Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/323830343a326436343a3a2f33322d3430203d3e20323635323739.roa
File: 323830343a326436343a3a2f33322d3430203d3e20323635323739.roa (raw, json)
Hash identifier: pbeT/G4JdkQypJYScb1Q+4LyA/gS0m9VIJ9nKKWAdps=
Subject key identifier: 0B:9A:D4:26:26:58:35:02:59:BD:9F:C4:34:41:A9:96:08:50:3A:8C
Certificate issuer: /CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
Certificate serial: 0CD6B5120688DE30F9F8475DD4D6619A676C484A
Authority key identifier: 23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/323830343a326436343a3a2f33322d3430203d3e20323635323739.roa
Signing time: Thu 04 Apr 2024 12:41:44 +0000
ROA not before: Thu 04 Apr 2024 12:36:44 +0000
ROA not after: Thu 03 Apr 2025 12:41:44 +0000
asID: 265279
IP address blocks: 2804:2d64::/32 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d6:b5:12:06:88:de:30:f9:f8:47:5d:d4:d6:61:9a:67:6c:48:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
Validity
Not Before: Apr 4 12:36:44 2024 GMT
Not After : Apr 3 12:41:44 2025 GMT
Subject: CN=0B9AD4262658350259BD9FC43441A99608503A8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:a7:4f:06:06:af:1d:8d:79:7f:2c:f9:39:
22:88:9e:b5:a7:e9:9e:2a:39:ed:e3:e3:6f:ac:68:
89:40:21:6e:da:ab:77:17:12:7b:d5:96:2d:1c:2f:
7e:2a:e1:40:bd:b8:ef:b9:60:d6:e0:5c:02:04:0c:
24:8d:a8:9d:7f:28:9e:58:2f:c4:f9:e5:57:de:68:
00:10:d8:19:21:05:e9:d6:12:1c:a6:7e:a3:41:7c:
ca:b6:5c:a6:21:7a:b0:56:bf:ab:14:43:db:1e:e1:
94:31:c9:7a:c4:f4:26:e4:94:7e:f3:6d:55:81:35:
28:81:13:14:10:ec:b8:ab:4d:57:0f:f3:60:0a:df:
bb:76:6a:5f:fe:e3:c3:23:bd:cb:68:7a:c1:e3:62:
b6:ab:de:f3:78:b2:37:e1:5d:ce:d2:f5:ee:d9:21:
db:d4:d9:b1:13:22:81:7e:23:36:ea:fe:d5:d9:66:
20:9a:52:43:64:1e:80:9d:bf:c3:31:4b:80:0e:07:
d6:f3:28:2f:46:7a:7a:2f:a8:55:61:73:4b:55:18:
35:55:3a:66:7f:07:aa:a0:87:ba:b9:23:66:ec:38:
19:ff:4b:a9:62:45:b8:1e:9b:32:95:c9:32:a8:cd:
7f:d7:65:86:94:da:1d:81:3a:94:52:cb:31:a1:dd:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9A:D4:26:26:58:35:02:59:BD:9F:C4:34:41:A9:96:08:50:3A:8C
X509v3 Authority Key Identifier:
keyid:23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/323830343a326436343a3a2f33322d3430203d3e20323635323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d64::/32
Signature Algorithm: sha256WithRSAEncryption
2f:a2:0f:71:5e:2a:db:28:00:b6:9a:64:d9:e5:53:5b:25:4c:
f1:1a:f4:0e:31:1e:62:de:ce:0a:8f:5d:3c:76:15:f0:c4:50:
8c:74:33:f1:e5:f8:4f:ed:cf:27:77:08:6f:a2:3e:8f:c5:b5:
00:25:0b:70:cc:f8:0f:f3:07:af:b4:41:f0:d2:3d:7c:70:58:
1d:c2:f3:e8:f0:12:98:e1:97:88:61:c7:d3:0a:76:6f:91:b8:
f7:b5:1f:59:5b:b5:ab:e3:84:80:2b:cc:b9:58:7f:ae:65:05:
63:00:45:29:98:d9:38:c5:72:ac:f1:01:d2:78:f3:23:44:92:
51:dc:8f:18:4a:ef:20:f3:e5:03:09:39:15:49:b8:f2:e6:4b:
74:8d:5c:2b:73:29:3b:0a:85:5d:05:4d:0b:65:1c:11:00:b2:
bf:08:2d:70:73:c3:a8:66:5a:30:35:69:36:9c:53:78:23:bc:
87:e8:e3:83:2b:39:6b:49:9b:39:cf:27:ea:d9:18:5d:31:2f:
ec:6e:a2:07:9a:e8:e2:de:2a:26:cd:cd:ae:10:7a:0b:84:65:
50:18:c4:3e:6f:cd:3c:16:24:35:dd:62:d8:57:7e:9e:86:ba:
ae:7f:5c:c7:cd:a9:e0:bf:c4:f0:39:84:56:21:51:0b:9c:ff:
da:e2:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:59 2025 by rpki-client