Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a343030303a3a2f33342d3334203d3e20323639303234.roa
File: 323830343a356534633a343030303a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier: symW++G4Qi2AkmFf4YQ8VH1AeLc3U5basQFA42lWs/s=
Subject key identifier: 66:1C:ED:4A:A0:BE:42:5C:E9:82:90:62:26:A0:A2:92:C2:A8:E0:B0
Certificate issuer: /CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Certificate serial: 11EF2D29F9F22FEA2435C174475353E9A7F19848
Authority key identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a343030303a3a2f33342d3334203d3e20323639303234.roa
Signing time: Mon 10 Feb 2025 18:03:52 +0000
ROA not before: Mon 10 Feb 2025 17:58:52 +0000
ROA not after: Mon 09 Feb 2026 18:03:52 +0000
asID: 269024
IP address blocks: 2804:5e4c:4000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ef:2d:29:f9:f2:2f:ea:24:35:c1:74:47:53:53:e9:a7:f1:98:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Validity
Not Before: Feb 10 17:58:52 2025 GMT
Not After : Feb 9 18:03:52 2026 GMT
Subject: CN=661CED4AA0BE425CE982906226A0A292C2A8E0B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:d9:ab:70:96:33:e7:32:ec:7d:9a:c9:5c:
61:9d:d7:a0:92:3c:70:d4:84:9a:7b:dc:11:39:36:
5a:f4:f4:2d:41:50:99:92:32:a6:8b:7c:18:2d:53:
7f:77:9c:a7:cf:0d:21:b4:40:f2:21:9c:97:3f:e0:
ec:a5:01:40:69:b2:cc:b3:a9:9b:2e:b6:df:d8:14:
e3:15:5b:fb:5a:22:90:88:eb:10:f6:48:58:21:a3:
07:a9:42:83:b5:7e:98:77:e7:3c:85:2d:df:c6:a9:
4c:44:82:9d:51:57:f5:c0:4e:24:ed:d7:13:a7:8f:
49:c8:f7:b8:10:12:85:96:47:a8:f1:4f:4d:04:68:
8f:50:3d:9c:6c:a9:a9:97:78:4a:55:dd:d4:2e:45:
0c:3b:8f:a8:9b:5e:47:b7:e9:69:0c:1f:f7:69:26:
5b:87:39:a8:1f:70:b4:f4:86:fb:b7:95:06:c2:fb:
50:34:c0:6a:e0:0f:59:83:fc:0c:b9:7f:34:bc:ce:
cc:b8:1a:61:40:8b:6a:a2:8f:ee:db:b7:e5:76:fd:
36:2f:7c:eb:58:7f:e2:cd:72:9d:1c:0b:33:dd:1d:
17:d2:5c:17:fc:72:c9:61:3a:b8:34:c0:00:82:fd:
a6:31:b2:e3:9f:a9:72:46:6b:45:27:99:70:f0:d8:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1C:ED:4A:A0:BE:42:5C:E9:82:90:62:26:A0:A2:92:C2:A8:E0:B0
X509v3 Authority Key Identifier:
keyid:DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a343030303a3a2f33342d3334203d3e20323639303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5e4c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
54:3b:23:cb:95:d2:9f:f7:0f:8f:ed:65:8f:14:08:08:b5:61:
45:8c:71:51:76:9e:e5:45:00:ca:2b:47:a5:d1:78:62:fa:15:
d8:59:c7:46:44:74:e1:bc:08:c1:5f:7e:2c:a1:f5:57:f4:67:
e8:3f:03:0f:17:06:3b:93:0a:dc:71:26:96:92:93:5e:c3:8b:
c3:46:0e:56:36:0b:35:a3:8d:db:aa:9a:53:70:2f:59:fa:44:
0e:fd:35:37:a9:08:93:e9:1b:38:ba:5a:82:74:35:94:78:d3:
02:57:8b:75:c1:d4:3b:f7:6c:e0:c8:a8:8b:15:92:48:57:d6:
a1:0f:e0:92:f0:49:fb:00:df:0f:ad:a8:37:36:ce:18:6a:5b:
93:95:31:b3:ca:b6:61:17:d9:b4:80:d4:ec:fa:c8:f5:df:3f:
a8:77:1a:d7:49:46:78:7b:11:75:a5:1c:4e:41:1c:0c:9e:1e:
b6:30:db:14:5d:d9:ca:9b:1b:b9:33:d2:8d:38:97:60:1c:6e:
91:ca:07:57:c2:37:af:be:f6:71:5c:e7:d3:ab:d3:40:b3:bc:
9a:1a:01:22:d0:c5:ab:35:d7:13:bd:cc:84:d7:8e:3b:4b:52:
b8:c7:02:e1:8a:73:57:fe:b2:dd:a6:44:c5:75:24:30:ed:f6:
eb:bb:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 08:19:59 2025 by rpki-client