Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a3a2f33322d3332203d3e20323633393931.roa
File: 323830343a323866633a3a2f33322d3332203d3e20323633393931.roa (raw, json)
Hash identifier: zJmly09KIOg6/SoP5YSl7Ao3E8zHdpkOC2g/wz/UUQ4=
Subject key identifier: 03:91:06:F2:EC:71:10:D0:01:A2:CD:49:29:6E:27:D9:5A:04:F6:F7
Certificate issuer: /CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Certificate serial: 1DB56897CF095026C3E000D5597F66B834C80513
Authority key identifier: 97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a3a2f33322d3332203d3e20323633393931.roa
Signing time: Thu 25 Apr 2024 19:52:10 +0000
ROA not before: Thu 25 Apr 2024 19:47:10 +0000
ROA not after: Thu 24 Apr 2025 19:52:10 +0000
asID: 263991
IP address blocks: 2804:28fc::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b5:68:97:cf:09:50:26:c3:e0:00:d5:59:7f:66:b8:34:c8:05:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Validity
Not Before: Apr 25 19:47:10 2024 GMT
Not After : Apr 24 19:52:10 2025 GMT
Subject: CN=039106F2EC7110D001A2CD49296E27D95A04F6F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:d5:6a:ce:9e:c0:ce:d6:86:84:8a:e3:18:
1e:e3:36:4c:62:65:4a:d6:7c:44:c2:24:2d:5e:2a:
8c:5b:af:25:68:d4:fe:74:2b:51:eb:e9:3b:5a:7a:
43:2c:45:96:9c:74:30:f9:59:63:5f:15:b6:bb:93:
c1:59:62:cd:5f:37:34:5a:6a:f0:3f:b7:e3:04:32:
10:45:01:9d:cc:9a:ec:5e:30:ab:e1:90:b8:6a:ea:
2a:af:8c:35:09:5f:63:1f:65:a1:64:0d:7c:aa:c6:
56:a4:f3:c8:fe:97:f4:af:d2:c5:50:c3:9d:97:7e:
af:1d:8f:28:a5:9c:bc:48:ca:1a:73:1f:88:88:49:
c0:6e:44:89:03:ee:f4:fe:e0:f1:26:db:74:53:ff:
e5:a9:1b:e3:80:05:6a:22:2e:56:49:ce:eb:9f:65:
cc:16:5b:c2:56:a1:bc:31:87:eb:65:e8:59:94:7d:
7d:65:88:39:c9:53:68:e8:bd:82:c0:63:86:b7:bd:
a8:d9:35:57:87:cc:21:8b:52:8f:3b:69:76:c3:97:
dd:f4:cc:74:3d:69:e9:04:f6:8d:a7:65:5f:2b:6c:
72:8a:4e:c8:4d:2b:44:d2:61:e1:ce:84:11:62:d6:
e6:48:01:9b:a5:06:4f:b0:02:5b:fa:b0:8a:32:63:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:91:06:F2:EC:71:10:D0:01:A2:CD:49:29:6E:27:D9:5A:04:F6:F7
X509v3 Authority Key Identifier:
keyid:97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/323830343a323866633a3a2f33322d3332203d3e20323633393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:28fc::/32
Signature Algorithm: sha256WithRSAEncryption
1e:f9:46:10:28:bc:12:bc:48:22:89:fa:9e:d0:08:34:ca:69:
98:c6:a2:e0:07:a6:76:8c:19:80:e2:a3:12:b9:fd:2a:c4:38:
29:07:a3:4d:41:62:42:c6:61:44:6c:91:87:8e:63:29:cc:14:
7a:e6:68:ac:13:4c:c7:8f:b2:c9:4d:98:48:f9:7c:d9:0c:34:
a4:6b:59:01:59:f9:d0:b4:20:aa:3f:2a:76:32:4e:80:a6:98:
b3:76:bc:76:23:70:a9:ad:65:38:4b:7f:0c:13:30:03:6b:9f:
77:a2:fb:de:dd:cd:f7:d6:08:d6:c4:e4:45:fa:b6:45:e2:91:
d9:45:cf:0d:e0:22:06:bd:52:1a:d3:b7:ee:ff:7c:38:59:ae:
47:77:43:31:97:48:f9:1a:78:e1:85:04:1d:9a:ef:b6:47:8d:
53:3e:55:5e:5c:83:cf:a9:e9:4e:db:cf:a1:56:04:25:e8:99:
4f:13:92:b5:8e:76:d4:04:2a:5f:c7:69:47:66:b4:b7:70:34:
16:50:56:f7:c5:1e:a5:62:ee:1c:cc:4b:37:35:9b:44:72:86:
6e:8a:13:2b:da:7a:12:5b:2f:b7:07:aa:26:24:b1:e1:3f:ce:
6b:42:a8:fd:04:0c:67:65:fe:52:48:b8:b3:77:2b:a7:82:2a:
5f:5a:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:44:54 2025 by rpki-client