Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33322d3332203d3e20323637303335.roa
File: 323830343a343732383a3a2f33322d3332203d3e20323637303335.roa (raw, json)
Hash identifier: +k++ltX+0KeH3LCWhEM0zs3lrZ3tDFzgIsDWxmxQLfg=
Subject key identifier: 07:32:6B:35:88:25:B7:19:A3:26:D0:65:72:B9:57:32:52:A9:55:14
Certificate issuer: /CN=B889BE89077CF75CB3D33CA36A19B935046D749F
Certificate serial: 165AAF893946D95B470073F9F1BA53EBAA6ADA9F
Authority key identifier: B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33322d3332203d3e20323637303335.roa
Signing time: Fri 07 Feb 2025 17:17:35 +0000
ROA not before: Fri 07 Feb 2025 17:12:35 +0000
ROA not after: Fri 06 Feb 2026 17:17:35 +0000
asID: 267035
IP address blocks: 2804:4728::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:5a:af:89:39:46:d9:5b:47:00:73:f9:f1:ba:53:eb:aa:6a:da:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B889BE89077CF75CB3D33CA36A19B935046D749F
Validity
Not Before: Feb 7 17:12:35 2025 GMT
Not After : Feb 6 17:17:35 2026 GMT
Subject: CN=07326B358825B719A326D06572B9573252A95514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:5a:74:ef:18:37:71:38:72:09:b3:d0:fa:
8d:76:0c:95:08:df:50:f8:7d:e1:c9:fe:db:f7:7b:
1d:75:3b:35:4e:0d:8b:56:b8:cd:57:7d:41:3f:a9:
7f:b0:cd:f9:59:56:ef:84:06:52:7a:f5:b5:c2:95:
a8:c0:39:24:1c:db:fd:1d:16:68:3a:07:51:93:9d:
fa:23:22:33:0e:b7:eb:51:ab:36:61:20:74:66:84:
ff:7f:e9:b1:9b:2a:81:3c:43:fe:30:3d:0b:e1:8e:
97:07:bd:52:32:5f:62:df:f1:8d:da:13:e4:d5:54:
84:ed:25:dc:f2:f5:b6:58:49:ef:f5:97:75:f1:d1:
a4:47:f5:63:cf:f1:6c:f1:c0:58:e9:13:a5:6b:7d:
5c:d9:74:5a:f6:e0:df:f6:d7:7e:95:59:2e:18:32:
09:00:01:ee:7e:20:ab:dd:80:d5:31:8f:94:36:c9:
5e:8d:2a:19:14:08:17:86:65:93:5f:f6:1e:69:59:
70:18:54:f2:61:51:72:e9:7a:9a:4b:51:b9:8f:c4:
80:5a:3e:19:0b:4b:d7:b0:0b:f2:7b:bf:52:94:19:
30:d9:ff:c1:6f:30:0f:8e:30:f8:07:6c:64:e5:36:
12:ba:e2:57:a3:7c:c2:e7:f8:53:27:c8:12:ea:5c:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:32:6B:35:88:25:B7:19:A3:26:D0:65:72:B9:57:32:52:A9:55:14
X509v3 Authority Key Identifier:
keyid:B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B889BE89077CF75CB3D33CA36A19B935046D749F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a3a2f33322d3332203d3e20323637303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4728::/32
Signature Algorithm: sha256WithRSAEncryption
b0:82:69:74:8f:47:e8:26:37:f5:b2:eb:6c:8f:9c:ca:b8:83:
75:11:96:eb:5e:32:1a:91:bf:83:7d:9a:51:c8:06:fa:2b:20:
82:54:85:c9:91:e7:d9:76:d3:7c:88:5b:b5:50:5b:37:b7:5b:
ea:37:e7:52:8e:8f:94:75:f3:07:54:22:a4:18:b8:8a:65:98:
e2:ae:6e:92:e0:29:11:06:b9:30:e7:63:9b:86:d1:40:b3:88:
97:a3:33:e2:ce:96:93:0a:df:d9:5b:91:10:c9:16:16:2c:7e:
8a:4b:67:0e:64:4d:5c:f4:3b:ef:22:b5:24:c7:a8:c7:09:6a:
ac:0b:ec:10:ea:d3:80:b3:ec:eb:6f:0c:a4:6e:fc:40:e1:7e:
70:e8:8d:64:bf:c3:2a:c0:39:da:f6:86:12:f2:c8:31:01:33:
2d:10:23:c2:44:42:c8:0a:9a:7f:ea:47:fd:7e:79:e0:c8:05:
75:8a:5c:5b:8d:ae:96:e9:13:8b:36:6a:e2:6a:e7:b0:b4:b4:
1d:b9:a0:04:13:d9:a3:4e:90:20:67:2d:f8:2a:b5:08:4a:fc:
2d:55:16:4e:47:3a:70:e3:c6:16:ec:3f:6f:9e:76:8a:cb:27:
d4:f5:17:2e:1d:e3:bc:4e:bb:51:39:a8:64:bf:0d:94:5c:e7:
45:4a:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:07 2025 by rpki-client