Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa
File: 323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa (raw, json)
Hash identifier: 7aY3WisCSd0l6+avtSM6r9jUt9d+NhqsQ5MAnG2/DmQ=
Subject key identifier: 86:44:F5:C1:B1:86:C2:E3:C8:04:97:F5:E7:DE:80:9B:85:4B:AB:53
Certificate issuer: /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial: 30876ECFBAB958F902356A5977F9E7E0DA97927A
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa
Signing time: Sat 06 Jul 2024 01:42:51 +0000
ROA not before: Sat 06 Jul 2024 01:37:51 +0000
ROA not after: Sat 05 Jul 2025 01:42:51 +0000
asID: 267350
IP address blocks: 2804:4c1c:4000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:87:6e:cf:ba:b9:58:f9:02:35:6a:59:77:f9:e7:e0:da:97:92:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Validity
Not Before: Jul 6 01:37:51 2024 GMT
Not After : Jul 5 01:42:51 2025 GMT
Subject: CN=8644F5C1B186C2E3C80497F5E7DE809B854BAB53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:95:cf:26:a1:a5:75:9a:c4:7b:61:97:26:
a6:e9:23:2c:33:d8:7d:11:23:a3:30:38:e1:66:1e:
c0:ef:24:2a:0b:60:16:de:39:81:95:0e:07:0d:fd:
fd:87:48:41:96:ca:3a:34:da:b6:4a:01:f4:a6:ff:
08:e3:03:e3:25:56:a1:45:d6:cc:69:03:78:dc:8b:
2d:27:e7:82:21:cf:76:43:3b:59:83:9d:94:9b:c7:
a8:6b:2d:e4:4a:ad:d2:04:f0:d2:5d:d3:65:88:8c:
ad:66:05:c9:38:8e:3d:04:aa:46:b4:95:04:1c:af:
da:92:cb:ab:8b:1d:fc:e0:a5:d8:7f:38:74:14:9a:
08:b5:23:e9:96:0e:df:a6:bc:4f:ec:eb:0d:b1:ae:
3d:81:c4:33:87:6e:70:d9:84:21:73:3d:7e:15:88:
27:2d:14:93:2f:7d:d3:0e:63:64:e8:a8:60:e3:a3:
c9:25:02:fc:f7:ca:2d:c7:21:71:f2:cc:c2:09:f8:
53:c4:8b:42:76:fb:df:dd:92:dc:31:b2:a3:86:6a:
22:a9:e7:38:22:af:3f:43:33:32:7c:f5:d9:62:df:
57:58:cc:d9:25:a1:a8:7e:17:e3:f2:be:b1:0a:69:
5d:7d:bc:6c:35:74:1c:67:6c:25:a0:15:29:d4:a7:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:F5:C1:B1:86:C2:E3:C8:04:97:F5:E7:DE:80:9B:85:4B:AB:53
X509v3 Authority Key Identifier:
keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/323830343a346331633a343030303a3a2f33342d3334203d3e20323637333530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c1c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
43:b4:17:9f:2b:db:ad:64:cb:31:78:9c:68:80:fa:5e:c1:ab:
33:b7:1a:44:8a:83:e8:16:9c:a2:ec:a2:00:f1:b1:c9:bd:52:
75:40:d7:b6:38:02:a6:4c:00:a5:d6:32:bc:d7:ce:e0:f1:a4:
5e:ef:0e:6a:86:41:a1:8e:18:57:51:3d:a4:bb:2c:f3:d7:f4:
d7:14:d7:ea:2c:8d:65:c8:ab:66:26:ec:20:00:fb:91:8e:82:
93:11:ce:ce:1d:57:93:09:5a:cc:9c:ab:9b:59:89:f8:ad:6b:
b0:9e:db:e5:e5:4a:cf:4b:e1:e0:b2:2a:09:74:cc:4a:02:27:
73:8c:25:9e:aa:09:26:87:d6:ba:20:b5:1c:26:a5:6a:ab:7b:
5e:a6:8c:0e:68:0f:71:80:65:6f:dd:33:02:e3:74:5e:5e:0f:
6a:a1:bf:10:e2:40:c8:dc:32:51:6d:48:a5:66:99:92:a8:c3:
f1:c2:77:b7:79:18:a7:d3:19:c0:0e:57:58:e6:3f:bb:97:3c:
fe:b2:3a:73:d6:64:84:e5:0a:46:77:87:3b:62:97:37:ed:06:
c3:00:d7:0e:b3:34:a7:e9:bf:20:29:c2:19:45:23:5f:f3:3f:
1b:f5:e3:e7:38:7a:cd:f0:47:5a:7c:f7:57:9b:7f:5c:6a:f6:
92:2b:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:21 2025 by rpki-client