Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa
File: 323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier: WAZHYCIzBkzpLPDZBuUsMATi7EXSzOzNotiBXiEvvvE=
Subject key identifier: 88:AF:88:EF:8F:78:3B:9E:AE:88:9B:13:CF:2F:ED:21:83:5E:B3:5E
Certificate issuer: /CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Certificate serial: 526CC7661371585930A50B2508B73AF843DBE091
Authority key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa
Signing time: Tue 14 Jan 2025 15:48:54 +0000
ROA not before: Tue 14 Jan 2025 15:43:54 +0000
ROA not after: Tue 13 Jan 2026 15:48:54 +0000
asID: 265393
IP address blocks: 2804:3364:ff00::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:6c:c7:66:13:71:58:59:30:a5:0b:25:08:b7:3a:f8:43:db:e0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Validity
Not Before: Jan 14 15:43:54 2025 GMT
Not After : Jan 13 15:48:54 2026 GMT
Subject: CN=88AF88EF8F783B9EAE889B13CF2FED21835EB35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:23:09:69:48:f5:5f:8a:f0:ec:9d:cd:22:
21:1e:ee:c3:23:70:2c:06:f2:08:c7:f9:41:e2:ca:
e0:9d:79:08:8a:67:02:5a:46:aa:a5:97:74:7d:cd:
2e:84:2b:16:18:29:84:29:9e:6e:2a:f9:85:39:32:
6f:15:92:d8:c7:d7:11:75:6f:35:81:92:f0:4f:15:
c6:04:8b:51:43:fa:5d:e4:c2:e9:95:8e:89:39:7f:
d9:cf:b9:68:4d:7e:0b:18:32:1b:95:c6:33:66:91:
33:50:73:e4:a1:2a:48:1a:92:6c:db:40:ae:ad:03:
26:a6:dc:91:57:e6:2e:a2:ff:ef:85:71:59:6d:9c:
93:7b:ed:2f:2e:40:01:ac:2a:17:d7:cf:53:a8:49:
ea:10:40:60:f9:41:76:ae:40:bf:8d:12:e0:87:66:
78:03:1f:c4:79:0d:1c:ec:37:6e:b7:44:91:1e:de:
7d:5e:d3:58:8c:7f:73:53:cb:03:35:6b:4d:28:d4:
e7:89:45:bf:45:7a:4f:3a:b3:6f:c3:4a:9e:dc:1a:
56:21:ba:f8:dd:be:5c:39:d4:53:58:25:c8:fc:0f:
c8:5d:fd:ce:85:34:e0:bc:12:9a:ce:e4:74:2e:a6:
fa:53:53:06:f8:1d:11:9f:e9:dc:45:cc:28:e1:99:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:88:EF:8F:78:3B:9E:AE:88:9B:13:CF:2F:ED:21:83:5E:B3:5E
X509v3 Authority Key Identifier:
keyid:1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a666630303a3a2f34302d3430203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3364:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
51:b3:52:90:06:f6:c4:9c:d0:29:7b:64:23:9b:ae:58:1a:eb:
2a:fe:a2:78:87:1c:7f:fa:4b:ca:57:1f:1c:60:32:9c:58:aa:
66:66:b3:b9:f7:a2:a3:1c:7c:f1:54:ac:11:62:ba:28:9f:73:
34:e9:8f:01:ea:e2:86:e8:00:c3:de:ce:e3:8b:8c:8c:5a:64:
58:3b:5e:2a:50:dd:0e:2c:de:94:1c:d5:db:bc:49:29:fb:6c:
12:2c:fa:7c:b8:c7:37:9a:11:63:6c:ae:35:02:d6:83:4f:7a:
ad:32:5a:20:77:bd:8e:62:82:69:61:26:20:ab:f3:76:2e:b2:
11:f1:5f:01:35:b2:22:4b:b0:d7:1f:3d:4b:9e:2e:17:22:1c:
03:32:ba:9d:7d:af:0b:32:58:de:c9:19:01:74:d0:ba:4b:81:
85:df:c1:a9:dc:2e:a8:0e:65:06:da:aa:a6:b1:ab:0c:6a:4b:
f6:66:92:b9:bf:c2:ec:fe:68:31:04:38:b5:ef:4a:31:a7:4a:
79:ba:bb:b7:3f:b1:62:9c:4f:27:73:13:34:91:7c:7a:04:57:
f6:b9:ad:a4:49:39:9e:0f:bc:1d:b5:87:f1:79:e8:07:eb:26:
5d:00:7c:3d:41:7b:a9:3b:f5:02:e4:44:49:28:5f:7a:24:dc:
cc:dd:1d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:12 2025 by rpki-client