Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
File: 323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa (raw, json)
Hash identifier: cXQUbErJxwhw5XUdYPV8ngqXfa1uIcScSF/G83bdBSI=
Subject key identifier: 2A:21:44:28:5D:05:B7:E2:3A:68:59:A6:B3:42:A6:4D:CC:66:DF:06
Certificate issuer: /CN=B889BE89077CF75CB3D33CA36A19B935046D749F
Certificate serial: 25163DF9E934E94BF227118718DD85BAE10CBC12
Authority key identifier: B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
Signing time: Fri 07 Feb 2025 17:17:35 +0000
ROA not before: Fri 07 Feb 2025 17:12:35 +0000
ROA not after: Fri 06 Feb 2026 17:17:35 +0000
asID: 267035
IP address blocks: 2804:4728:8000::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:16:3d:f9:e9:34:e9:4b:f2:27:11:87:18:dd:85:ba:e1:0c:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B889BE89077CF75CB3D33CA36A19B935046D749F
Validity
Not Before: Feb 7 17:12:35 2025 GMT
Not After : Feb 6 17:17:35 2026 GMT
Subject: CN=2A2144285D05B7E23A6859A6B342A64DCC66DF06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:5b:1b:ce:b5:35:11:f8:26:2b:7b:d1:36:
66:ab:bb:e1:5e:04:23:fa:8a:33:4a:3c:84:bf:bf:
10:ef:e5:8b:ea:58:dd:13:5e:43:2b:ff:62:4a:19:
23:d2:e2:c9:dc:ec:34:4c:53:94:64:65:4d:ed:fe:
69:ec:08:c0:0c:96:9c:79:b8:00:c8:00:04:1e:2b:
3a:e5:8e:0d:72:c9:1b:c1:a3:77:8f:79:e2:40:5a:
d3:91:97:d5:e9:26:d3:f7:db:dd:70:c6:05:4d:8f:
af:b2:e3:05:c7:37:66:06:dc:c0:5c:a9:ac:0d:ec:
8f:26:8f:16:fe:dd:c5:af:c7:1f:7e:a0:d0:52:df:
9e:d8:4e:e1:8b:49:ef:7f:51:80:05:4b:09:dd:09:
1c:ec:0b:df:62:62:83:ab:cb:58:76:16:d5:39:92:
56:72:a9:23:21:61:11:7a:02:b2:49:63:d8:ae:fe:
b0:d0:e5:82:31:42:e3:09:7a:14:62:4a:5e:aa:03:
8e:96:57:5a:f7:7c:3d:e3:c7:3b:9b:c2:e1:4a:0d:
da:a0:b3:6c:89:8e:ec:6e:be:8c:a2:66:04:97:08:
99:14:e4:9a:fe:b3:6a:05:f6:36:d7:79:5c:49:f3:
0c:5b:33:7b:47:85:fd:18:05:c5:db:f1:9d:ab:15:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:21:44:28:5D:05:B7:E2:3A:68:59:A6:B3:42:A6:4D:CC:66:DF:06
X509v3 Authority Key Identifier:
keyid:B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B889BE89077CF75CB3D33CA36A19B935046D749F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4728:8000::/33
Signature Algorithm: sha256WithRSAEncryption
55:10:c2:a4:32:8a:b6:b3:77:63:0c:82:69:3c:42:c7:3b:e2:
10:75:69:d7:8e:74:8e:a3:ae:c8:1c:d8:cb:94:7e:db:fc:12:
ae:7c:8b:1e:16:52:90:68:af:fa:f9:66:ec:e1:1a:91:4a:75:
29:15:b7:7d:1e:b5:b8:50:0b:f1:c1:80:83:7f:f4:5c:fb:89:
af:37:29:16:2a:6e:bd:56:0a:29:82:b3:27:63:22:38:94:e2:
e3:e7:b8:76:1e:55:e2:da:96:3e:a4:39:46:26:3f:2a:d7:eb:
68:69:50:55:3f:6b:ab:54:84:4d:6c:50:33:49:b1:50:4e:7f:
02:e1:3c:57:a0:6d:9c:0d:12:10:c0:31:aa:48:a8:5a:34:f1:
0d:f0:89:ba:17:88:27:e3:f2:6c:a8:7b:97:04:59:50:e0:28:
f1:02:0c:d7:dd:bd:cd:d9:81:bf:d6:e5:9c:2a:7a:1a:8d:fe:
2f:6c:9c:be:f5:5c:85:73:72:50:c8:39:6a:14:f5:b0:cf:56:
ac:26:99:09:79:54:7b:fe:13:0b:ec:b4:cc:db:ed:86:f5:7f:
ca:8e:7b:30:34:13:49:11:2e:bd:79:34:24:43:6a:2f:a4:09:
f1:17:39:5f:fa:75:c6:25:ec:62:6f:61:89:0b:c6:82:8d:1c:
10:20:48:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:08 2025 by rpki-client