Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a383030303a3a2f33342d3334203d3e20323731363733.roa
File: 323830343a376633343a383030303a3a2f33342d3334203d3e20323731363733.roa (raw, json)
Hash identifier: Gnq1RQP+JJrF4PghogkiLjFjC2yUN33/Y0T7c4tBZTk=
Subject key identifier: B1:25:74:5B:FF:67:3F:68:43:34:1F:08:FF:3F:9F:CE:76:04:F1:97
Certificate issuer: /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial: 6D8498A644F71E233652608B8C6194C6D4E47E4A
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access: rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a383030303a3a2f33342d3334203d3e20323731363733.roa
Signing time: Fri 17 Jan 2025 18:13:58 +0000
ROA not before: Fri 17 Jan 2025 18:08:58 +0000
ROA not after: Fri 16 Jan 2026 18:13:58 +0000
asID: 271673
IP address blocks: 2804:7f34:8000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:84:98:a6:44:f7:1e:23:36:52:60:8b:8c:61:94:c6:d4:e4:7e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Validity
Not Before: Jan 17 18:08:58 2025 GMT
Not After : Jan 16 18:13:58 2026 GMT
Subject: CN=B125745BFF673F6843341F08FF3F9FCE7604F197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:de:a5:ef:3e:86:bb:6b:70:4a:ea:7c:ed:
c1:c1:97:3d:da:2a:23:da:5f:b9:d3:01:a9:0d:21:
8a:08:43:fa:54:85:16:c3:4e:c5:8d:76:fb:41:24:
1d:74:1d:6b:50:15:17:a8:e6:04:11:78:25:33:ab:
6e:a5:32:a1:bf:b9:99:90:92:0f:09:8a:7f:89:d9:
ab:28:0f:67:68:fb:ce:20:42:b1:49:54:e3:1a:c0:
5a:28:85:5a:19:cc:32:de:79:72:18:12:bb:3f:8c:
20:66:a2:ba:ad:ed:97:86:f2:c3:ea:29:2d:0a:02:
4d:00:18:6c:d4:b2:a2:d1:3f:b7:f3:5c:78:5f:13:
8c:4d:67:04:90:aa:d1:e7:07:d6:26:37:53:ba:d2:
d1:04:6d:e7:28:5d:15:f5:56:52:4c:af:5f:ef:1a:
2b:21:bb:fb:4d:d8:18:08:09:6e:3f:df:03:33:ca:
a9:80:cb:da:2f:85:84:42:c4:49:65:06:c0:76:2f:
50:9c:eb:12:61:92:fb:38:54:30:62:24:af:c7:e2:
45:9b:a4:c0:d9:d0:22:f0:a0:89:76:09:4d:19:31:
0b:fe:39:95:06:20:1c:76:29:3b:c2:a2:bd:86:2b:
bc:4d:8f:6e:a7:df:c7:f0:b1:4b:71:a6:bf:5e:8e:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:25:74:5B:FF:67:3F:68:43:34:1F:08:FF:3F:9F:CE:76:04:F1:97
X509v3 Authority Key Identifier:
keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a383030303a3a2f33342d3334203d3e20323731363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7f34:8000::/34
Signature Algorithm: sha256WithRSAEncryption
c7:ce:2a:f9:25:ab:05:56:d6:8d:3d:84:73:3b:05:b7:1e:61:
95:e6:ed:6e:2c:32:98:47:73:0e:7a:70:2a:cb:d3:a5:ce:84:
90:d3:c6:ad:00:55:06:54:f2:83:64:6d:a2:85:e5:d1:19:33:
00:d8:52:61:e4:11:61:a2:73:ad:20:4b:18:b2:cc:ee:67:8a:
98:da:b5:8c:79:27:01:93:0f:c6:e6:0b:c1:a6:73:2d:fa:85:
b7:e9:27:b5:7c:4c:88:70:00:eb:ca:d6:ab:33:34:46:df:b5:
47:e2:c0:f5:3d:46:5f:36:b5:a6:76:e7:ad:46:85:f9:5a:64:
13:8d:69:57:06:8b:f4:d7:a0:f5:be:20:68:62:e0:bd:8d:2a:
72:20:ee:b1:e9:f9:ff:83:e6:b3:6c:22:e8:2f:f8:c7:df:68:
15:ce:7d:38:3e:c4:4e:b0:46:32:e9:49:ad:f5:a6:71:a0:b8:
e4:a0:2c:d1:89:06:15:ea:11:02:d8:7b:b2:93:63:3a:f8:bf:
9f:dd:9f:82:fa:e6:c0:d9:a1:be:50:9c:cd:13:da:ff:5d:94:
a3:95:0b:69:d5:c6:a2:3f:43:94:5e:14:40:87:e2:fd:15:2c:
de:fb:fe:fc:6f:7d:18:31:7c:5f:1e:70:7b:4e:5f:a1:fe:a0:
03:9e:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:23 2025 by rpki-client