Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a343430303a3a2f33382d3338203d3e203238353732.roa
File: 323830343a366533633a343430303a3a2f33382d3338203d3e203238353732.roa (raw, json)
Hash identifier: hm/yOyfH+6y/ZP/8v/6+bW6yT0/J2lpitmY428l76Wo=
Subject key identifier: 71:F9:5B:61:7D:73:C6:DE:7C:CE:7C:02:52:A6:82:D3:DE:E0:AD:01
Certificate issuer: /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial: 156947A16DC5A4D5F9054FC1EC06FA667424DACB
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a343430303a3a2f33382d3338203d3e203238353732.roa
Signing time: Sat 29 Jun 2024 15:31:25 +0000
ROA not before: Sat 29 Jun 2024 15:26:25 +0000
ROA not after: Sat 28 Jun 2025 15:31:25 +0000
asID: 28572
IP address blocks: 2804:6e3c:4400::/38 maxlen: 38
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:69:47:a1:6d:c5:a4:d5:f9:05:4f:c1:ec:06:fa:66:74:24:da:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Validity
Not Before: Jun 29 15:26:25 2024 GMT
Not After : Jun 28 15:31:25 2025 GMT
Subject: CN=71F95B617D73C6DE7CCE7C0252A682D3DEE0AD01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:f6:4c:cf:79:bc:3f:0a:81:6d:4f:19:c4:
2e:72:f1:bd:ed:df:47:d4:27:db:b4:72:35:46:1d:
86:4f:b7:45:e1:7d:6d:d7:04:f6:e8:2a:6e:d5:ce:
b3:23:ee:f0:21:55:f6:92:9d:32:3a:23:ca:a9:28:
35:bb:1c:7f:d9:ca:4a:94:da:a6:c0:fa:a6:10:22:
dc:2c:de:7e:1d:99:19:b8:63:0f:84:8f:9d:88:ef:
de:b6:0b:1a:3c:c0:be:6c:68:da:bf:82:54:52:6c:
4c:c4:0f:c6:d7:f7:f2:35:97:96:9a:d8:e0:f9:56:
81:e6:35:54:da:7b:35:20:c7:53:65:51:b4:4e:c0:
4f:69:24:67:a0:5e:dc:5c:b8:ea:fa:b0:b3:40:64:
a5:5b:1b:14:4d:68:63:27:17:ef:06:a5:82:fd:83:
ba:16:d2:5e:38:ac:c8:22:a9:42:8e:48:0a:b1:8f:
bc:35:09:09:40:20:cc:29:ce:f9:b5:1d:ef:52:2b:
94:a4:40:51:b5:59:00:a4:c1:2c:41:d9:76:7b:7b:
89:f9:5f:f2:ae:c6:40:eb:90:22:11:99:04:3f:29:
6e:13:5d:94:a1:4b:40:7f:60:96:dd:98:42:d9:c9:
fa:5b:98:43:b4:47:3f:94:11:5e:b3:5f:85:93:00:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F9:5B:61:7D:73:C6:DE:7C:CE:7C:02:52:A6:82:D3:DE:E0:AD:01
X509v3 Authority Key Identifier:
keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a343430303a3a2f33382d3338203d3e203238353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6e3c:4400::/38
Signature Algorithm: sha256WithRSAEncryption
67:6d:81:3b:0a:b4:4a:b6:81:03:66:41:87:b4:19:f6:d1:8d:
3e:b6:0f:1b:de:ea:ad:7c:99:70:ad:50:90:d3:bb:c4:db:cf:
c6:d1:f3:ed:a7:57:f0:d2:59:26:97:33:c8:88:f4:6b:67:88:
b1:12:cf:61:ac:d9:2b:ea:51:11:40:d3:d5:50:0c:f0:61:22:
92:22:7c:c7:4e:61:a8:e2:2f:4d:08:18:f2:26:1f:88:8e:69:
57:32:14:6e:61:a1:ef:bd:84:08:a6:fc:21:01:d7:a3:13:1f:
ec:f4:92:ef:2e:3e:f7:10:de:26:11:0c:8a:8b:d7:99:b2:5a:
d1:60:01:d7:dc:bd:4a:d7:f4:b6:4f:8b:5b:28:72:9f:4e:55:
1e:d0:9e:e3:9e:c3:64:69:0c:26:ce:e7:d3:1f:9a:ee:ac:ca:
64:c1:38:9f:13:e1:70:b5:17:20:c5:42:db:c2:3e:2c:3e:5b:
0b:03:52:cb:dc:9f:06:af:cc:9f:66:e7:32:f2:87:7a:d1:2b:
7b:75:f4:13:d0:a5:64:0d:5e:e5:a7:b6:be:3a:1b:50:d3:91:
e8:be:ca:14:64:34:ce:c1:5f:8d:22:cc:6a:d1:df:40:b1:07:
69:28:7c:e8:5c:9a:03:b0:6e:c3:0a:0c:03:c9:1a:88:9e:10:
23:ed:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:38 2025 by rpki-client