Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/323830343a316263633a3a2f33322d313238203d3e203631373531.roa
File: 323830343a316263633a3a2f33322d313238203d3e203631373531.roa (raw, json)
Hash identifier: GMyr4/EL4+r2CREOd7jflJkeCQRXgdDT+F5jyxLfyWc=
Subject key identifier: E5:E1:B0:E7:36:8C:8C:B7:64:62:80:6E:72:4E:02:BB:6B:87:7B:05
Certificate issuer: /CN=1B4381A700D83209483A0BD2D3A2787F6A191AD4
Certificate serial: 1162BBE51A85BFA2D9C73FB2E1F04076079EFB48
Authority key identifier: 1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/323830343a316263633a3a2f33322d313238203d3e203631373531.roa
Signing time: Tue 11 Feb 2025 18:13:05 +0000
ROA not before: Tue 11 Feb 2025 18:08:05 +0000
ROA not after: Tue 10 Feb 2026 18:13:05 +0000
asID: 61751
IP address blocks: 2804:1bcc::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:62:bb:e5:1a:85:bf:a2:d9:c7:3f:b2:e1:f0:40:76:07:9e:fb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B4381A700D83209483A0BD2D3A2787F6A191AD4
Validity
Not Before: Feb 11 18:08:05 2025 GMT
Not After : Feb 10 18:13:05 2026 GMT
Subject: CN=E5E1B0E7368C8CB76462806E724E02BB6B877B05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:a6:fd:fc:f2:33:6a:1d:57:8e:25:20:6a:
f8:0e:17:93:9a:49:ae:2e:00:4a:d2:19:8b:0f:4a:
6d:4e:2c:dc:1a:f5:91:ad:f8:bf:17:e2:9b:46:bd:
80:85:e2:93:ec:14:fe:44:8f:71:95:5f:80:65:93:
eb:4d:2b:80:bd:d5:85:24:41:32:3c:1e:a7:73:05:
94:bd:04:9a:68:ef:a2:d5:be:d3:8c:8a:70:b5:32:
25:58:1a:c8:3d:46:87:3f:8e:e9:84:3e:56:64:d4:
64:e5:1f:99:9c:c9:98:a8:9d:ca:50:8e:40:83:2f:
e9:e6:b5:f7:9d:8e:8d:04:de:54:9d:08:5b:e5:c4:
ff:fb:d2:f8:1e:72:d2:ac:33:51:9b:0e:62:0d:e2:
d2:00:a3:92:50:c6:b9:90:c1:47:56:53:bc:d5:46:
7a:4f:8b:f8:4e:82:5a:09:cc:ad:41:60:69:3b:05:
75:da:8b:3e:0b:ef:fc:54:55:6b:1e:93:97:d9:f5:
33:b0:b4:0f:c3:f8:a2:ce:7d:eb:45:d8:b2:8f:a3:
a6:ab:19:24:32:74:d6:e4:cf:44:e0:fa:43:66:57:
fe:8e:8b:db:d5:d8:b4:3a:e1:97:01:68:24:83:08:
90:da:eb:77:2c:b9:15:0d:cf:5f:9e:ad:3f:07:98:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E1:B0:E7:36:8C:8C:B7:64:62:80:6E:72:4E:02:BB:6B:87:7B:05
X509v3 Authority Key Identifier:
keyid:1B:43:81:A7:00:D8:32:09:48:3A:0B:D2:D3:A2:78:7F:6A:19:1A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/1B4381A700D83209483A0BD2D3A2787F6A191AD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4381A700D83209483A0BD2D3A2787F6A191AD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/323830343a316263633a3a2f33322d313238203d3e203631373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1bcc::/32
Signature Algorithm: sha256WithRSAEncryption
8b:74:0a:92:8d:06:c2:68:9b:ba:42:12:2a:19:a6:79:0d:26:
bb:40:7b:30:6e:27:ab:04:cb:d4:1d:d0:f6:34:ad:7c:4d:33:
6c:67:da:c8:5d:84:56:37:f6:65:12:10:a7:2c:39:6e:48:ba:
93:20:a2:b9:91:d3:fc:a8:c2:fe:8f:5f:68:3c:59:de:6d:a7:
0a:12:c8:a2:a4:17:19:d8:a8:04:18:27:14:c0:32:cb:96:10:
ab:d4:41:35:91:29:16:af:c0:e6:54:05:42:c1:f8:9f:b4:b0:
e9:8a:64:f1:61:8b:d7:95:db:be:7c:94:0a:de:74:2b:54:1e:
ee:da:89:9b:29:74:59:36:e3:cd:35:38:ca:78:65:c7:6d:24:
ce:82:5e:d6:fb:9c:34:7e:2b:a4:b0:ad:f3:cf:6d:4d:85:bc:
11:e8:ef:62:5c:5f:8d:20:e7:83:43:4e:2f:5f:85:2a:02:7e:
94:56:a3:79:e1:96:0c:be:48:cf:85:59:07:94:77:17:7c:e9:
60:e6:57:20:0f:02:76:03:94:4a:f5:0e:98:7e:a3:b0:e5:5c:
9e:fb:c2:df:46:2d:6f:b0:78:69:86:9a:64:25:00:a8:c8:a7:
83:67:00:55:16:e5:bf:08:49:9f:ad:0d:bd:7d:31:88:b1:8d:
ea:da:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:10:12 2025 by rpki-client