Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa
File: 3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa (raw, json)
Hash identifier: f8OSNivZbChd+ySJ2REv+6U23O3hyQxHe65VO+DGIXk=
Subject key identifier: 63:D0:5A:EA:6B:E9:1D:9E:FD:70:6C:66:43:14:5F:96:FE:66:3F:FC
Certificate issuer: /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial: 5BC6E77523604B89A770CA6E3F9218200BCD73AE
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa
Signing time: Wed 03 Apr 2024 20:05:23 +0000
ROA not before: Wed 03 Apr 2024 20:00:23 +0000
ROA not after: Wed 02 Apr 2025 20:05:23 +0000
asID: 270437
IP address blocks: 200.11.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c6:e7:75:23:60:4b:89:a7:70:ca:6e:3f:92:18:20:0b:cd:73:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
Validity
Not Before: Apr 3 20:00:23 2024 GMT
Not After : Apr 2 20:05:23 2025 GMT
Subject: CN=63D05AEA6BE91D9EFD706C6643145F96FE663FFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:f8:e7:6b:c8:12:5b:a3:3f:65:e0:e2:0a:
c8:8c:70:4f:0d:12:b2:bb:34:b4:aa:4d:f0:8c:e3:
50:0e:ea:98:a4:d9:bf:8c:75:c1:13:dc:64:d4:f0:
8a:ae:e9:7f:41:c1:e8:6b:4b:76:ae:10:d3:85:a2:
b4:02:de:7c:6b:b8:d2:a2:c9:54:c5:4c:7f:5c:8c:
5b:bb:76:43:05:6b:90:dd:a4:fa:0a:e0:7b:0d:a6:
b9:8d:5c:cc:69:21:a6:cd:dd:2c:71:f2:e4:b8:2d:
d5:ee:a3:d2:f8:14:50:a1:c2:58:7e:7d:af:e6:91:
15:16:f6:6d:aa:97:7c:ab:81:e8:c4:6f:46:eb:70:
4c:de:ad:c1:87:78:ef:13:8d:67:25:6c:5f:66:49:
c4:44:57:45:74:74:7f:85:08:36:c5:4b:eb:9a:b7:
02:e2:51:65:5f:7f:65:a5:13:8e:05:b8:83:3b:15:
c9:df:81:0a:ee:c2:d0:5a:0a:b6:10:49:93:54:2e:
c2:25:1b:ba:38:91:f3:80:e6:a0:50:32:3f:53:6f:
f6:19:91:c9:8a:54:33:d9:07:7d:a7:da:c6:5f:9e:
2b:d4:0c:72:09:ba:fb:5c:88:b8:45:67:52:cf:6d:
a4:8c:99:11:4c:1d:4c:69:df:78:16:d0:8f:b2:7b:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D0:5A:EA:6B:E9:1D:9E:FD:70:6C:66:43:14:5F:96:FE:66:3F:FC
X509v3 Authority Key Identifier:
keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/3230302e31312e3130342e302f32332d3233203d3e20323730343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.11.104.0/23
Signature Algorithm: sha256WithRSAEncryption
35:ee:fe:3a:36:4a:aa:1e:fe:45:1f:ca:14:e3:bf:82:5c:4d:
2b:64:ae:3a:30:73:00:d1:5b:7a:a2:0e:87:44:27:e8:f6:a1:
df:da:00:0c:42:15:b5:e4:7f:c9:e6:1d:03:7e:f3:05:40:78:
b7:b6:ce:40:7a:7e:99:b0:87:da:32:44:9e:4a:70:ef:f8:43:
fa:12:b4:6c:33:bc:9f:f2:b6:1f:4e:85:97:74:03:d8:88:3d:
65:20:69:7f:48:83:2f:a6:e4:fd:4b:56:25:98:8c:61:48:8a:
f6:6c:14:00:91:ac:43:b8:d5:0f:28:77:45:90:f6:b4:ab:cf:
17:2b:dd:3e:b4:20:4d:dc:a0:be:9f:d7:6b:15:38:6c:d9:95:
6a:79:9c:1f:f3:bf:b1:fb:13:12:c7:8f:b3:dc:54:ce:d7:0f:
f0:4d:4a:32:01:60:08:7f:72:25:ca:72:cc:b8:39:4e:50:52:
c7:6c:e8:2a:57:86:39:37:70:5e:9e:10:46:b8:b6:a2:4a:af:
4a:ed:ff:70:b7:9b:a9:87:0b:e5:f8:fc:dc:0e:4e:17:f0:5d:
32:3d:74:d6:18:6d:ca:f7:1a:19:6f:d5:d7:41:2f:2c:4a:30:
1d:98:d0:13:c8:43:51:ca:da:22:80:da:f4:d7:5a:10:7c:f6:
93:6a:60:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:55 2025 by rpki-client