Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a343030303a3a2f33342d3334203d3e20323639343333.roa
File: 323830343a363438383a343030303a3a2f33342d3334203d3e20323639343333.roa (raw, json)
Hash identifier: LJAqiv7H5JTzLGuNVTqqSfBdZgtA9+m0n54BslCetrI=
Subject key identifier: 9B:31:3F:E3:57:AF:E1:82:D3:EE:CC:30:BE:69:7D:C6:07:74:3D:0D
Certificate issuer: /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial: 2E1AE3542A4604DF3450AE9B20AACF0CBF773399
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a343030303a3a2f33342d3334203d3e20323639343333.roa
Signing time: Thu 04 Apr 2024 23:51:22 +0000
ROA not before: Thu 04 Apr 2024 23:46:22 +0000
ROA not after: Thu 03 Apr 2025 23:51:22 +0000
asID: 269433
IP address blocks: 2804:6488:4000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1a:e3:54:2a:46:04:df:34:50:ae:9b:20:aa:cf:0c:bf:77:33:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Validity
Not Before: Apr 4 23:46:22 2024 GMT
Not After : Apr 3 23:51:22 2025 GMT
Subject: CN=9B313FE357AFE182D3EECC30BE697DC607743D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:0f:cb:cd:b4:e0:8e:66:c7:c7:03:30:1c:
7e:27:99:60:b3:ca:04:b3:eb:83:27:2c:21:8f:f7:
32:a5:0f:08:30:05:13:57:72:a4:ee:a5:59:cb:a2:
5f:29:93:fd:02:4e:a5:d4:73:20:91:0d:6e:07:f1:
f9:8f:4e:0c:3d:28:ca:a1:a1:9d:5d:69:d5:ad:ae:
68:c0:dd:21:d9:e4:01:21:af:fb:78:03:af:2b:bb:
6e:44:da:95:32:cd:ff:a5:f3:61:2f:01:d3:74:1e:
70:e6:a6:f9:ab:60:e4:aa:04:86:c8:e4:8c:10:fb:
c5:7c:40:fe:82:9c:15:42:81:b5:39:69:cb:86:5e:
0d:b5:a9:6c:4f:56:af:44:34:60:a3:34:c9:93:db:
21:c0:47:3b:a7:0d:5b:fc:d4:f6:9c:a1:0b:40:a1:
45:1d:99:59:e0:9b:b5:7d:79:15:37:f5:59:f8:47:
c7:8a:f6:a6:ca:bd:72:c6:b0:58:ec:b0:f9:b8:cf:
a7:2f:1e:23:c5:2e:0b:7b:8e:2c:d2:ec:06:40:12:
85:a5:bb:0f:e0:dc:02:e3:1e:c5:0c:4c:ee:27:fb:
17:2e:d2:af:ae:a0:d5:a7:80:c3:fa:3a:3a:5b:9f:
38:24:bc:a2:2f:00:a0:0f:39:a4:f0:af:a1:0d:d8:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:31:3F:E3:57:AF:E1:82:D3:EE:CC:30:BE:69:7D:C6:07:74:3D:0D
X509v3 Authority Key Identifier:
keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a343030303a3a2f33342d3334203d3e20323639343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6488:4000::/34
Signature Algorithm: sha256WithRSAEncryption
c1:67:d5:95:68:d3:d0:b8:00:2f:71:30:29:c2:9b:cf:bb:b9:
f5:a7:17:0c:bf:0e:72:22:29:83:67:68:ed:6d:92:82:4e:e9:
df:f6:a1:b9:4b:55:64:77:88:d2:bd:93:8e:d9:56:79:55:38:
0a:a3:ea:c8:c0:5c:16:16:06:dc:ee:13:9a:79:73:39:79:48:
52:62:9f:14:6e:b6:b0:4e:d3:51:69:fd:af:95:a8:bc:c3:01:
90:f6:96:8c:c1:8b:5d:78:18:31:6e:0c:58:4d:4c:f5:b5:c0:
2d:de:9a:0e:0a:c5:00:6b:f1:77:a8:4e:89:79:6e:45:41:91:
0a:96:80:e9:16:8f:6b:7d:30:22:25:c3:a8:f8:81:be:31:0d:
ca:65:c2:e7:f6:c3:2a:e3:3c:95:9e:05:e2:37:6e:ef:7c:90:
7e:fe:79:bd:32:68:84:d2:49:ac:08:92:e3:e0:7f:cb:6d:01:
52:4b:cf:94:40:a6:71:45:8a:31:47:53:bc:6c:d6:0c:9b:d6:
d2:e8:15:11:f5:c1:b2:a7:23:cf:bc:5c:e2:fa:4a:7f:0b:95:
ba:35:b7:e4:5d:33:11:5a:ff:71:5b:16:3d:45:48:56:85:26:
8a:88:dc:4a:6a:ee:03:0f:7a:58:c0:a1:1e:b6:82:2c:81:24:
1b:57:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:35:28 2025 by rpki-client