4:7e:d5:ad:1d:aa:6c:9e:c6:02:d8:
9a:e9:5d:35:91:9b:31:ff:9d:12:eb:4a:8b:b1:d9:68:93:55:
7d:35:42:48:c8:95:60:eb:3d:4f:ea:f2:1e:e8:a4:5c:c9:b5:
1f:c3:a9:13:db:d6:b5:ec:e3:6f:56:93:9e:b4:86:b1:00:08:
f8:05:f3:c5:af:ed:ff:a0:80:a6:ea:d8:4a:76:cc:23:f1:a4:
ea:82:ba:43:3e:55:2b:9c:ae:69:40:6e:68:3e:7f:b0:74:8a:
54:74:ea:ae:31:c7:f0:24:3c:9b:12:6e:2c:fa:19:42:29:d3:
95:60:52:12:67:fc:86:d1:f9:2c:b3:6a:d2:dd:51:8a:a9:33:
11:69:86:4f:a0:07:86:d3:9c:68:ab:4c:af:7e:99:06:3e:f7:
09:5d:f6:5f:42:01:7f:67:46:0f:c0:3a:ec:ea:dc:0b:7e:14:
cf:c9:8c:b3:d6:dd:cd:20:bb:7a:ee:e4:fa:c8:b6:b1:17:31:
a9:d5:02:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:50:27 2025 by rpki-client