Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/323830343a326362633a3a2f33352d3335203d3e20323635323430.roa
File: 323830343a326362633a3a2f33352d3335203d3e20323635323430.roa (raw, json)
Hash identifier: y9SBMFb8v7KtxW6cdSQ0qlmJ2KGKKLS4lC+jErVZikk=
Subject key identifier: A2:ED:E6:21:B4:ED:77:B8:3A:6B:B4:1C:31:1A:33:C6:C3:5E:C2:3F
Certificate issuer: /CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Certificate serial: 4F690DCB954C06431C6097745ACAD9B6D13BC0F9
Authority key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/323830343a326362633a3a2f33352d3335203d3e20323635323430.roa
Signing time: Thu 04 Apr 2024 04:19:39 +0000
ROA not before: Thu 04 Apr 2024 04:14:39 +0000
ROA not after: Thu 03 Apr 2025 04:19:39 +0000
asID: 265240
IP address blocks: 2804:2cbc::/35 maxlen: 35
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:69:0d:cb:95:4c:06:43:1c:60:97:74:5a:ca:d9:b6:d1:3b:c0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D
Validity
Not Before: Apr 4 04:14:39 2024 GMT
Not After : Apr 3 04:19:39 2025 GMT
Subject: CN=A2EDE621B4ED77B83A6BB41C311A33C6C35EC23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:e0:c3:ec:0d:75:a2:2f:9d:ad:8e:5d:9c:
b3:dd:44:8b:cc:fb:09:aa:4e:30:15:e8:bb:1e:cc:
54:64:28:c9:1b:fd:c8:87:75:ad:93:c8:16:d4:ca:
2e:90:ea:ea:f3:9b:f1:d8:fa:e5:07:3c:0b:8f:25:
b9:0e:9a:6e:59:3a:1a:b1:59:8c:dd:6f:f4:25:ce:
38:15:22:99:47:69:a7:9e:b5:c4:aa:45:66:af:65:
b4:df:f1:64:a8:c9:e0:b6:3c:95:41:48:25:22:81:
1d:29:f2:fb:fe:8a:2e:40:32:2c:ea:8f:b2:76:91:
04:0c:1e:8b:e1:d1:57:63:36:be:fc:54:b1:e2:36:
fc:f5:98:e1:7c:d6:27:77:49:44:ee:97:75:e0:7e:
9c:9c:1e:21:01:1b:fd:3b:8b:68:bf:ec:de:25:4c:
09:25:80:e7:a6:5b:23:1c:3d:98:ce:6b:6d:1c:9a:
67:e5:a6:81:63:5e:07:ef:14:44:a2:fe:9d:a7:be:
dc:75:77:0e:df:0b:a8:59:21:e0:52:20:1c:d5:01:
95:ca:cf:92:36:9d:e9:b3:4d:aa:cf:08:82:bf:b8:
ec:5c:f5:5a:9b:03:40:ac:17:a3:66:df:82:1f:ae:
15:e1:a0:67:5d:01:17:54:5e:96:97:b0:7b:42:67:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:E6:21:B4:ED:77:B8:3A:6B:B4:1C:31:1A:33:C6:C3:5E:C2:3F
X509v3 Authority Key Identifier:
keyid:9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/323830343a326362633a3a2f33352d3335203d3e20323635323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2cbc::/35
Signature Algorithm: sha256WithRSAEncryption
07:e0:df:c2:07:ca:88:c2:a1:6a:43:d2:8a:fa:2c:f1:b1:c2:
7a:48:0d:f8:76:80:fe:14:9e:f3:ae:ac:c8:98:e3:9c:9c:57:
e9:65:15:1d:c8:06:3a:2f:25:fe:f1:ee:80:bd:20:de:2f:d6:
9d:a4:13:16:a0:d6:b7:a5:d8:e1:55:a0:8d:99:4a:e3:b3:45:
72:a9:85:54:7e:cf:1e:da:fb:e6:41:73:02:6b:d4:60:36:94:
57:5f:3b:56:32:ac:af:7d:21:66:4f:a6:ac:8e:90:26:3e:3b:
2f:80:92:c4:2c:a0:2c:3c:2d:47:70:aa:9a:81:6b:f2:03:ae:
08:4b:7e:7c:5f:9a:3b:0a:60:78:3b:36:c3:9c:1f:98:8d:ad:
59:a3:4a:bd:91:6f:89:a5:a7:af:56:5f:d9:01:bd:af:94:c1:
36:2d:51:1e:b7:ab:ed:7b:4a:09:e3:a5:9c:f7:98:82:9c:cc:
24:ff:db:51:1f:5c:f3:64:2c:57:22:52:8a:d7:ed:44:cd:0b:
32:54:8e:ce:c2:9e:8c:c7:84:1d:22:e9:80:48:88:f2:be:30:
ce:34:a1:1a:8f:06:63:59:35:1a:e2:38:19:6b:71:20:49:d5:
cb:a4:13:05:25:27:65:d2:e8:01:d2:3b:0c:65:48:c7:00:6f:
e3:b3:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:50:35 2025 by rpki-client