Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33342d3334203d3e20323633393430.roa
File: 323830343a323831383a3a2f33342d3334203d3e20323633393430.roa (raw, json)
Hash identifier: /hCwayeJ7zQ/OOc1kzgqtD6Yt7kUQpe52mw4MArIu+g=
Subject key identifier: 2C:68:89:C5:D7:EE:4A:B4:76:B7:21:ED:9F:9C:08:0E:08:AE:A1:30
Certificate issuer: /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial: 04FFFE2549AC7BD2897DEE5B42E96C13BBB57F5C
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33342d3334203d3e20323633393430.roa
Signing time: Wed 09 Apr 2025 14:26:38 +0000
ROA not before: Wed 09 Apr 2025 14:21:38 +0000
ROA not after: Wed 08 Apr 2026 14:26:38 +0000
asID: 263940
IP address blocks: 2804:2818::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ff:fe:25:49:ac:7b:d2:89:7d:ee:5b:42:e9:6c:13:bb:b5:7f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Validity
Not Before: Apr 9 14:21:38 2025 GMT
Not After : Apr 8 14:26:38 2026 GMT
Subject: CN=2C6889C5D7EE4AB476B721ED9F9C080E08AEA130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:65:7b:94:46:4f:44:35:e2:2e:77:8b:69:
75:d8:dc:68:9a:a0:20:0c:8e:4b:76:a4:bd:2e:8c:
a0:3c:f3:f0:16:20:4a:88:4d:5b:c9:d8:35:27:ad:
b4:b6:78:9b:66:b5:a5:61:e6:31:d5:e2:10:6d:f8:
42:82:1c:de:f6:0b:c4:d0:0a:ab:64:ad:a5:f2:ef:
39:67:99:3b:6d:db:e2:76:33:9a:d8:23:f9:fd:52:
07:fa:3c:ed:ce:b3:1f:f1:cf:4f:1b:ae:9f:2e:54:
b7:be:78:a6:4d:f0:d6:e3:2f:e5:f2:f0:b7:56:d8:
2a:fa:27:b2:64:04:d7:5a:bd:df:ab:76:b7:3c:b3:
36:87:55:d2:39:a4:6a:9c:9f:93:86:40:a5:90:2b:
d4:1d:ff:42:1e:a2:83:1a:e0:7a:f4:f3:e3:45:87:
08:c8:fa:56:5d:78:a9:6f:b8:79:43:2b:53:89:f8:
f5:8b:03:51:39:9a:e2:e6:36:d1:06:df:fe:cd:97:
f0:e1:d5:20:7e:9d:7f:26:ac:32:a5:67:62:23:6e:
b5:a3:28:1b:33:5e:72:bc:37:ef:89:be:c2:b9:82:
3a:39:50:c9:6f:e6:81:e4:1b:a3:fc:f7:e1:77:28:
d6:fd:83:0e:76:87:dc:e5:1e:7f:07:76:1d:ef:a2:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:68:89:C5:D7:EE:4A:B4:76:B7:21:ED:9F:9C:08:0E:08:AE:A1:30
X509v3 Authority Key Identifier:
keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33342d3334203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2818::/34
Signature Algorithm: sha256WithRSAEncryption
09:40:cb:10:77:40:60:21:9d:07:d0:cc:c2:9f:d1:02:ff:cf:
e6:0e:1f:33:8d:67:fe:67:7c:91:93:33:39:c8:27:bb:01:e6:
14:f1:8f:3b:76:db:0a:b9:48:8e:ba:3a:a9:63:cc:e9:1f:a9:
3f:58:ac:29:20:d3:6b:ac:82:ce:1e:78:9a:f8:90:7f:df:df:
bb:25:26:11:e2:ee:b5:ca:c9:87:f0:ef:80:34:45:77:1c:53:
05:a3:6e:5f:60:4b:a2:46:00:69:2b:3c:95:d5:c8:6b:de:ab:
94:55:be:98:b7:3c:62:47:bb:13:ee:53:bb:42:31:2a:de:53:
8d:e4:83:0b:4e:db:21:75:d3:a5:4e:82:96:11:52:b4:e1:46:
e1:e7:6a:86:5f:07:2c:3b:03:59:07:18:31:cc:03:0d:f8:06:
d0:44:03:7a:29:ca:c7:ca:64:42:07:a0:3b:19:d2:fe:6d:40:
fd:9c:7c:6a:6d:cb:93:8d:1a:aa:c1:38:a6:f8:a7:22:06:a2:
16:49:32:2f:6f:5e:ce:95:c1:87:80:2c:c8:4c:5f:99:53:34:
db:e3:42:2b:0c:55:b2:2b:04:b2:03:cd:41:c8:fd:ff:30:34:
71:cb:1d:bd:e7:6a:e8:09:3b:1b:d3:dc:20:35:3e:d0:a3:f1:
d9:a3:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:40 2025 by rpki-client