Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
File: 323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier: TqjuIFNexb7ryGNizo35mnzPtEBTsnMjvrx/6Zb3UGM=
Subject key identifier: 3E:3E:41:A9:E0:4C:27:BE:82:BC:61:CE:8E:BA:1F:9D:79:23:44:0C
Certificate issuer: /CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Certificate serial: 502AF12083B15433041960C62188061BAB6C7CFE
Authority key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
Signing time: Tue 14 Jan 2025 15:49:09 +0000
ROA not before: Tue 14 Jan 2025 15:44:09 +0000
ROA not after: Tue 13 Jan 2026 15:49:09 +0000
asID: 265393
IP address blocks: 2804:3364:200::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2a:f1:20:83:b1:54:33:04:19:60:c6:21:88:06:1b:ab:6c:7c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Validity
Not Before: Jan 14 15:44:09 2025 GMT
Not After : Jan 13 15:49:09 2026 GMT
Subject: CN=3E3E41A9E04C27BE82BC61CE8EBA1F9D7923440C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:3c:b9:fa:36:03:5f:91:a5:6b:b0:b9:7e:
f1:37:c4:e8:13:7a:02:0f:0b:94:7d:fb:37:2f:41:
ba:d8:1a:a1:56:47:91:35:b4:6d:b7:d2:61:c5:aa:
47:94:d9:a6:e6:5d:7f:d8:49:ae:c3:7e:85:48:61:
e1:4c:06:5e:58:d3:2d:d3:e5:43:a3:a4:23:78:72:
5f:22:b2:da:2f:38:a6:6d:9a:7f:c3:42:92:01:14:
3a:6a:0a:c2:43:04:33:b1:02:c2:49:bf:4a:99:c1:
5f:19:38:39:98:f2:7b:5a:16:04:cc:fb:4a:61:83:
f2:24:89:99:7f:66:d5:cc:db:8e:97:7f:c3:10:83:
51:c1:16:da:4d:1b:53:fc:0b:53:8e:e4:99:65:b9:
71:6f:ff:db:23:a4:75:6f:1f:64:71:78:87:eb:ab:
3a:06:ce:7f:b7:df:19:4e:99:68:a1:85:21:95:61:
39:dd:9d:9b:bb:93:9d:09:ed:4c:02:8f:69:71:ef:
34:11:99:d4:08:13:e8:ba:da:65:53:b3:06:37:b8:
c0:13:77:7f:9d:ff:bc:4b:51:c3:e3:ab:cb:d0:5b:
c2:88:9b:a5:6b:f1:ca:09:40:32:7f:e3:61:e8:7b:
35:8f:29:44:ec:dc:71:ba:9b:54:9d:27:ed:9d:9b:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3E:41:A9:E0:4C:27:BE:82:BC:61:CE:8E:BA:1F:9D:79:23:44:0C
X509v3 Authority Key Identifier:
keyid:1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3230303a3a2f34302d3430203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3364:200::/40
Signature Algorithm: sha256WithRSAEncryption
30:79:9f:20:ea:d9:82:ff:54:52:4d:90:bd:6f:38:0f:e2:f5:
5f:83:b1:c8:d9:13:e9:e9:e8:35:c8:93:b8:fd:7a:62:c7:23:
9f:48:65:00:e5:0b:16:51:08:f5:82:64:78:0b:85:bc:d8:4a:
a8:05:3f:66:ae:54:e2:3a:1f:5b:d0:15:6b:a3:81:39:85:06:
97:39:d9:76:35:17:24:d6:e3:65:fa:03:31:2e:8b:f1:66:13:
8d:75:68:51:0d:bf:ec:aa:b5:b6:b4:55:19:40:f0:2c:b4:30:
cb:00:8b:6f:ea:d0:4f:8a:a4:b2:7f:82:fc:98:fa:ab:e2:9f:
69:1f:dd:0f:bb:a2:50:46:fe:ec:aa:ef:c3:04:c3:ea:1c:db:
09:14:91:3d:63:be:ad:89:64:94:88:b4:98:21:f4:00:8b:f6:
f9:f5:b1:89:3a:db:16:f2:24:9f:ce:2d:3d:bc:83:d6:f7:45:
da:9c:78:ab:67:de:04:cb:e4:20:35:5c:4f:e8:9e:cb:a1:cf:
e8:2a:ab:f3:77:7a:7f:e3:55:37:d2:65:f5:e4:5f:04:e6:18:
0b:70:bf:96:39:9f:45:e7:d3:59:4d:b7:80:03:77:08:34:da:
98:79:00:82:b1:e2:81:60:66:65:3f:6b:34:f4:96:df:10:13:
29:1e:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:03 2025 by rpki-client