Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
File: 323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier: heLSXN+0JMg4w7NBi3Y0mdPhO4t9C8dnFaqU4+yeVKM=
Subject key identifier: F1:19:C6:0A:84:A5:8F:4A:82:77:3C:08:C9:24:28:50:C6:A7:3D:A9
Certificate issuer: /CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Certificate serial: 6BB4101938CD7D4A06303928CA349D90D539754A
Authority key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
Signing time: Tue 14 Jan 2025 15:49:07 +0000
ROA not before: Tue 14 Jan 2025 15:44:07 +0000
ROA not after: Tue 13 Jan 2026 15:49:07 +0000
asID: 265393
IP address blocks: 2804:3364:300::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b4:10:19:38:cd:7d:4a:06:30:39:28:ca:34:9d:90:d5:39:75:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Validity
Not Before: Jan 14 15:44:07 2025 GMT
Not After : Jan 13 15:49:07 2026 GMT
Subject: CN=F119C60A84A58F4A82773C08C9242850C6A73DA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:08:89:ab:3f:6c:db:b7:4a:83:39:36:89:
a6:fa:3d:2d:b0:d2:d8:58:4a:b8:d0:92:81:10:ef:
4d:e9:6a:ff:7f:cf:47:fb:2b:d7:be:8a:f9:d9:4a:
8e:0f:1d:e7:56:ea:82:db:07:26:bd:ea:95:9a:c2:
46:34:9d:ce:23:36:6c:5c:41:a6:f6:3a:52:39:08:
f3:a6:ac:e8:90:8c:cd:ef:46:ab:60:6e:87:e2:16:
74:9e:7e:2d:ce:e1:b6:8a:d8:b5:0c:90:3b:15:14:
6d:e9:d9:e4:23:eb:17:03:4c:3c:eb:1f:34:1f:a0:
66:2b:00:45:83:1e:52:74:a7:28:2b:ee:92:d0:6c:
95:5b:17:4e:95:4a:95:b6:33:0c:2c:9b:ea:74:1f:
54:bc:0e:99:f4:d7:99:c4:e3:5f:d3:19:7a:7a:77:
a1:a4:d6:59:9f:d4:74:bc:5e:36:6a:55:9e:92:b4:
95:8b:ad:4e:b0:5a:80:20:eb:ef:99:66:28:c9:5e:
3f:ec:3d:7d:85:08:ae:81:ac:8e:f2:bb:59:b1:1d:
b5:01:18:4b:b6:e2:ed:45:76:4f:6a:41:da:9c:30:
3e:8d:3b:33:b0:42:a7:2b:ad:7a:0e:02:b7:fe:3b:
bc:06:95:51:b1:b8:69:8b:d1:ff:ff:9b:29:74:f6:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:C6:0A:84:A5:8F:4A:82:77:3C:08:C9:24:28:50:C6:A7:3D:A9
X509v3 Authority Key Identifier:
keyid:1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3330303a3a2f34302d3430203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3364:300::/40
Signature Algorithm: sha256WithRSAEncryption
a8:f6:6e:ce:20:a5:03:77:c2:fd:df:ad:b4:4f:85:4c:91:45:
55:cc:dc:ed:57:c3:d8:30:b5:f3:c1:e2:76:89:f7:cf:73:c4:
23:aa:e3:2c:5b:49:44:db:02:18:bc:50:1a:ab:20:27:9e:77:
e0:e6:5b:5b:fd:73:d7:84:e9:1d:f2:9c:3a:a0:84:ed:8e:45:
8c:8b:0c:03:82:6a:75:6a:64:3f:74:9f:a8:45:83:46:45:52:
f7:f6:3e:e9:6b:9d:ee:39:e5:ef:ae:f5:68:33:d1:f5:d6:7d:
b4:a2:8d:58:87:ea:45:99:a2:d5:d2:62:28:62:97:d1:7d:69:
df:33:5a:6e:20:fa:85:68:4c:d0:c5:11:ce:8e:c4:4f:34:09:
ba:92:72:7f:e1:3a:65:20:e9:f5:2d:03:f1:46:33:3a:36:76:
7d:25:05:78:71:a0:35:9a:52:01:bd:bc:1a:1e:4b:a8:29:9a:
c3:b3:60:9c:8e:3e:50:4c:f0:e1:4f:b8:92:b8:5a:5b:c9:ed:
72:85:aa:98:d5:45:26:a0:4b:3e:38:43:61:6b:e4:09:30:e4:
bc:7c:c8:98:87:67:c4:28:e7:32:4b:4b:31:61:33:bd:a8:59:
64:a9:68:0d:82:98:e5:df:a4:54:02:2c:7e:d8:da:0e:8d:04:
f4:39:91:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:02 2025 by rpki-client