Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a3a2f33322d3335203d3e20323638313133.roa
File: 323830343a353833343a3a2f33322d3335203d3e20323638313133.roa (raw, json)
Hash identifier: sXDMUsDGAbwQ4ZlBnf/ywbbm9hkAkrqF6+2YWL93Ww8=
Subject key identifier: 24:CA:75:D6:CF:D1:A7:B4:5A:98:A1:38:A7:F0:4B:8E:24:70:1A:F7
Certificate issuer: /CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
Certificate serial: 2A245F8D28F1013A8810BEE442BAE59AC7D292A6
Authority key identifier: A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a3a2f33322d3335203d3e20323638313133.roa
Signing time: Wed 26 Mar 2025 17:07:10 +0000
ROA not before: Wed 26 Mar 2025 17:02:10 +0000
ROA not after: Wed 25 Mar 2026 17:07:10 +0000
asID: 268113
IP address blocks: 2804:5834::/32 maxlen: 35
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:24:5f:8d:28:f1:01:3a:88:10:be:e4:42:ba:e5:9a:c7:d2:92:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
Validity
Not Before: Mar 26 17:02:10 2025 GMT
Not After : Mar 25 17:07:10 2026 GMT
Subject: CN=24CA75D6CFD1A7B45A98A138A7F04B8E24701AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:03:db:3e:a9:bf:43:91:9a:fa:ee:a5:51:
cc:83:58:bf:9e:54:f1:67:c6:20:75:68:aa:d7:2d:
77:b4:f2:69:89:7e:95:64:eb:99:27:4e:73:f2:c7:
30:25:a9:5b:56:f3:4b:cf:3c:9f:41:c4:1c:c1:a2:
d0:b9:2c:40:76:df:a9:7d:05:39:dc:7b:b9:0a:7b:
bc:8a:05:e8:d8:6e:9c:5f:32:f4:77:13:a5:a5:27:
00:24:94:c1:10:3f:5d:c6:6e:3f:e6:cb:83:4a:ef:
43:c1:cd:0e:7f:ab:fa:8c:b1:f3:27:f4:09:98:29:
eb:14:ab:b7:9d:4b:f5:8d:63:10:ae:41:1b:bc:b9:
5a:85:85:95:dd:be:43:9d:dc:88:fe:04:9b:f0:f9:
bb:33:a9:c5:dd:9a:e1:61:83:a9:da:81:84:89:c1:
2f:e4:b9:c7:13:14:24:99:ba:06:e0:14:28:49:c6:
55:91:58:b4:9f:23:39:21:2f:30:26:22:88:c4:11:
ef:aa:1c:a1:80:93:7a:fc:60:48:a5:da:3d:9a:94:
53:b3:72:5f:ea:87:ef:59:b1:6c:0b:0b:34:42:86:
43:ac:2d:7f:cc:42:90:78:01:c5:7b:45:c2:0a:f5:
6f:b2:d3:65:9b:ac:e7:42:5d:3c:aa:b6:d3:d9:3f:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:75:D6:CF:D1:A7:B4:5A:98:A1:38:A7:F0:4B:8E:24:70:1A:F7
X509v3 Authority Key Identifier:
keyid:A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/A39AA144A61634B60A33E417B9A20C7C061D86A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/323830343a353833343a3a2f33322d3335203d3e20323638313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5834::/32
Signature Algorithm: sha256WithRSAEncryption
1b:98:4e:32:5f:f0:34:f7:67:88:97:6d:92:b2:d2:c3:bc:cf:
2b:98:47:7e:5f:d2:e1:a0:f5:23:46:9c:f3:7b:41:5a:70:91:
97:40:d9:78:e6:ce:a4:af:ff:77:4c:e3:cf:52:b3:97:56:ae:
ce:69:d6:9c:12:64:69:50:51:09:62:34:fe:10:13:95:5e:a0:
cf:1a:3d:78:a7:17:76:4f:33:56:aa:85:63:44:c0:87:3f:71:
c6:b3:de:42:9e:c8:43:fe:a8:1f:ec:98:de:8a:af:d8:87:bb:
51:aa:51:1b:54:22:15:29:1f:9e:82:87:9f:8d:16:ad:b2:bd:
2c:9e:0e:9d:9b:4b:9f:6b:52:fd:ad:7a:b6:c9:9d:84:46:28:
1b:53:12:bf:f3:ff:67:ab:98:89:7b:a3:10:ec:6f:e1:9b:19:
25:83:a3:ad:7a:b1:a9:c0:5f:02:44:83:cc:2c:66:5e:52:ad:
b4:67:f0:b1:ad:4c:24:d6:01:94:9d:5f:75:88:05:23:70:8c:
3f:05:5e:2f:f0:cc:6e:b6:24:5f:e2:4d:43:d2:c2:4c:08:a9:
cb:3b:8b:51:90:f2:a6:9e:fa:0e:9f:82:ad:0e:b5:85:06:06:
3a:75:e6:8c:43:9d:71:17:2d:09:21:e4:e1:1b:e9:45:94:6a:
80:fc:4b:52
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKiRfjSjxATqIEL7kQrrlmsfSkqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM5QUExNDRBNjE2MzRCNjBBMzNFNDE3QjlBMjBDN0Mw
NjFEODZBMzAeFw0yNTAzMjYxNzAyMTBaFw0yNjAzMjUxNzA3MTBaMDMxMTAvBgNV
BAMTKDI0Q0E3NUQ2Q0ZEMUE3QjQ1QTk4QTEzOEE3RjA0QjhFMjQ3MDFBRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAQPbPqm/Q5Ga+u6lUcyDWL+e
VPFnxiB1aKrXLXe08mmJfpVk65knTnPyxzAlqVtW80vPPJ9BxBzBotC5LEB236l9
BTnce7kKe7yKBejYbpxfMvR3E6WlJwAklMEQP13Gbj/my4NK70PBzQ5/q/qMsfMn
9AmYKesUq7edS/WNYxCuQRu8uVqFhZXdvkOd3Ij+BJvw+bszqcXdmuFhg6nagYSJ
wS/kuccTFCSZugbgFChJxlWRWLSfIzkhLzAmIojEEe+qHKGAk3r8YEil2j2alFOz
cl/qh+9ZsWwLCzRChkOsLX/MQpB4AcV7RcIK9W+y02WbrOdCXTyqttPZP7bpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJMp11s/Rp7RamKE4p/BLjiRwGvcwHwYDVR0j
BBgwFoAUo5qhRKYWNLYKM+QXuaIMfAYdhqMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9IYWRGU2hlMkJZNW14M0U3NDhVZmtKWDZuelF4SkxDVkZaOXZrc0oxVG1j
LzAvQTM5QUExNDRBNjE2MzRCNjBBMzNFNDE3QjlBMjBDN0MwNjFEODZBMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BMzlBQTE0NEE2MTYzNEI2MEEz
M0U0MTdCOUEyMEM3QzA2MUQ4NkEzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9I
YWRGU2hlMkJZNW14M0U3NDhVZmtKWDZuelF4SkxDVkZaOXZrc0oxVG1jLzAvMzIz
ODMwMzQzYTM1MzgzMzM0M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM4MzEz
MTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARYNDANBgkqhkiG9w0BAQsFAAOCAQEAG5hOMl/wNPdn
iJdtkrLSw7zPK5hHfl/S4aD1I0ac83tBWnCRl0DZeObOpK//d0zjz1Kzl1auzmnW
nBJkaVBRCWI0/hATlV6gzxo9eKcXdk8zVqqFY0TAhz9xxrPeQp7IQ/6oH+yY3oqv
2Ie7UapRG1QiFSkfnoKHn40WrbK9LJ4OnZtLn2tS/a16tsmdhEYoG1MSv/P/Z6uY
iXujEOxv4ZsZJYOjrXqxqcBfAkSDzCxmXlKttGfwsa1MJNYBlJ1fdYgFI3CMPwVe
L/DMbrYkX+JNQ9LCTAipyzuLUZDypp76Dp+CrQ61hQYGOnXmjEOdcRctCSHk4Rvp
RZRqgPxLUg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:17 2025 by rpki-client