Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/323830343a343632633a3a2f33322d3332203d3e20323636393733.roa
File: 323830343a343632633a3a2f33322d3332203d3e20323636393733.roa (raw, json)
Hash identifier: x64pqYckKTSLxuStG4UHZ4Uym/zmotF0MKg5Dy8dzYI=
Subject key identifier: 56:6C:58:19:54:B9:B6:30:C0:D3:DB:8B:EC:DB:70:03:AB:F6:FF:3F
Certificate issuer: /CN=961C10291E95158CF12D8EAA6CC5D0B05DE85838
Certificate serial: 7C174DFC7353739883B16156084E20D95C74C21B
Authority key identifier: 96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/323830343a343632633a3a2f33322d3332203d3e20323636393733.roa
Signing time: Thu 06 Mar 2025 03:16:55 +0000
ROA not before: Thu 06 Mar 2025 03:11:55 +0000
ROA not after: Thu 05 Mar 2026 03:16:55 +0000
asID: 266973
IP address blocks: 2804:462c::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:17:4d:fc:73:53:73:98:83:b1:61:56:08:4e:20:d9:5c:74:c2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961C10291E95158CF12D8EAA6CC5D0B05DE85838
Validity
Not Before: Mar 6 03:11:55 2025 GMT
Not After : Mar 5 03:16:55 2026 GMT
Subject: CN=566C581954B9B630C0D3DB8BECDB7003ABF6FF3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:98:ea:0d:26:68:90:bb:36:48:37:da:8a:
f3:cf:a6:df:81:6c:cd:60:cc:2f:29:c8:36:85:bc:
fe:f9:4d:0a:ed:eb:85:ad:65:51:57:6e:81:5f:7f:
8a:10:89:69:80:9e:eb:e1:de:e0:3a:e9:c0:4f:78:
70:4b:30:83:6c:e1:f6:ca:bd:06:9a:02:c3:df:a8:
60:b4:42:1c:96:e3:8c:6e:16:ce:dd:da:f0:cd:11:
0e:17:7e:41:13:3f:4f:31:3c:da:05:27:73:40:52:
82:a0:39:04:28:66:60:e7:9f:dd:13:e2:f8:a6:4e:
cc:b8:56:55:76:84:b3:52:be:d5:4a:d2:80:dc:d6:
4d:9f:04:92:63:9f:b2:17:43:dd:a5:c8:d0:87:70:
0a:ea:71:2d:48:08:ba:8b:95:2a:b6:e0:5b:12:e1:
03:04:7d:8c:8a:5d:11:d8:ee:93:11:33:f9:04:66:
8a:2e:5d:25:26:e9:23:b0:e3:da:d5:c5:3f:8a:ba:
ff:66:44:d5:56:58:0a:e0:e0:dc:94:8f:a4:fc:40:
16:e3:c1:b6:c0:9e:34:4c:6a:4c:e2:af:63:43:85:
d1:69:ed:1e:d6:29:f3:f4:03:2d:0a:b7:8b:ae:86:
75:cc:0d:61:c9:0b:13:3e:81:12:c1:c4:0e:72:70:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6C:58:19:54:B9:B6:30:C0:D3:DB:8B:EC:DB:70:03:AB:F6:FF:3F
X509v3 Authority Key Identifier:
keyid:96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/323830343a343632633a3a2f33322d3332203d3e20323636393733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:462c::/32
Signature Algorithm: sha256WithRSAEncryption
1a:44:f3:68:ac:99:f0:94:f4:3e:7e:be:6a:76:cd:f5:a9:65:
da:b8:f3:24:e8:73:73:3b:bc:69:15:3f:95:d2:81:29:ed:e1:
c2:b2:2f:31:b1:4c:6e:af:46:2a:06:1c:8d:40:47:f4:bd:10:
26:3d:7b:a6:95:db:00:8b:fd:65:f9:88:a5:c7:60:49:4a:de:
8d:f4:9a:0f:6a:d2:86:75:d1:f4:18:59:58:b7:f4:46:32:7e:
17:90:2a:08:11:97:e2:92:71:09:fa:f8:a4:e4:dc:9c:a1:f6:
c0:15:fe:af:cd:4c:b7:6c:60:dd:85:76:4a:82:08:0e:d2:5e:
d1:b1:99:9d:54:48:d2:39:84:57:d8:49:12:97:9c:9f:fc:3f:
28:cc:4b:cd:55:43:60:61:3a:6d:20:56:98:07:47:e1:cc:92:
7e:4d:8d:c1:dd:ba:4a:ce:b7:aa:e7:19:61:a5:94:c4:5b:87:
1d:1d:72:8e:36:43:26:d1:e0:04:bd:91:03:d8:91:a6:08:0d:
4d:4c:b5:28:5c:95:30:1d:1d:d2:a1:e8:4d:5d:33:8b:36:1a:
b5:c9:75:c8:eb:34:a1:30:d2:80:3c:cf:79:b5:df:ed:d5:65:
54:00:28:40:ac:19:93:08:11:df:74:9f:d4:79:b5:e0:87:7f:
11:f1:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:49:12 2025 by rpki-client