Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33322d3332203d3e20323633333630.roa
File: 323830343a313466303a3a2f33322d3332203d3e20323633333630.roa (raw, json)
Hash identifier: r04EM+nJMONifkWI8BE506JxgLa+m63z+wQf7iuDTUk=
Subject key identifier: 4A:2C:89:8D:DD:86:05:C3:52:B9:94:C1:7E:C0:43:2F:54:45:BE:30
Certificate issuer: /CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
Certificate serial: 66D7C17A1AA3494AEDD014A4FF885BD48905D023
Authority key identifier: D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33322d3332203d3e20323633333630.roa
Signing time: Mon 07 Apr 2025 20:20:23 +0000
ROA not before: Mon 07 Apr 2025 20:15:23 +0000
ROA not after: Mon 06 Apr 2026 20:20:23 +0000
asID: 263360
IP address blocks: 2804:14f0::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d7:c1:7a:1a:a3:49:4a:ed:d0:14:a4:ff:88:5b:d4:89:05:d0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29
Validity
Not Before: Apr 7 20:15:23 2025 GMT
Not After : Apr 6 20:20:23 2026 GMT
Subject: CN=4A2C898DDD8605C352B994C17EC0432F5445BE30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:d5:a6:25:41:d5:37:f5:9d:59:92:87:67:
22:00:c5:19:59:aa:74:04:ca:6c:01:7b:2b:0c:a8:
77:1a:b2:4e:b0:20:ac:f2:f9:9c:7b:7d:b9:cc:c8:
a4:9d:6f:29:93:6e:c3:6c:9a:88:9e:84:61:04:3b:
ba:ba:8b:00:b7:c8:63:8d:fb:9e:85:4b:5c:8f:4a:
c7:fd:24:79:a6:eb:0e:03:c3:ce:60:86:af:70:60:
8b:e9:2f:a5:72:8f:f3:a8:95:43:30:af:f5:ea:d7:
32:bd:c4:0c:5f:d8:d3:a2:05:ac:7d:fd:f6:5f:0c:
58:f4:50:33:0e:e7:ab:ee:b4:82:aa:7e:4c:4b:92:
ac:54:11:7d:97:6f:b6:54:fb:eb:00:49:05:23:3f:
11:62:58:d4:be:67:ed:17:c1:e8:c8:57:42:6d:bf:
59:a8:ed:91:0e:a8:2a:5b:38:38:ef:d8:02:b8:86:
5e:22:32:df:c8:b4:7b:32:ad:bd:8c:f4:12:d0:f9:
fc:a3:29:4f:a1:16:9d:a2:d2:89:23:10:e7:7a:5b:
ec:2f:56:06:db:ed:50:3e:68:8f:c9:85:67:54:24:
49:b6:86:94:ed:63:59:ed:02:21:1a:ca:f7:41:e6:
21:5c:4e:c9:01:ae:ef:c9:13:37:72:fe:6c:03:36:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2C:89:8D:DD:86:05:C3:52:B9:94:C1:7E:C0:43:2F:54:45:BE:30
X509v3 Authority Key Identifier:
keyid:D2:64:16:E9:EE:E1:00:EE:96:26:BC:59:BF:AC:84:F0:BC:9F:6B:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D26416E9EEE100EE9626BC59BFAC84F0BC9F6B29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a3a2f33322d3332203d3e20323633333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14f0::/32
Signature Algorithm: sha256WithRSAEncryption
66:c8:c1:a0:ca:7a:89:c3:9d:98:2f:34:c6:ae:49:a0:26:b7:
3b:9a:21:c7:88:74:d8:bf:80:6c:d4:f6:5c:bd:fd:b7:83:0e:
d8:ed:6e:08:88:9d:45:5b:78:f8:96:ca:82:ae:84:8d:aa:c4:
0f:04:a2:1c:f3:9d:46:7a:25:86:bd:0b:95:70:12:c2:9b:61:
6e:75:1e:3f:cd:49:6c:aa:c8:b0:ae:a9:4c:ad:fd:24:2d:33:
33:af:06:29:e1:74:fa:8f:98:1c:0f:a9:62:d8:c7:88:5d:dc:
73:f0:74:f9:dd:df:a9:6d:46:00:8c:c9:cc:b9:b5:d3:35:bd:
78:03:d6:fd:72:84:34:e5:bb:ce:df:2e:e0:aa:b0:7d:bb:61:
24:c1:ac:59:84:35:b6:9f:cd:1f:0b:1b:82:34:a0:92:aa:7c:
24:61:87:32:90:aa:59:c6:9f:1a:be:cd:7d:e3:6b:97:2b:bc:
f9:a6:8a:7d:2a:6a:d0:87:77:4c:32:89:c2:11:1b:8e:94:22:
83:b3:a9:ce:cf:fd:96:fd:98:65:11:2c:f3:12:e3:be:bd:5e:
d0:a7:68:36:d7:41:27:2e:7b:45:2b:1d:02:4a:eb:19:39:c7:
be:37:32:eb:71:73:01:cf:dc:bf:4a:d6:d4:3e:74:7a:51:67:
7f:51:ea:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:11:55 2025 by rpki-client