Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33332d3333203d3e20323639303234.roa
File: 323830343a356534633a3a2f33332d3333203d3e20323639303234.roa (raw, json)
Hash identifier: g2AhGsWS9PFzXlJP/ZeI52Xz+7gmFJYsRe0UGVIHPqc=
Subject key identifier: 40:DA:F8:59:DB:E9:59:1D:6D:0D:26:E5:19:18:C7:E1:00:F5:B3:10
Certificate issuer: /CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Certificate serial: 54194DB7F0CD18CC9220BAC1FC2BFB4B62A162A6
Authority key identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33332d3333203d3e20323639303234.roa
Signing time: Mon 10 Feb 2025 18:03:52 +0000
ROA not before: Mon 10 Feb 2025 17:58:52 +0000
ROA not after: Mon 09 Feb 2026 18:03:52 +0000
asID: 269024
IP address blocks: 2804:5e4c::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:19:4d:b7:f0:cd:18:cc:92:20:ba:c1:fc:2b:fb:4b:62:a1:62:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Validity
Not Before: Feb 10 17:58:52 2025 GMT
Not After : Feb 9 18:03:52 2026 GMT
Subject: CN=40DAF859DBE9591D6D0D26E51918C7E100F5B310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:ef:db:36:70:25:89:4d:b1:9e:ad:87:46:
67:5a:78:ba:f5:46:5e:a2:0f:31:88:1c:aa:59:00:
08:a6:9a:b5:29:9a:1f:da:08:0f:81:28:c0:55:33:
81:2a:63:6d:84:fc:59:52:b6:d3:20:37:cf:04:b6:
13:79:40:bd:90:26:0c:a8:a3:17:5d:4c:d0:f5:8b:
86:d3:a0:c0:0a:f1:19:7e:12:f9:68:2e:33:58:4f:
5e:de:76:9d:38:16:17:51:2a:5d:2a:14:fd:3b:14:
1c:d4:1b:63:f2:c5:76:d6:a4:52:b3:fe:bc:9d:26:
86:e8:ca:7d:e7:f2:ab:44:b2:81:61:47:c4:2d:92:
a1:ed:2e:31:39:ef:6e:7d:a7:2f:34:11:47:45:7c:
54:f9:e8:16:e5:20:e3:bb:51:ef:7e:3a:82:ea:e9:
9c:da:7f:c8:b2:b0:4a:5c:9b:19:05:57:2d:fe:09:
e6:af:18:e5:b5:38:e1:be:55:0f:c1:33:16:aa:fd:
d6:69:d7:6b:5e:8d:db:a2:32:63:84:0b:3c:ce:61:
75:4c:96:e5:6f:c4:b7:a4:a5:a4:09:c3:8f:59:c7:
a5:c2:bf:94:b9:ab:8f:5b:ae:bf:13:58:48:3b:96:
93:d6:03:58:b9:c4:37:28:22:3b:35:0a:4c:2f:f7:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:F8:59:DB:E9:59:1D:6D:0D:26:E5:19:18:C7:E1:00:F5:B3:10
X509v3 Authority Key Identifier:
keyid:DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33332d3333203d3e20323639303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5e4c::/33
Signature Algorithm: sha256WithRSAEncryption
55:75:3a:12:8f:08:d7:01:e4:bc:de:10:a1:f1:ea:99:57:dc:
f9:ce:ae:8b:23:9b:01:a5:c8:ce:0d:0b:2f:80:a6:d4:d8:7f:
98:88:30:c6:c1:9c:bc:39:2e:d7:6c:f4:0a:79:c3:ff:ee:28:
8c:e6:c3:61:01:cb:5b:b3:e2:fa:3e:5c:ec:d6:ae:51:e1:b2:
e5:1a:93:08:8e:c2:44:1f:d6:80:2c:27:30:9b:b5:14:81:7a:
a4:bb:15:7b:1b:a5:a5:20:3d:15:4a:fa:a5:e4:14:58:c7:f6:
6b:61:54:04:95:73:f2:09:8e:ae:61:54:de:62:19:a5:39:57:
02:d5:cd:e5:d9:31:a0:25:cb:9b:1a:aa:34:cb:c2:d0:6a:06:
b8:44:5e:a8:5e:63:b6:b9:3b:a9:dd:19:17:7a:7d:40:a7:b7:
5a:2f:8c:07:b9:5b:f6:3c:7f:93:5d:43:13:10:06:47:89:e1:
f6:2c:44:61:d9:36:c3:57:fc:0c:db:fa:8a:d1:29:a0:4e:f9:
93:88:9b:70:d6:36:de:49:b2:3d:21:2c:1e:40:11:3c:84:81:
20:2a:77:49:52:a2:05:f2:45:2b:ac:d0:64:d4:62:ed:04:9a:
fc:8a:85:82:f6:4f:7c:33:dc:c7:3c:ea:7c:12:10:2d:e6:11:
8b:79:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:08 2025 by rpki-client