Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a3a2f33332d3333203d3e20323730343337.roa
File: 323830343a366266383a3a2f33332d3333203d3e20323730343337.roa (raw, json)
Hash identifier: /KnthYbWlnqEx7SVgjSOVLXHoDUpz/49AWsYDEGSXGA=
Subject key identifier: 8B:56:3C:85:E3:6C:E5:9C:14:83:1A:F9:30:12:1C:F3:A4:0F:4F:3C
Certificate issuer: /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial: 185B1D5E1B23553A11E0910F24EA76F8D95D7FD2
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a3a2f33332d3333203d3e20323730343337.roa
Signing time: Wed 03 Apr 2024 20:05:23 +0000
ROA not before: Wed 03 Apr 2024 20:00:23 +0000
ROA not after: Wed 02 Apr 2025 20:05:23 +0000
asID: 270437
IP address blocks: 2804:6bf8::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5b:1d:5e:1b:23:55:3a:11:e0:91:0f:24:ea:76:f8:d9:5d:7f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
Validity
Not Before: Apr 3 20:00:23 2024 GMT
Not After : Apr 2 20:05:23 2025 GMT
Subject: CN=8B563C85E36CE59C14831AF930121CF3A40F4F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:7f:b6:a9:10:10:f6:4a:db:41:36:d7:17:
22:48:8b:17:62:d6:7d:f2:48:43:4a:ee:5c:70:0b:
6c:f5:75:2b:2d:9d:8c:7e:a5:10:b8:7c:6e:40:bf:
5d:8d:16:57:0c:fc:a5:10:69:25:02:22:8b:0b:62:
d4:45:85:8b:04:e4:80:cb:4d:d8:28:02:8d:b7:ff:
04:08:f5:2e:85:8d:45:90:91:fb:f4:e5:bc:83:97:
67:73:56:1b:0b:a0:84:43:52:dc:0e:01:e6:ac:34:
9d:2f:61:7d:1d:2b:d6:57:3a:78:92:52:92:61:fb:
d6:99:21:bd:5e:39:c4:4d:22:9b:42:91:5a:0d:fa:
1c:13:3e:94:a7:96:e7:33:e4:ef:ca:32:7f:7d:94:
d1:85:78:bd:65:61:6f:9a:f9:a8:56:42:be:85:ca:
1d:28:10:6e:3e:5a:2f:58:82:6a:9f:4b:d2:bd:ff:
50:7f:a9:2a:2c:04:ba:e2:21:1b:4e:cc:33:14:5f:
25:1c:de:27:fd:8b:da:ee:dd:03:65:3b:cc:0e:37:
04:a2:e7:96:84:a8:34:60:cf:69:34:52:f4:bb:ca:
6a:31:aa:29:48:28:28:f5:4a:d4:80:e0:42:9f:e0:
60:79:ab:8d:9a:48:9a:ab:83:c0:a7:4e:f3:0a:7b:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:3C:85:E3:6C:E5:9C:14:83:1A:F9:30:12:1C:F3:A4:0F:4F:3C
X509v3 Authority Key Identifier:
keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a3a2f33332d3333203d3e20323730343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6bf8::/33
Signature Algorithm: sha256WithRSAEncryption
06:85:08:71:92:d3:52:bd:67:27:ef:b5:20:ea:9d:4a:2c:33:
d5:22:a1:23:e0:29:14:7f:31:82:c6:34:b5:7d:a8:bc:31:60:
a8:c5:2f:4d:4c:16:52:42:98:48:90:cd:3c:ad:df:f2:6b:b6:
21:a9:c8:e9:6b:8c:53:16:76:d6:47:00:da:32:0c:92:3d:7f:
64:a9:e9:e3:18:46:a2:d9:7a:53:e8:6f:e0:d9:0f:b0:12:77:
8a:b2:0d:ec:d5:01:d1:32:fa:5a:89:7f:52:75:e6:aa:fd:62:
72:92:3c:8e:d8:e9:31:30:d4:42:ac:09:b3:e3:4c:58:13:bf:
79:05:49:a8:14:a0:48:14:f9:8b:f6:bf:6f:b7:2c:8d:f6:14:
88:6c:6b:57:43:37:c5:c6:fb:e4:43:30:a3:19:7f:95:26:a4:
82:5e:b4:89:b8:11:32:9a:e5:7e:6d:7f:77:36:16:1b:8c:65:
21:97:e4:a6:24:7a:e0:e4:11:45:2a:b3:30:a2:6e:fc:66:bb:
96:0e:cb:08:9a:53:0e:24:96:38:6e:fd:ce:60:67:07:71:06:
55:8c:20:16:2d:51:80:e9:06:bb:b8:4e:c3:b2:0b:31:58:88:
44:bd:5b:1a:e6:c3:fc:93:09:6d:c7:a5:ac:72:70:ad:85:21:
39:18:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:26:17 2025 by rpki-client