Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/323830343a3236383a3a2f33332d3333203d3e20323632383132.roa
File: 323830343a3236383a3a2f33332d3333203d3e20323632383132.roa (raw, json)
Hash identifier: BEKNs2zp6R7pBIJ3h/gMbgQ+kMnGSHspbHDUaX0KITo=
Subject key identifier: 5E:CD:62:23:80:9D:70:5D:6A:DC:70:2C:56:65:00:DB:A0:30:29:53
Certificate issuer: /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial: 07198D7773B26C8984343A93BE01E8D7A305EA38
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/323830343a3236383a3a2f33332d3333203d3e20323632383132.roa
Signing time: Mon 12 Aug 2024 14:39:49 +0000
ROA not before: Mon 12 Aug 2024 14:34:49 +0000
ROA not after: Mon 11 Aug 2025 14:39:49 +0000
asID: 262812
IP address blocks: 2804:268::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:19:8d:77:73:b2:6c:89:84:34:3a:93:be:01:e8:d7:a3:05:ea:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Validity
Not Before: Aug 12 14:34:49 2024 GMT
Not After : Aug 11 14:39:49 2025 GMT
Subject: CN=5ECD6223809D705D6ADC702C566500DBA0302953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:05:5a:fe:2d:69:b7:fa:0d:ed:ce:bb:51:
17:53:84:d2:75:f1:cf:2e:f2:b0:16:e1:4f:09:8d:
e8:ca:89:d7:87:7d:13:d7:34:11:33:fa:9b:0f:3c:
fe:e1:c1:8c:fe:84:7e:42:5d:48:15:57:17:e4:e1:
d7:12:3a:26:46:86:29:64:b8:61:22:3a:12:e9:46:
15:32:eb:15:5e:50:ea:1d:e9:ba:07:a2:a5:32:83:
35:d5:fc:91:8e:b2:b4:8d:aa:9a:88:73:37:7e:de:
f7:17:5f:67:cb:8e:60:8e:f4:11:0d:fe:7c:f1:5e:
8c:df:de:e3:07:2b:ae:e4:4d:53:c2:93:50:79:76:
75:bf:6f:f3:8f:b9:8b:06:e2:b2:63:6c:0f:31:75:
40:b5:e9:7c:98:16:1d:21:ab:fd:57:31:f1:8d:7f:
3d:71:0a:26:85:3a:88:a7:d4:49:a9:d8:44:fe:68:
30:13:da:e4:aa:e4:c1:64:b6:56:4d:ad:19:3a:d7:
3e:f5:1e:51:41:ae:c6:5d:9e:c4:ec:62:51:aa:20:
84:e8:32:45:56:ed:b5:7e:62:b8:c3:44:cf:45:35:
4a:18:44:f2:2f:80:9a:95:2f:97:fc:c6:99:9a:c3:
41:be:cb:35:fb:87:c8:b2:a7:47:a9:59:79:62:23:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CD:62:23:80:9D:70:5D:6A:DC:70:2C:56:65:00:DB:A0:30:29:53
X509v3 Authority Key Identifier:
keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/323830343a3236383a3a2f33332d3333203d3e20323632383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:268::/33
Signature Algorithm: sha256WithRSAEncryption
83:e3:f7:bb:fa:10:b1:ea:8a:a8:a2:22:1a:81:83:14:5f:66:
d6:21:92:6d:13:df:12:5f:4e:93:50:e8:75:1e:87:76:a7:27:
46:8a:8e:2e:46:dc:4f:36:a7:09:06:28:fa:92:61:c3:86:67:
fc:91:95:f4:81:31:4c:f4:ee:cb:a2:47:f9:c0:88:4c:f8:e1:
be:e6:b0:66:b8:92:a2:9d:ca:3d:44:4b:a4:a4:d3:45:82:1d:
0d:36:64:68:56:6c:18:7b:ec:c3:1e:e9:93:e5:37:7c:14:13:
e3:8c:04:99:61:72:05:fd:f1:cf:b3:d6:a9:4b:d5:14:e5:ef:
f8:f4:da:ae:9c:d6:4d:ad:15:ca:a1:1e:3e:01:1f:61:96:75:
f4:e7:2e:03:a4:7c:52:04:8a:c9:c4:5f:66:74:1b:05:51:f5:
ba:ab:4c:79:20:15:10:92:1a:35:90:22:5c:62:f9:57:a4:2e:
90:71:4b:32:9d:65:5c:61:f8:25:86:2d:11:f3:95:9b:8e:4a:
28:e5:88:bc:91:6e:11:88:27:fa:c4:9e:e2:25:a9:d9:18:cd:
e0:9c:bc:d8:67:df:e2:ca:0a:be:97:f8:c4:4c:e7:f9:b1:c0:
04:2f:a8:49:2f:44:bd:61:15:f2:f7:34:31:ff:19:9b:be:ec:
a4:d6:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:15 2025 by rpki-client