Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/323830343a313435303a3a2f33322d3332203d3e20323632383631.roa
File: 323830343a313435303a3a2f33322d3332203d3e20323632383631.roa (raw, json)
Hash identifier: WYdeHbjgH6VItYWu/AZyr17lqv5NTRtU1Dt1wHx+kZg=
Subject key identifier: 2A:8F:7F:9B:14:D8:B6:7B:CF:4F:5F:5D:A0:88:61:58:85:B7:66:AE
Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Certificate serial: 3468B0CBE847D24D0CA16056E25FEE282E83AC18
Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/323830343a313435303a3a2f33322d3332203d3e20323632383631.roa
Signing time: Thu 04 Apr 2024 08:22:45 +0000
ROA not before: Thu 04 Apr 2024 08:17:45 +0000
ROA not after: Thu 03 Apr 2025 08:22:45 +0000
asID: 262861
IP address blocks: 2804:1450::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:68:b0:cb:e8:47:d2:4d:0c:a1:60:56:e2:5f:ee:28:2e:83:ac:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Validity
Not Before: Apr 4 08:17:45 2024 GMT
Not After : Apr 3 08:22:45 2025 GMT
Subject: CN=2A8F7F9B14D8B67BCF4F5F5DA088615885B766AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:57:73:db:38:68:23:44:2a:e1:8c:66:c8:3b:
0e:57:6c:fd:a9:50:f3:da:37:8b:8b:af:5f:47:18:
cf:a9:0e:3f:98:11:c3:64:1c:5c:29:3d:90:da:7a:
23:79:9b:1d:69:f0:22:59:39:50:a1:bb:6e:c8:c3:
79:d8:e3:08:e8:cb:4b:4c:f7:cd:cc:5b:4a:3b:cc:
4e:67:e6:72:87:71:dd:ac:05:29:d4:eb:03:36:e1:
fb:ec:e8:91:b6:c0:06:c9:11:2a:c4:03:42:c6:09:
05:3a:ad:7c:91:22:7d:55:de:3b:59:28:75:9d:4a:
cb:40:94:91:76:0d:22:c0:f4:a1:a8:13:6a:f1:fa:
d6:46:fe:c4:01:e1:9d:e9:1f:de:80:0e:fd:b4:be:
23:a7:61:d9:a2:9e:c3:12:3b:fb:2d:61:06:06:b4:
c3:f1:64:51:1a:4c:93:3a:96:ef:1d:32:66:d8:73:
73:5a:0b:c9:cb:37:e5:7a:10:15:ee:39:09:b1:cc:
93:bd:a9:73:34:f5:8e:2c:80:b9:f5:48:ef:68:3f:
bd:2b:71:41:f7:b6:d7:4e:2c:16:71:1a:e9:9f:b0:
e2:f4:ac:dc:a2:e1:73:dc:06:d6:0c:15:87:30:3f:
73:f2:66:6c:c7:8f:ef:e5:27:bb:b4:b7:a7:e5:d9:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8F:7F:9B:14:D8:B6:7B:CF:4F:5F:5D:A0:88:61:58:85:B7:66:AE
X509v3 Authority Key Identifier:
keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/323830343a313435303a3a2f33322d3332203d3e20323632383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1450::/32
Signature Algorithm: sha256WithRSAEncryption
af:cf:25:b9:9f:ba:af:c5:3c:c3:b9:d4:68:3b:fb:08:99:e8:
1c:35:9e:1d:6c:8d:b8:ae:55:fb:75:33:6f:b2:b0:8f:02:61:
36:31:07:59:1b:50:77:48:02:d6:b3:70:f1:ba:34:67:4f:46:
64:e6:76:8f:b6:6e:69:37:a7:f5:1d:61:67:55:21:9b:a7:46:
ed:01:a5:bd:b7:99:60:ea:4b:ab:4e:c0:03:d9:d2:f7:0a:97:
e1:22:5d:2f:5a:ef:6b:56:ec:0f:f2:a0:ce:67:2a:44:c3:13:
a5:29:83:a3:a3:0b:0c:c2:6d:1d:83:2d:d7:02:d0:cb:52:05:
bc:3c:60:d1:7f:cb:04:3f:46:ed:75:9c:55:de:5d:5f:68:fd:
18:4b:9f:8c:e8:36:b9:2a:73:4e:4f:69:08:ae:5c:91:d3:6c:
38:64:ea:69:ed:35:a6:e8:23:72:54:0a:8b:a6:41:49:c2:d5:
33:8a:48:db:73:33:d4:40:df:bf:21:6c:aa:15:69:4d:0c:f5:
dc:bc:f4:a2:cc:8e:71:2e:1f:a2:02:67:a3:cf:9e:41:33:ff:
e7:57:e1:a0:da:65:92:15:57:80:a6:f3:37:39:9b:6c:ce:d0:
38:aa:c1:66:3c:13:75:0e:9e:ee:44:c8:a3:ca:ba:59:65:41:
50:7c:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:03:48 2025 by rpki-client