Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/323830343a6239343a3a2f33322d3332203d3e203532373936.roa
File: 323830343a6239343a3a2f33322d3332203d3e203532373936.roa (raw, json)
Hash identifier: i8Yd07otQA6CickL7Gk8vL8706Ya7Q1DFncsOj0638M=
Subject key identifier: DB:7C:78:38:44:8E:63:B3:85:2D:B9:34:3B:F8:7E:DE:AF:B5:C3:2F
Certificate issuer: /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial: 0A3E4E872D46F63A557F179D0E954ABB571CFE93
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/323830343a6239343a3a2f33322d3332203d3e203532373936.roa
Signing time: Mon 02 Sep 2024 19:00:59 +0000
ROA not before: Mon 02 Sep 2024 18:55:59 +0000
ROA not after: Mon 01 Sep 2025 19:00:59 +0000
asID: 52796
IP address blocks: 2804:b94::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:3e:4e:87:2d:46:f6:3a:55:7f:17:9d:0e:95:4a:bb:57:1c:fe:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
Validity
Not Before: Sep 2 18:55:59 2024 GMT
Not After : Sep 1 19:00:59 2025 GMT
Subject: CN=DB7C7838448E63B3852DB9343BF87EDEAFB5C32F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:44:63:65:5b:f7:99:a0:22:11:99:1f:08:
80:b6:65:8c:bd:9b:16:f3:ca:8f:55:4b:c4:db:12:
b9:0a:36:3e:97:3d:4b:f7:d7:a4:04:b3:7b:61:84:
9a:10:38:e5:91:89:4a:f4:0b:97:92:9c:bc:e8:42:
87:c2:f0:dd:a4:b2:47:bd:93:26:c2:4c:b8:e0:b4:
a9:16:63:19:b1:c5:fc:39:b9:24:ea:4b:07:6f:80:
0a:5c:d2:d3:71:b2:45:2b:7b:bb:f6:41:46:ba:13:
dc:8e:6c:94:d4:77:74:c4:8c:ff:20:8f:bb:60:94:
6d:55:b8:71:b9:04:57:95:f5:5c:14:2a:dd:7c:23:
ea:4e:1d:8e:37:e9:ce:25:14:76:26:4f:91:cb:73:
00:d8:91:cc:84:6c:87:d9:f6:0f:32:9e:41:87:b0:
39:ac:b5:3a:70:71:bd:a7:6a:a5:81:5c:16:4b:db:
4f:7f:0a:0b:54:43:d4:96:ad:4f:fa:ea:c9:af:77:
1c:a2:47:3e:f9:3d:b7:c4:0b:e3:c4:a0:43:e9:15:
d4:2d:4a:86:b9:cc:2c:4c:18:ba:ad:ae:dd:c4:1c:
3b:93:62:f3:f3:b3:20:d5:dd:cf:82:c2:17:d9:0b:
37:1f:d9:70:21:07:d3:c5:6b:1f:48:36:7b:26:4f:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:78:38:44:8E:63:B3:85:2D:B9:34:3B:F8:7E:DE:AF:B5:C3:2F
X509v3 Authority Key Identifier:
keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/323830343a6239343a3a2f33322d3332203d3e203532373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:b94::/32
Signature Algorithm: sha256WithRSAEncryption
88:9f:5f:e2:36:7f:f1:41:b9:3b:29:80:1a:5e:03:4c:ea:bd:
66:b7:72:6c:aa:c0:73:42:ea:76:47:84:1e:56:e4:d5:9d:d6:
c2:be:bb:73:b3:09:56:76:1d:a0:d8:be:32:2f:27:40:dd:c4:
72:14:d6:fd:88:7c:b6:0f:78:36:9f:28:14:8d:c3:ce:b7:57:
24:68:86:33:5e:94:b6:09:c3:c7:76:2a:50:8a:7e:45:8a:3d:
8a:4f:42:6c:89:df:30:bc:a6:08:53:0f:ad:ba:c9:05:8a:71:
35:04:2f:a6:33:b9:d6:c1:92:34:cf:1d:7f:d1:af:f8:ad:c6:
93:e6:8d:07:f3:7d:97:5a:01:b6:2c:6d:f6:d7:5f:67:46:9d:
53:c7:fa:7b:53:60:29:87:3c:8d:92:91:e5:d8:b4:39:46:3b:
c3:e0:7c:96:ae:d6:56:a2:30:83:64:60:c6:4e:2a:66:fc:42:
17:92:81:65:10:aa:3c:15:e9:9e:04:d8:06:f3:05:a7:30:d7:
6a:ed:94:dc:82:91:93:30:d4:09:37:44:54:35:df:ea:6c:6a:
7d:0c:ba:05:bc:a2:8e:78:4c:0f:e1:b4:aa:ff:36:9d:5a:51:
fe:d1:ce:08:46:b0:de:84:3f:e4:b5:00:83:85:41:4b:e4:ce:
9a:bd:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:50 2025 by rpki-client