Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/323830343a393365633a3a2f33322d313238203d3e20323734383039.roa
File: 323830343a393365633a3a2f33322d313238203d3e20323734383039.roa (raw, json)
Hash identifier: bV6ChR13b7OvE0ZvteLlt4jcIzaaT2YpY+PYZzAnkYw=
Subject key identifier: D5:14:45:08:7F:6F:E7:EA:B4:89:25:9B:D0:25:75:F2:67:55:79:0D
Certificate issuer: /CN=1360580557AE0B896D92306D15737D0EB6ED8C6B
Certificate serial: 26863396B01AE33334A88F0A4A0A82386B3CB175
Authority key identifier: 13:60:58:05:57:AE:0B:89:6D:92:30:6D:15:73:7D:0E:B6:ED:8C:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1360580557AE0B896D92306D15737D0EB6ED8C6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/323830343a393365633a3a2f33322d313238203d3e20323734383039.roa
Signing time: Tue 27 May 2025 18:35:28 +0000
ROA not before: Tue 27 May 2025 18:30:28 +0000
ROA not after: Tue 26 May 2026 18:35:28 +0000
asID: 274809
IP address blocks: 2804:93ec::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:86:33:96:b0:1a:e3:33:34:a8:8f:0a:4a:0a:82:38:6b:3c:b1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1360580557AE0B896D92306D15737D0EB6ED8C6B
Validity
Not Before: May 27 18:30:28 2025 GMT
Not After : May 26 18:35:28 2026 GMT
Subject: CN=D51445087F6FE7EAB489259BD02575F26755790D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:91:af:70:8d:8a:5b:58:24:0c:69:be:24:
70:39:6e:87:d8:51:a8:10:46:cc:de:78:4e:08:9d:
a4:3b:0e:3a:38:0c:05:f5:eb:bf:2d:4c:63:05:d8:
72:86:db:f2:85:a5:64:bc:e3:45:3b:75:a4:f5:b2:
88:32:e3:e3:17:dd:15:cb:c9:5a:29:21:26:f0:1e:
87:d7:85:c1:ea:0d:9a:36:c6:f9:aa:e5:66:89:01:
02:14:7c:5e:5f:56:34:5b:dd:44:e2:86:58:8c:e9:
5a:ec:51:07:95:a8:b1:98:13:53:1a:de:2f:40:06:
f4:e0:16:b9:61:93:82:b1:de:63:49:5e:a3:0d:29:
3a:b4:d6:be:ca:ea:e4:78:cd:52:f4:eb:ba:04:61:
33:c7:d6:6e:61:ec:fa:7f:97:6d:3e:71:81:7e:ff:
41:b3:51:2d:ce:9b:14:8a:d6:c7:3f:8e:80:d8:34:
45:1b:9f:8d:d5:45:a8:e0:5e:eb:ab:fc:2f:47:58:
1a:a6:db:2a:b0:9b:41:3e:28:aa:c1:22:77:52:2e:
da:6c:e0:bb:08:ba:e1:b5:75:d4:97:e5:a1:5f:c0:
09:89:e5:c8:6d:cb:8a:a4:05:55:b0:03:7f:aa:55:
23:4a:5e:86:30:8b:d7:6c:cf:21:26:00:c4:fd:bc:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:14:45:08:7F:6F:E7:EA:B4:89:25:9B:D0:25:75:F2:67:55:79:0D
X509v3 Authority Key Identifier:
keyid:13:60:58:05:57:AE:0B:89:6D:92:30:6D:15:73:7D:0E:B6:ED:8C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/1360580557AE0B896D92306D15737D0EB6ED8C6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1360580557AE0B896D92306D15737D0EB6ED8C6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/323830343a393365633a3a2f33322d313238203d3e20323734383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:93ec::/32
Signature Algorithm: sha256WithRSAEncryption
80:fb:5d:5d:27:b8:94:8d:fd:07:c9:a3:db:e3:04:e7:52:75:
d8:a3:ed:7e:ab:20:43:2c:d0:0e:5a:88:8e:bc:23:1b:64:41:
7c:9c:1d:c0:27:85:aa:f8:6f:c4:b5:f1:37:48:b5:94:d7:18:
bb:63:d8:6c:b9:7a:dd:f2:32:51:47:49:36:98:2f:92:1b:79:
60:c9:d6:7f:bd:02:c7:d4:f0:67:85:83:ac:b2:b5:64:8c:36:
e1:15:c8:f3:9a:03:2c:43:b0:7e:03:40:77:b3:cd:39:d7:e5:
c7:c4:be:9f:d2:a6:00:00:5a:8a:a9:f8:71:3b:0d:90:ed:d8:
34:f3:f2:a6:74:db:57:6d:f5:40:f4:d8:fe:bd:46:24:31:e9:
b0:75:4e:1d:a0:18:ec:90:83:dc:1e:76:e0:5a:5e:0c:82:46:
bd:af:25:f0:bf:89:43:05:03:64:ce:9a:e4:63:16:99:a4:13:
85:5b:c3:03:69:83:c8:60:b4:0d:96:b7:32:70:08:c8:1d:ab:
3d:00:f7:09:80:29:d6:57:dd:bf:a6:a5:a0:f0:fa:c0:64:8a:
e7:01:43:b1:72:d3:6c:7b:6c:f8:d5:09:a0:00:ff:d1:22:7f:
b6:d8:fd:5b:c8:aa:ec:78:14:78:fa:2e:99:67:54:5a:81:60:
c4:f1:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:18:22 2025 by rpki-client