Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a3a2f33322d3332203d3e20323632333338.roa
File: 323830343a3830343a3a2f33322d3332203d3e20323632333338.roa (raw, json)
Hash identifier: yuiyfhxgyuMOmeFm2L917a8nd2KETlbucOq2V0zdboo=
Subject key identifier: 64:A8:94:71:9F:B5:83:DF:91:57:2B:E8:E4:1C:7D:BA:66:3D:3F:2C
Certificate issuer: /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial: 696A75797B383E5BF796A06C7A1C4A9E2FA81839
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a3a2f33322d3332203d3e20323632333338.roa
Signing time: Wed 24 Apr 2024 12:44:27 +0000
ROA not before: Wed 24 Apr 2024 12:39:27 +0000
ROA not after: Wed 23 Apr 2025 12:44:27 +0000
asID: 262338
IP address blocks: 2804:804::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6a:75:79:7b:38:3e:5b:f7:96:a0:6c:7a:1c:4a:9e:2f:a8:18:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Validity
Not Before: Apr 24 12:39:27 2024 GMT
Not After : Apr 23 12:44:27 2025 GMT
Subject: CN=64A894719FB583DF91572BE8E41C7DBA663D3F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:09:1e:8a:98:ca:81:ad:5d:6f:72:36:d4:
ea:2c:88:11:0d:8a:9e:84:71:b4:24:5b:8a:6d:e1:
f2:9d:08:6a:9e:2f:c2:21:da:0f:d1:57:49:31:33:
e2:48:b1:f6:6a:bf:21:0d:1a:61:8e:5e:c1:93:0b:
52:5c:d3:e3:42:52:e5:b6:1b:a7:b4:c6:d2:e4:08:
bc:a6:35:4c:01:2e:7f:80:8e:1d:f8:1f:6f:76:5e:
a8:81:61:07:c8:57:e3:74:d9:f4:7b:0d:6c:ce:18:
01:56:f3:3c:25:f7:17:d5:73:eb:a6:41:33:01:38:
55:4a:94:e2:bf:8c:cd:39:89:4e:f2:a5:80:fe:2a:
7c:4a:be:8d:bf:16:ef:a6:c3:91:a5:72:53:55:67:
e2:30:fc:8a:c6:c7:2e:b9:3c:40:f1:a8:ab:19:c9:
74:36:fa:99:ba:83:aa:55:9e:f9:97:ca:d9:46:c7:
d2:ec:6f:3c:cf:97:27:ff:0e:2c:e0:da:b4:a4:2b:
89:b4:04:f8:49:ea:60:d6:3c:dc:77:7f:ba:4a:39:
b4:9d:93:b6:1d:18:f4:90:72:4b:d2:00:9e:60:7f:
72:4a:61:42:a1:68:cc:c3:7f:95:9c:32:d1:28:dc:
4c:6e:92:08:f9:c9:be:95:f8:4f:5a:8b:68:73:3c:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:94:71:9F:B5:83:DF:91:57:2B:E8:E4:1C:7D:BA:66:3D:3F:2C
X509v3 Authority Key Identifier:
keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a3a2f33322d3332203d3e20323632333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:804::/32
Signature Algorithm: sha256WithRSAEncryption
aa:f2:90:32:f8:47:d1:c7:0a:a9:98:4d:77:24:c7:c7:4f:aa:
16:8a:dc:71:24:2f:8b:af:b9:7f:f4:76:05:2e:8e:34:ae:93:
00:be:5e:27:fe:4c:80:34:4e:1d:c0:ff:84:19:6c:00:d1:43:
65:93:de:ec:bc:af:d7:cb:64:c7:73:81:82:88:94:79:45:7b:
b4:44:4e:f6:5c:65:cf:06:6a:2c:9d:74:53:83:8a:da:95:cd:
44:b5:11:51:fd:f4:10:3a:b9:5b:59:b6:5b:f2:6f:e5:c1:76:
11:1d:4c:12:ff:02:60:b2:6d:4d:76:18:e3:83:58:90:80:86:
1a:aa:7c:da:4d:51:31:9a:71:de:c4:94:64:94:be:97:24:bc:
dd:3f:12:2c:72:79:09:c1:23:91:19:56:3b:73:93:0c:68:01:
52:63:37:23:2d:a4:ff:22:14:e4:96:90:4a:84:9d:ad:12:10:
d7:14:4d:0a:96:6c:7d:11:e3:48:76:0a:4e:55:c3:f5:01:88:
8a:92:7d:e6:e2:37:76:a4:3e:c4:9e:4f:16:19:34:e9:10:78:
ff:cc:76:e5:1e:82:26:ef:ab:8f:85:8d:26:52:49:3a:9c:33:
e4:5b:9d:b8:7a:f2:6c:01:16:78:62:43:2f:f0:bf:01:f4:69:
a4:c6:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:05 2025 by rpki-client