Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33362d3336203d3e20323732363134.roa
File: 323830343a383630343a3a2f33362d3336203d3e20323732363134.roa (raw, json)
Hash identifier: 2UWs9RzdGtLslZVRwGiwVMkoOXMMvw+mbH6zJP5s8Xk=
Subject key identifier: 0D:4B:9E:85:15:AB:50:10:94:DE:15:C6:61:8B:FA:50:DF:C8:AE:EF
Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial: 5DF536F008A5410DFBEA27ABCC9BB1B33FF78980
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33362d3336203d3e20323732363134.roa
Signing time: Thu 04 Apr 2024 05:44:55 +0000
ROA not before: Thu 04 Apr 2024 05:39:55 +0000
ROA not after: Thu 03 Apr 2025 05:44:55 +0000
asID: 272614
IP address blocks: 2804:8604::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f5:36:f0:08:a5:41:0d:fb:ea:27:ab:cc:9b:b1:b3:3f:f7:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Validity
Not Before: Apr 4 05:39:55 2024 GMT
Not After : Apr 3 05:44:55 2025 GMT
Subject: CN=0D4B9E8515AB501094DE15C6618BFA50DFC8AEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:20:66:b4:8a:88:9e:c0:4a:86:d8:b9:a3:
da:50:e4:69:87:f0:83:41:24:71:78:fd:84:bb:e8:
fb:dd:31:8b:d7:b0:c1:01:b8:db:22:fb:73:9d:51:
1e:17:c0:9e:95:dd:3a:0d:58:b0:9d:e1:7a:1a:e2:
27:f2:5f:5f:39:5d:e5:9c:92:b8:61:3b:1f:e5:d6:
14:22:a6:34:69:b8:e4:b3:ad:8e:62:5c:b4:58:b5:
53:65:4e:f6:81:e9:ae:39:e0:d0:9e:65:99:ba:4d:
58:35:8a:e5:67:13:21:82:9c:69:b7:72:f5:39:62:
6b:dc:64:46:70:c8:d7:41:02:af:cd:84:a0:65:49:
93:a1:bc:c8:5a:93:2d:38:b5:94:cc:b6:1f:70:9f:
0d:33:29:ca:2a:69:b2:1a:7f:f6:27:5b:59:7e:a9:
47:eb:6b:40:62:c7:5c:b5:f5:4d:89:9b:81:1c:73:
8e:bb:ca:34:f2:73:12:83:3a:f3:32:05:38:18:04:
b2:a9:1c:ab:e3:a8:7e:f3:c6:2d:65:ad:97:65:e4:
e1:83:df:fa:82:e7:94:dd:b0:ab:4b:da:07:99:a4:
ca:7d:ac:25:df:e9:ed:d1:35:a6:cf:51:d9:d0:b3:
36:4e:5c:6a:be:89:ad:df:58:d2:59:eb:cb:b2:44:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4B:9E:85:15:AB:50:10:94:DE:15:C6:61:8B:FA:50:DF:C8:AE:EF
X509v3 Authority Key Identifier:
keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33362d3336203d3e20323732363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8604::/36
Signature Algorithm: sha256WithRSAEncryption
05:42:34:23:8d:38:dc:1e:d6:bc:89:6c:39:8f:ee:8e:57:e9:
91:54:de:48:16:7a:bb:3b:f6:b1:30:07:dd:64:fc:ea:f5:51:
a0:ac:7b:72:fd:83:d2:99:3f:2c:74:00:33:7b:a1:5f:e4:f1:
db:78:9f:ef:d2:b2:97:59:a7:14:14:ff:00:66:94:8b:21:ee:
8e:b7:2f:2f:d1:84:88:3a:8f:14:13:bf:eb:da:1c:18:4e:51:
fa:c1:92:69:9c:ea:9d:a7:4c:5f:22:55:d6:1b:0b:1c:1c:78:
29:6f:05:3a:de:c6:af:4d:76:fa:22:1c:54:09:7b:cd:74:34:
7e:de:91:d6:8c:7b:d9:ff:54:f2:8d:79:08:25:08:bf:c8:97:
e1:1c:af:8f:51:3e:28:81:c7:fe:93:8e:8a:22:f3:36:00:90:
52:99:f9:14:dd:d7:e8:16:5a:1b:76:1a:64:8d:f9:ca:7b:72:
9f:80:90:ec:fb:fb:10:ad:a7:46:e8:04:c9:b8:ff:5a:c1:f3:
5f:43:e0:16:ea:59:dc:6a:51:99:12:08:e5:37:f0:cf:0a:61:
5f:8b:43:a8:0a:1b:06:a3:b4:3c:0c:29:7b:75:0f:38:67:07:
73:7d:f4:01:93:90:42:86:f1:16:b6:3d:94:b7:25:a6:70:fb:
ba:36:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:42:09 2025 by rpki-client