Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a333030303a3a2f33362d3336203d3e20323634323437.roa
File: 323830343a323465343a333030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier: Jj/tORQA/NWxu2dIV2+IW4R25e7OE45wBZcXEaWSbWQ=
Subject key identifier: 75:C6:C8:E4:BF:69:F3:E6:FC:C0:4A:72:75:BB:33:E9:F5:3E:7E:2A
Certificate issuer: /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial: 3FE3AC52C3E3BC1DDD44A93477B5C843C4FA8D8D
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a333030303a3a2f33362d3336203d3e20323634323437.roa
Signing time: Wed 03 Apr 2024 18:31:24 +0000
ROA not before: Wed 03 Apr 2024 18:26:24 +0000
ROA not after: Wed 02 Apr 2025 18:31:24 +0000
asID: 264247
IP address blocks: 2804:24e4:3000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e3:ac:52:c3:e3:bc:1d:dd:44:a9:34:77:b5:c8:43:c4:fa:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Validity
Not Before: Apr 3 18:26:24 2024 GMT
Not After : Apr 2 18:31:24 2025 GMT
Subject: CN=75C6C8E4BF69F3E6FCC04A7275BB33E9F53E7E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:86:c6:5a:fa:dc:23:28:5d:19:81:2d:59:
d4:6e:a5:1a:7b:51:84:94:53:6b:60:0b:30:aa:96:
78:a6:bd:8c:e7:cf:5d:d3:00:03:f2:a9:f1:5a:87:
40:16:22:a9:03:6a:b4:34:e9:9d:3f:55:5b:9a:78:
ed:ca:07:9d:cc:d9:24:e9:8e:54:06:0b:e1:47:f8:
0b:13:8f:4d:2f:3c:75:45:c4:10:1e:1e:12:76:ef:
41:b6:60:f7:eb:ac:e0:b9:95:3a:ad:d7:8e:f5:00:
7f:ff:a6:84:9a:1b:e6:1c:68:14:8d:a9:8d:eb:3d:
24:92:94:c8:9d:d3:f9:d4:19:7b:ad:93:c9:a5:57:
fe:65:f6:4a:1a:e3:35:e0:f1:19:08:71:b5:18:a1:
d9:40:ac:e2:db:5d:58:72:2b:52:4d:eb:af:63:b0:
2e:bd:9c:e7:8f:38:b8:83:54:58:e4:65:cd:7c:9b:
a9:e4:48:bc:e7:5c:61:4c:c0:ac:bb:c9:06:36:63:
4c:58:42:64:9d:f3:d2:e1:7f:90:db:17:84:14:10:
cd:b7:6a:b2:12:8d:7b:46:33:c0:ee:21:c4:77:d3:
1d:20:58:ef:a0:28:27:b6:35:d6:3b:f1:4e:88:0a:
59:2a:cd:50:2e:77:2e:68:6d:b6:2b:88:d8:8f:7b:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C6:C8:E4:BF:69:F3:E6:FC:C0:4A:72:75:BB:33:E9:F5:3E:7E:2A
X509v3 Authority Key Identifier:
keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a333030303a3a2f33362d3336203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:24e4:3000::/36
Signature Algorithm: sha256WithRSAEncryption
2a:97:e1:f6:c2:c1:ff:23:27:3c:a7:e5:c7:63:df:c0:99:52:
8a:38:04:d2:59:f5:22:15:c1:a9:67:70:c3:11:41:35:91:9d:
a1:4a:c7:d8:42:c4:53:f5:2f:7a:a2:0a:d3:a9:7b:af:16:6b:
b3:45:56:70:01:e4:62:3c:53:9e:31:93:a4:df:f4:6b:e8:ae:
a2:c0:15:5a:b6:4a:4a:8e:65:c0:5b:4c:15:17:21:91:8c:01:
eb:08:b2:82:2c:04:a1:b8:86:a2:9a:61:15:b9:da:52:c7:a6:
33:4d:1b:5f:e8:ab:61:0c:22:27:b8:99:5c:bd:a2:ba:c5:ff:
e7:62:9c:0a:88:2f:ad:f6:29:50:e4:d9:53:f0:4a:65:9f:36:
35:f6:86:cd:8b:22:74:2e:d5:04:1d:a3:d3:9f:48:e2:84:0f:
b2:c1:45:6f:c7:85:9a:98:83:52:26:26:1c:a6:00:03:12:58:
81:21:85:5d:c5:3d:c7:6c:f3:ad:96:8e:c3:16:e2:46:21:3a:
33:43:9f:b5:bb:c6:19:27:51:bc:1d:af:8f:f3:84:cd:0e:ba:
a3:b4:06:83:3c:c2:5f:e6:72:e4:ea:56:31:48:1b:d9:c5:41:
75:20:37:6d:08:fd:85:c9:25:b8:bc:6d:39:2c:ab:bf:da:6b:
96:be:80:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:55:55 2025 by rpki-client