Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa
File: 3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa (raw, json)
Hash identifier: kx6IFn49rvQUMFTNvvDH7izbfjt9lIcK2Kl3s+Wiqlg=
Subject key identifier: 6B:5C:AD:93:DE:6B:87:E6:CE:FA:CB:A0:83:D0:15:D0:74:4E:37:FC
Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial: 2C984300251D7D77F48EE2335AEFA54B89741C3B
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa
Signing time: Thu 04 Apr 2024 15:05:55 +0000
ROA not before: Thu 04 Apr 2024 15:00:55 +0000
ROA not after: Thu 03 Apr 2025 15:05:55 +0000
asID: 264867
IP address blocks: 168.205.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:98:43:00:25:1d:7d:77:f4:8e:e2:33:5a:ef:a5:4b:89:74:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Validity
Not Before: Apr 4 15:00:55 2024 GMT
Not After : Apr 3 15:05:55 2025 GMT
Subject: CN=6B5CAD93DE6B87E6CEFACBA083D015D0744E37FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:88:8e:c8:12:1d:a1:8b:ea:7f:d5:ec:2d:7c:
e4:1f:50:3d:c5:54:bd:10:0a:60:70:4f:57:4a:a7:
de:d9:98:fe:a8:fe:0b:d4:0f:4c:b3:ba:c8:ea:e5:
8f:a2:b5:4a:88:6e:f6:41:72:71:ef:cc:dc:e9:95:
d3:4d:ec:44:fd:16:75:bc:fe:90:af:ef:2f:0d:0d:
52:cf:da:1d:f8:7d:ad:be:99:8a:4e:92:20:a5:a0:
ce:40:03:b9:ef:91:ce:26:aa:ee:2b:24:a7:41:c1:
51:f7:bc:ed:55:97:f8:92:21:a9:12:f0:13:ff:af:
a3:ef:f2:ea:14:ce:eb:a7:72:f2:35:e1:57:9f:30:
2a:66:c6:dc:46:dd:5e:a2:8d:ee:43:b2:22:eb:85:
a7:d5:e2:03:64:a3:aa:ea:b5:99:bb:6d:10:f2:7b:
02:39:00:c2:b6:37:bf:5d:a3:f6:1c:39:5b:df:41:
7a:0b:79:45:28:5d:a1:16:75:92:c9:db:2c:e5:bf:
b8:44:7a:fa:d9:64:78:46:b4:4e:61:6f:9d:e5:c8:
a4:e1:bd:f1:88:8a:a8:8c:b3:38:f8:b5:16:e1:9d:
3f:ad:4c:ea:aa:0f:d5:84:23:e7:7d:57:48:c8:e2:
ee:b2:4a:a4:d9:3e:75:ee:9e:32:4e:8d:fe:02:38:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:AD:93:DE:6B:87:E6:CE:FA:CB:A0:83:D0:15:D0:74:4E:37:FC
X509v3 Authority Key Identifier:
keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232362e302f32342d3234203d3e20323634383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.226.0/24
Signature Algorithm: sha256WithRSAEncryption
84:93:41:be:34:f4:ca:d0:52:ac:8c:4b:03:ae:9c:a2:2b:87:
0b:9b:e3:60:0d:a0:5a:69:29:3e:d3:f3:89:1f:d6:a3:8b:5d:
24:29:4a:82:33:48:8e:0f:8e:30:88:3c:1d:17:ad:23:de:06:
56:41:20:a3:93:4b:d7:8e:d2:79:54:4a:2a:29:ba:93:71:26:
60:73:3c:d1:87:31:22:03:14:bf:5f:38:ba:ff:89:e3:9b:ed:
0f:dd:df:db:57:cd:3a:22:de:4c:e8:5a:a4:02:ed:9d:a2:e6:
17:5f:24:84:5d:3f:63:73:f2:de:46:d6:ed:5a:3a:2e:0e:eb:
d6:34:09:cb:8f:77:d1:35:6f:d3:b0:16:e6:49:0c:42:8e:b3:
2d:3c:b3:63:6c:12:70:cc:b9:5f:95:9e:d2:ac:65:a0:ec:cc:
42:1a:13:2b:5a:33:d6:74:5b:a8:22:ce:d5:8f:77:b9:d1:d2:
1b:42:f0:4b:70:bd:07:d3:c1:e4:8e:08:31:74:f4:bf:0b:e5:
ba:97:e7:ac:0e:87:a4:27:36:8b:b3:18:7a:eb:af:c9:6b:52:
84:9f:95:03:85:ce:aa:97:46:a0:a6:27:b0:83:f7:53:a3:07:
b0:17:5e:cb:e0:ea:75:67:07:2d:a9:74:49:64:bf:aa:ae:39:
23:32:84:fe
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULJhDACUdfXf0juIzWu+lS4l0HDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhEOUI4RTRBODM1QTJGRTBGOTA1Nzg2REVEOEI1MzBG
N0YwQUQwNTAeFw0yNDA0MDQxNTAwNTVaFw0yNTA0MDMxNTA1NTVaMDMxMTAvBgNV
BAMTKDZCNUNBRDkzREU2Qjg3RTZDRUZBQ0JBMDgzRDAxNUQwNzQ0RTM3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyiI7IEh2hi+p/1ewtfOQfUD3F
VL0QCmBwT1dKp97ZmP6o/gvUD0yzusjq5Y+itUqIbvZBcnHvzNzpldNN7ET9FnW8
/pCv7y8NDVLP2h34fa2+mYpOkiCloM5AA7nvkc4mqu4rJKdBwVH3vO1Vl/iSIakS
8BP/r6Pv8uoUzuuncvI14VefMCpmxtxG3V6ije5DsiLrhafV4gNko6rqtZm7bRDy
ewI5AMK2N79do/YcOVvfQXoLeUUoXaEWdZLJ2yzlv7hEevrZZHhGtE5hb53lyKTh
vfGIiqiMszj4tRbhnT+tTOqqD9WEI+d9V0jI4u6ySqTZPnXunjJOjf4COJvPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUa1ytk95rh+bO+sugg9AV0HRON/wwHwYDVR0j
BBgwFoAU2Nm45Kg1ov4PkFeG3ti1MPfwrQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpD
MTQvMS9EOEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4RDlCOEU0QTgzNUEyRkUw
RjkwNTc4NkRFRDhCNTMwRjdGMEFEMDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNGaEgzY3FaYThzR2NaQTNtS1hrZzY2Sm9haFBtOVZTWGlFWjRyaVlaQzE0LzEv
MzEzNjM4MmUzMjMwMzUyZTMyMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjN4jANBgkqhkiG9w0BAQsFAAOCAQEAhJNB
vjT0ytBSrIxLA66coiuHC5vjYA2gWmkpPtPziR/Wo4tdJClKgjNIjg+OMIg8HRet
I94GVkEgo5NL147SeVRKKim6k3EmYHM80YcxIgMUv184uv+J45vtD93f21fNOiLe
TOhapALtnaLmF18khF0/Y3Py3kbW7Vo6Lg7r1jQJy4930TVv07AW5kkMQo6zLTyz
Y2wScMy5X5We0qxloOzMQhoTK1oz1nRbqCLO1Y93udHSG0LwS3C9B9PB5I4IMXT0
vwvlupfnrA6HpCc2i7MYeuuvyWtShJ+VA4XOqpdGoKYnsIP3U6MHsBdey+DqdWcH
Lal0SWS/qq45IzKE/g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:06 2025 by rpki-client