Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32322d3232203d3e20323637393336.roa
File: 34352e3136362e35322e302f32322d3232203d3e20323637393336.roa (raw, json)
Hash identifier: ACK+olqujMynLaZNlDSHU78BJvK9bnJQXoCHToXSTXM=
Subject key identifier: 3D:CE:D0:D5:1E:0C:03:B5:85:EA:5D:42:4A:30:57:A7:EC:5D:5A:30
Certificate issuer: /CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Certificate serial: 6DB6FFA64D17A7EB7A09539421ACA110EB1B1DE0
Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32322d3232203d3e20323637393336.roa
Signing time: Thu 04 Apr 2024 09:33:00 +0000
ROA not before: Thu 04 Apr 2024 09:28:00 +0000
ROA not after: Thu 03 Apr 2025 09:33:00 +0000
asID: 267936
IP address blocks: 45.166.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b6:ff:a6:4d:17:a7:eb:7a:09:53:94:21:ac:a1:10:eb:1b:1d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Validity
Not Before: Apr 4 09:28:00 2024 GMT
Not After : Apr 3 09:33:00 2025 GMT
Subject: CN=3DCED0D51E0C03B585EA5D424A3057A7EC5D5A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:89:b1:31:31:0b:9f:9d:85:8f:7f:4d:df:
7d:e4:2a:8b:a2:57:55:5c:10:63:14:a3:e7:b4:a1:
23:2b:49:ed:ba:8b:78:80:a6:43:1d:e3:7a:bc:17:
e0:69:14:46:34:3c:38:04:31:65:2a:38:3d:8d:39:
d1:4d:86:7b:bb:8e:d3:4d:69:12:3e:c9:72:58:53:
7e:bc:7e:06:dd:25:ec:ee:bd:d2:9a:bc:61:45:9d:
50:81:3c:5a:f6:98:2e:7e:88:2c:60:eb:55:ba:be:
97:a5:9f:3f:56:04:4b:ec:fa:00:93:9f:bc:9e:80:
e9:cb:20:e6:a0:89:14:17:19:2f:f7:5d:5b:75:07:
f0:9a:81:49:3e:9c:62:6c:5c:ff:63:0c:d6:15:94:
c3:3c:40:cd:08:b4:73:fd:c7:70:dc:1a:b3:28:86:
33:71:60:93:e2:39:d8:a0:eb:11:7a:7c:f4:c5:31:
bc:db:f0:18:42:a0:d5:d4:59:b5:76:ef:11:be:04:
00:8f:8d:39:6f:20:25:9a:24:27:84:4c:13:23:13:
56:8c:dd:58:b8:f1:43:23:ab:3f:f1:b4:c1:1a:1d:
f4:17:b2:5f:df:67:a8:8d:f2:9b:3c:44:3c:d4:6f:
f6:9f:d1:c1:6d:92:15:01:de:a2:e8:18:73:4c:94:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CE:D0:D5:1E:0C:03:B5:85:EA:5D:42:4A:30:57:A7:EC:5D:5A:30
X509v3 Authority Key Identifier:
keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35322e302f32322d3232203d3e20323637393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.52.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:3b:63:e0:52:c1:0a:03:3b:30:2c:c3:e1:d6:a7:a9:41:78:
aa:2c:f0:bc:bd:8b:38:52:5c:17:51:76:e4:24:7f:5a:0a:33:
e9:81:b6:5e:b0:c5:ef:47:8f:3c:95:b8:6f:42:62:d8:31:ef:
9f:9e:5e:25:db:62:98:18:40:54:2b:e4:1e:65:f1:4c:94:f8:
03:2a:0d:cc:e5:30:9a:22:84:55:98:c6:91:6d:fd:72:3d:63:
92:f0:af:3b:87:8b:3d:8b:cb:5d:86:08:58:b9:7e:8f:da:a3:
81:2d:cc:1a:2b:f3:8c:f2:12:f8:56:54:a1:99:03:34:3a:e7:
85:59:42:d9:8d:f3:13:2e:42:69:fc:5a:54:38:12:9b:8f:13:
6d:a9:09:46:66:e1:80:1f:fc:dd:48:d8:c3:13:4d:fb:75:6c:
d1:07:40:3a:38:86:68:26:a2:ed:98:a1:57:7e:15:e5:e8:3a:
81:21:29:11:75:24:4f:a9:dd:b7:e4:ae:e8:e2:c2:29:05:c4:
0b:89:8c:35:5b:10:ee:09:5e:99:c5:cd:94:38:7e:fb:74:29:
18:e8:5e:1d:eb:51:af:00:63:c5:92:93:d6:a2:c3:7f:70:c4:
43:79:8b:76:fb:3c:81:5a:b2:e7:4b:32:20:e2:c0:44:bc:e6:
05:a6:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:38:58 2025 by rpki-client