Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/323830343a6531383a3a2f33322d3438203d3e203532353434.roa
File: 323830343a6531383a3a2f33322d3438203d3e203532353434.roa (raw, json)
Hash identifier: NYBc29pxmECkTnB1ngvikcdECEEU1VyN3REN2qPvwOY=
Subject key identifier: 60:E0:5D:EA:52:60:12:37:3D:19:65:0D:C8:D6:F0:FF:A4:6F:40:6C
Certificate issuer: /CN=CB14FE80265F8727559A5009292EBBC26EE55F31
Certificate serial: 44DF87240B9123A073C0BD7E093364EC9EE7A4A2
Authority key identifier: CB:14:FE:80:26:5F:87:27:55:9A:50:09:29:2E:BB:C2:6E:E5:5F:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/323830343a6531383a3a2f33322d3438203d3e203532353434.roa
Signing time: Mon 16 Sep 2024 13:46:14 +0000
ROA not before: Mon 16 Sep 2024 13:41:14 +0000
ROA not after: Mon 15 Sep 2025 13:46:14 +0000
asID: 52544
IP address blocks: 2804:e18::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:df:87:24:0b:91:23:a0:73:c0:bd:7e:09:33:64:ec:9e:e7:a4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB14FE80265F8727559A5009292EBBC26EE55F31
Validity
Not Before: Sep 16 13:41:14 2024 GMT
Not After : Sep 15 13:46:14 2025 GMT
Subject: CN=60E05DEA526012373D19650DC8D6F0FFA46F406C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:4b:b6:45:52:25:fd:00:a7:10:7c:c1:18:
e1:70:84:6d:2b:3d:c5:3d:72:e7:9a:54:1d:95:65:
29:f6:da:50:b7:c1:0f:ed:d6:fa:2a:62:f5:79:5a:
b3:da:d8:44:8e:35:59:e9:dc:68:92:15:45:bb:36:
b6:52:da:d6:ff:c1:86:4b:41:c7:16:79:c1:8f:60:
82:25:93:e9:8b:d4:39:3f:a8:3f:cb:73:d7:56:73:
63:07:f2:cf:fd:95:75:99:6f:55:cd:d7:f3:98:b6:
d2:55:d6:c8:ca:62:ef:33:cb:5f:c8:fd:14:69:cd:
e4:4a:13:3a:12:af:d7:1f:51:cf:85:72:1e:c9:42:
96:ac:1b:e5:57:ab:c8:ab:4e:1e:c9:64:1f:9f:b3:
dd:be:74:eb:28:0c:ea:fd:bb:c1:68:7a:fe:2c:be:
ee:18:dc:a1:a9:18:19:0d:76:56:1d:b4:86:bd:5e:
d4:83:08:3f:4a:05:86:f6:f7:d8:aa:e2:7d:3c:0a:
d3:fe:ed:62:43:ff:62:dd:27:35:23:b6:a7:aa:e7:
7f:58:b2:c9:3f:75:e8:84:d7:58:62:5b:5b:9b:e7:
7c:14:58:b1:a3:4a:59:1b:3c:f1:5c:d7:e1:e2:26:
09:71:2a:66:df:a3:60:ad:66:89:3f:cc:5c:39:8c:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:5D:EA:52:60:12:37:3D:19:65:0D:C8:D6:F0:FF:A4:6F:40:6C
X509v3 Authority Key Identifier:
keyid:CB:14:FE:80:26:5F:87:27:55:9A:50:09:29:2E:BB:C2:6E:E5:5F:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/323830343a6531383a3a2f33322d3438203d3e203532353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e18::/32
Signature Algorithm: sha256WithRSAEncryption
af:7b:07:d0:e6:b1:29:d9:0b:84:6d:90:c8:c8:26:d0:6d:a2:
f9:48:f7:92:58:94:b6:10:62:25:14:b2:8b:81:81:c4:a0:f8:
c5:7b:52:1a:dc:90:be:ca:49:35:5c:08:8d:3b:f2:0a:4e:ed:
2f:c1:07:86:b6:80:92:6e:a4:31:36:07:9a:56:e5:66:4f:b6:
9c:5f:43:77:77:10:1c:b2:6a:d6:5b:07:8e:03:60:60:cc:44:
98:32:12:5e:f8:f0:2c:67:49:e8:ec:1d:64:83:b4:af:43:83:
7b:3e:19:d3:1b:04:35:f9:ec:0d:50:76:03:f8:28:aa:29:de:
bc:91:70:06:eb:a5:97:d5:39:27:9c:3b:22:07:f5:89:ef:7d:
ae:f6:ef:77:69:87:3b:ca:64:08:6d:c6:fc:ed:a9:3a:60:80:
f7:8a:ef:7e:bb:c4:90:40:04:91:02:16:25:7f:fa:3f:0b:39:
ae:c3:c9:a2:a8:62:34:d3:f7:b0:51:36:f2:8b:36:63:a7:da:
fe:cb:16:9c:ab:85:d5:ce:02:d0:1a:76:92:29:4e:af:31:c2:
aa:bd:23:f6:24:8c:2b:97:a4:79:d7:53:1c:cc:58:50:61:d4:
cf:30:dc:96:b4:e3:57:90:81:b6:29:c8:6d:22:85:3e:8a:19:
80:9d:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:29:16 2025 by rpki-client