Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa
File: 323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa (raw, json)
Hash identifier: MwJJ8Mm2z+/ELvG40NH/+Kv0dt+tg2+QT2SLFZsm2Hg=
Subject key identifier: 80:A8:2D:C6:87:77:58:6D:14:B7:74:3A:C9:E7:AD:38:3B:20:D1:36
Certificate issuer: /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial: 24A04A7FC7D23A342A90CDAB49B11B55FF284C9E
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access: rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa
Signing time: Fri 17 Jan 2025 18:14:00 +0000
ROA not before: Fri 17 Jan 2025 18:09:00 +0000
ROA not after: Fri 16 Jan 2026 18:14:00 +0000
asID: 271673
IP address blocks: 2804:7f34:4000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a0:4a:7f:c7:d2:3a:34:2a:90:cd:ab:49:b1:1b:55:ff:28:4c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Validity
Not Before: Jan 17 18:09:00 2025 GMT
Not After : Jan 16 18:14:00 2026 GMT
Subject: CN=80A82DC68777586D14B7743AC9E7AD383B20D136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:3e:7b:c2:9e:30:39:bc:74:a2:ba:1e:94:
30:e1:8c:4e:ee:4f:68:b9:e7:29:af:1c:d8:d4:4d:
c4:2a:20:e0:d9:32:3f:7b:b7:4d:74:59:35:a8:cc:
e1:ea:1f:fd:7b:c8:7f:eb:d4:f8:cf:00:e5:ad:a3:
b9:f0:51:d2:b5:2a:77:45:62:2e:54:67:89:b9:b4:
96:59:d2:2a:eb:e1:a9:33:30:eb:7e:47:b1:1e:41:
52:bd:29:31:01:8f:d3:34:eb:c2:5a:97:14:f4:78:
6b:26:78:f2:c3:c5:08:b4:c1:f8:63:35:8a:7c:16:
e1:ea:53:7c:be:29:21:28:5a:3e:88:7b:56:4e:56:
a9:13:b6:0d:b3:fe:b9:4c:fe:be:1f:dc:d0:d3:2c:
2c:32:b9:9f:f5:26:e9:76:a4:3d:d8:d9:62:97:43:
b6:9a:fe:24:1b:ff:c8:7a:ca:b1:19:9d:32:4e:d4:
28:51:ac:13:b1:ab:f8:0a:fe:30:48:23:23:cc:b6:
f8:fa:d4:c0:f4:28:7d:f8:47:8f:2c:d6:95:4e:cb:
f4:fd:47:77:21:82:36:e9:2a:a3:db:d9:de:32:78:
31:33:71:d2:63:bf:db:74:bc:6d:59:ca:94:ca:62:
6e:14:84:d3:e0:fa:51:72:5d:a1:c4:77:71:ce:be:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A8:2D:C6:87:77:58:6D:14:B7:74:3A:C9:E7:AD:38:3B:20:D1:36
X509v3 Authority Key Identifier:
keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a343030303a3a2f33342d3334203d3e20323731363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7f34:4000::/34
Signature Algorithm: sha256WithRSAEncryption
0f:91:44:12:85:6e:2c:ea:38:e6:60:e5:95:04:59:43:1f:96:
ff:80:94:95:c7:e7:b9:84:01:69:f9:38:b1:b4:d8:b6:f4:8c:
6f:81:08:81:19:58:00:d9:bb:2b:be:8a:46:cc:cd:50:1e:b8:
39:96:e0:5f:bd:d4:6e:cf:0f:82:10:96:0c:46:0e:f1:92:32:
95:6b:01:32:7a:be:0c:ef:69:13:ff:11:15:9a:40:10:e1:29:
f0:4e:be:a7:1c:d5:dd:52:29:70:ae:ff:94:44:34:55:8f:d7:
e1:e9:07:b7:f2:56:c6:e1:88:ed:68:64:4c:e0:ef:8d:31:58:
52:fc:9a:61:00:1b:3b:44:2a:fa:a3:a8:1e:eb:7d:60:7c:e6:
fa:34:35:b6:3b:44:4c:49:2e:af:3c:c7:d1:d4:0e:b3:e8:68:
33:ac:26:41:9a:64:15:b7:c5:e9:c7:d7:1c:c5:5f:33:75:01:
c7:06:9f:d9:3d:6f:88:ea:60:9c:58:34:86:50:87:eb:10:3b:
6d:ba:d8:bb:55:c9:78:44:36:30:c2:26:d2:1f:91:bc:43:9a:
fb:a3:2b:0c:59:28:08:0f:61:82:6d:bf:ef:af:da:bf:e1:f4:
09:7c:75:25:74:6b:7e:b0:16:73:69:aa:a6:6b:d8:61:d5:d9:
50:fe:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:16 2025 by rpki-client