Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa
File: 323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa (raw, json)
Hash identifier: aaHts81Edsezmmnphb2dQkYy8CS+xxzJwYD7/N207Gk=
Subject key identifier: 73:93:DD:E9:D6:92:73:D5:C6:59:B0:9D:0A:55:42:22:6A:9B:18:65
Certificate issuer: /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial: 160DC80E44C4A5BA07FEA97BAD72F9C3DC573D47
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa
Signing time: Wed 03 Apr 2024 20:05:24 +0000
ROA not before: Wed 03 Apr 2024 20:00:24 +0000
ROA not after: Wed 02 Apr 2025 20:05:24 +0000
asID: 270437
IP address blocks: 2804:6bf8:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0d:c8:0e:44:c4:a5:ba:07:fe:a9:7b:ad:72:f9:c3:dc:57:3d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
Validity
Not Before: Apr 3 20:00:24 2024 GMT
Not After : Apr 2 20:05:24 2025 GMT
Subject: CN=7393DDE9D69273D5C659B09D0A5542226A9B1865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:6d:56:4e:21:cc:92:60:e3:b6:5d:fd:69:
af:ab:0c:09:c8:5c:74:ac:b3:60:8c:d8:c1:d0:fd:
f9:ee:e0:55:d3:df:0c:aa:04:bf:d6:31:f1:9a:19:
a4:62:c4:fd:7d:66:c2:60:86:58:42:56:a2:7d:66:
11:3a:97:b5:38:07:30:22:aa:75:8c:61:8d:b5:06:
d9:18:91:a8:83:67:5b:8a:5d:23:e4:81:a9:8a:a4:
b1:6a:3f:da:8b:ae:cc:87:b5:7a:0a:b4:3e:76:97:
3f:8f:af:e9:e7:7f:57:bb:f6:e4:7c:5e:3f:50:00:
1e:50:0a:55:76:a9:15:25:30:ee:85:9c:f6:02:eb:
a6:45:a4:fc:6b:07:92:54:88:90:01:85:56:6a:64:
80:1f:c0:9c:52:c1:02:d5:46:ad:d9:0b:de:38:74:
9a:6b:b2:d5:69:23:06:75:31:cc:18:3b:f1:1e:bc:
9a:19:f4:14:20:e4:e6:b6:5b:54:54:a5:61:99:1f:
3b:77:d4:3e:a1:26:ff:7e:ba:33:99:52:ac:9b:f0:
9d:02:fd:ee:1e:25:4e:cf:33:28:99:27:03:ce:46:
b5:46:36:5b:6e:0d:d1:b9:d4:89:cf:9d:fc:d2:1e:
19:5b:d6:7a:ea:90:ef:55:5f:22:1d:3b:d9:2b:71:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:93:DD:E9:D6:92:73:D5:C6:59:B0:9D:0A:55:42:22:6A:9B:18:65
X509v3 Authority Key Identifier:
keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/323830343a366266383a383030303a3a2f33332d3333203d3e20323730343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6bf8:8000::/33
Signature Algorithm: sha256WithRSAEncryption
9e:a4:cc:f5:eb:f5:8c:4c:57:d0:0e:fd:b3:1a:25:e0:3e:9b:
46:9a:b9:b0:0a:3c:ca:98:42:2d:e0:ad:e0:4c:6f:b1:ba:b1:
99:d0:e1:d1:d6:27:4c:fd:a3:88:91:03:ad:b6:af:fc:e7:c5:
83:84:e6:3c:a9:85:e0:bb:4f:67:c2:e6:99:fe:3a:cf:03:2c:
0a:60:30:58:8b:91:88:fd:01:5c:80:83:ba:23:14:47:77:e8:
0e:21:50:03:c7:0c:14:ec:fb:66:dc:05:5f:23:c3:cd:2b:cc:
8d:a0:cc:9a:56:f1:ae:39:27:f9:3e:b0:1d:6a:32:ad:ac:6b:
19:fc:24:2e:2b:09:d6:7f:60:f9:19:cc:62:3d:dc:00:bd:25:
5e:8b:ea:da:d1:0a:17:31:0b:9a:d5:bc:b9:7e:45:7d:13:ba:
41:be:07:c7:0b:ce:ab:5f:77:1c:b4:2c:e1:3c:4a:f9:77:d6:
fc:f7:2c:4e:54:6a:fd:fb:d6:31:cd:c6:9f:13:d3:f4:8e:e4:
b6:0f:5a:98:a0:bd:54:61:62:cb:7a:0e:3f:a3:4f:c7:28:21:
40:39:bc:80:59:bb:a0:11:e9:03:af:72:4b:f2:d9:3c:9c:15:
f8:2f:4f:31:0b:95:e6:9f:36:d6:ff:f3:6b:6b:cd:98:e4:c6:
8a:1f:41:31
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFg3IDkTEpboH/ql7rXL5w9xXPUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDIzQUVBM0JGOTY4NkQ3OTQ5NjdCRUNBQzIyNkZBOTY0
ODg3Njg3MDAeFw0yNDA0MDMyMDAwMjRaFw0yNTA0MDIyMDA1MjRaMDMxMTAvBgNV
BAMTKDczOTNEREU5RDY5MjczRDVDNjU5QjA5RDBBNTU0MjIyNkE5QjE4NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfG1WTiHMkmDjtl39aa+rDAnI
XHSss2CM2MHQ/fnu4FXT3wyqBL/WMfGaGaRixP19ZsJghlhCVqJ9ZhE6l7U4BzAi
qnWMYY21BtkYkaiDZ1uKXSPkgamKpLFqP9qLrsyHtXoKtD52lz+Pr+nnf1e79uR8
Xj9QAB5QClV2qRUlMO6FnPYC66ZFpPxrB5JUiJABhVZqZIAfwJxSwQLVRq3ZC944
dJprstVpIwZ1McwYO/EevJoZ9BQg5Oa2W1RUpWGZHzt31D6hJv9+ujOZUqyb8J0C
/e4eJU7PMyiZJwPORrVGNltuDdG51InPnfzSHhlb1nrqkO9VXyIdO9krcakTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUc5Pd6daSc9XGWbCdClVCImqbGGUwHwYDVR0j
BBgwFoAU0jrqO/lobXlJZ77Kwib6lkiHaHAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlM2MWM3cWZxN3NCR3h2cWE0NDdoblUyZmttbU13SzZKUkhBazZaZ3JI
a3UvMS9EMjNBRUEzQkY5Njg2RDc5NDk2N0JFQ0FDMjI2RkE5NjQ4ODc2ODcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyM0FFQTNCRjk2ODZENzk0
OTY3QkVDQUMyMjZGQTk2NDg4NzY4NzAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTNjFjN3FmcTdzQkd4dnFhNDQ3aG5VMmZrbW1Nd0s2SlJIQWs2WmdySGt1LzEv
MzIzODMwMzQzYTM2NjI2NjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEa/iAMA0GCSqGSIb3DQEBCwUA
A4IBAQCepMz16/WMTFfQDv2zGiXgPptGmrmwCjzKmEIt4K3gTG+xurGZ0OHR1idM
/aOIkQOttq/858WDhOY8qYXgu09nwuaZ/jrPAywKYDBYi5GI/QFcgIO6IxRHd+gO
IVADxwwU7Ptm3AVfI8PNK8yNoMyaVvGuOSf5PrAdajKtrGsZ/CQuKwnWf2D5Gcxi
PdwAvSVei+ra0QoXMQua1by5fkV9E7pBvgfHC86rX3cctCzhPEr5d9b89yxOVGr9
+9YxzcafE9P0juS2D1qYoL1UYWLLeg4/o0/HKCFAObyAWbugEekDr3JL8tk8nBX4
L08xC5XmnzbW//Nra82Y5MaKH0Ex
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:28:03 2025 by rpki-client