Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa
File: 34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa (raw, json)
Hash identifier: fFr/8JYWMgLz+osFkYDKs2BbUOyP9/9RCeJKhH/OIHA=
Subject key identifier: FE:79:83:06:63:BD:50:77:36:92:FB:33:CF:A0:5D:2A:0C:1D:4A:E9
Certificate issuer: /CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Certificate serial: 21ABD12FEF3BB756ADAE44BA9C3E050B0FCA00AC
Authority key identifier: 38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa
Signing time: Thu 04 Apr 2024 08:21:10 +0000
ROA not before: Thu 04 Apr 2024 08:16:10 +0000
ROA not after: Thu 03 Apr 2025 08:21:10 +0000
asID: 268297
IP address blocks: 45.237.248.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ab:d1:2f:ef:3b:b7:56:ad:ae:44:ba:9c:3e:05:0b:0f:ca:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38CD1F71C2A8E33D887C099EBB046A7EB10C6C22
Validity
Not Before: Apr 4 08:16:10 2024 GMT
Not After : Apr 3 08:21:10 2025 GMT
Subject: CN=FE79830663BD50773692FB33CFA05D2A0C1D4AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:4a:82:30:c1:4c:27:96:1d:8c:08:df:e9:
c0:e8:cc:9c:85:0e:1c:af:6c:5c:0d:7e:d4:b3:b3:
63:73:06:ab:b0:ec:ff:b7:d3:d4:de:c8:9a:1f:5c:
51:66:b6:34:b1:b4:2a:da:98:9b:82:21:d7:b0:c2:
7c:98:6f:67:c6:f3:e2:58:77:c0:a1:79:60:c5:1e:
fb:88:8c:7d:53:4f:94:42:45:01:9f:b3:f4:66:32:
f8:d6:16:19:47:80:be:b1:d7:6d:4a:9a:7c:d7:a6:
90:20:06:0e:1d:8d:2a:92:11:de:d0:a0:03:2e:5a:
68:fe:66:87:71:f7:ab:2b:a6:58:75:70:ef:fc:f6:
f0:c6:9d:1a:fc:ac:7f:01:1d:44:9c:8a:57:92:d0:
a8:04:06:f3:f9:20:09:4a:c2:19:50:ef:98:c4:56:
1d:dc:6f:22:ec:32:38:20:d0:68:a7:2c:15:7f:7a:
47:56:a3:94:d4:9d:c5:8b:f0:e8:34:1c:05:a1:09:
f9:e9:ce:7f:19:06:9c:7b:cb:9a:78:c4:5c:14:a0:
2e:12:77:47:07:b2:63:ce:ea:9d:92:93:35:8c:85:
76:4e:bd:3f:3c:15:f4:72:7b:de:c6:dd:de:95:5b:
e6:74:0c:2b:62:f6:e9:78:1b:4a:86:00:96:0a:da:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:79:83:06:63:BD:50:77:36:92:FB:33:CF:A0:5D:2A:0C:1D:4A:E9
X509v3 Authority Key Identifier:
keyid:38:CD:1F:71:C2:A8:E3:3D:88:7C:09:9E:BB:04:6A:7E:B1:0C:6C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CD1F71C2A8E33D887C099EBB046A7EB10C6C22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/1/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.248.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ec:d8:10:4b:2d:6f:0a:48:d2:07:32:c4:53:84:77:88:d5:
e8:a9:49:23:38:18:53:45:d6:42:ac:e4:b9:a3:f6:78:a2:7b:
22:f8:c2:58:da:8d:ac:55:82:b3:73:d9:39:cc:fa:05:22:54:
f9:59:f2:a0:d4:31:b9:11:36:6a:09:28:63:0a:d2:7b:f3:99:
9c:1f:fb:e5:4b:99:e1:39:60:35:90:d8:2d:ae:26:dd:1f:09:
67:13:a7:04:8b:71:5c:57:e6:50:aa:e2:75:2a:e5:3a:82:47:
53:cb:4e:27:13:09:e5:be:c8:ef:24:54:e8:84:87:36:6f:b2:
c9:3a:f8:95:89:15:58:53:b0:f1:8f:8e:b9:12:d3:c8:83:d1:
b3:ad:91:8f:9b:b8:d2:aa:45:00:c8:00:e5:40:a1:87:c8:a6:
da:33:ed:31:a9:e8:46:9b:6c:1a:b5:18:92:68:c1:2c:73:e2:
ce:f9:41:0b:80:5c:ea:f9:56:40:d0:fe:6f:0d:f6:0b:0e:03:
06:b5:eb:66:09:a7:fb:7b:d1:9b:e2:9c:ca:13:22:b1:3e:2f:
7f:3b:bf:ea:5d:30:d0:0e:3a:d4:50:9b:f8:6e:16:1d:a5:7b:
c7:38:76:8d:b0:93:e0:09:95:87:44:9d:6a:99:9f:f0:85:41:
23:19:3c:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIavRL+87t1atrkS6nD4FCw/KAKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRDFGNzFDMkE4RTMzRDg4N0MwOTlFQkIwNDZBN0VC
MTBDNkMyMjAeFw0yNDA0MDQwODE2MTBaFw0yNTA0MDMwODIxMTBaMDMxMTAvBgNV
BAMTKEZFNzk4MzA2NjNCRDUwNzczNjkyRkIzM0NGQTA1RDJBMEMxRDRBRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDor0qCMMFMJ5YdjAjf6cDozJyF
DhyvbFwNftSzs2NzBquw7P+309TeyJofXFFmtjSxtCramJuCIdewwnyYb2fG8+JY
d8CheWDFHvuIjH1TT5RCRQGfs/RmMvjWFhlHgL6x121KmnzXppAgBg4djSqSEd7Q
oAMuWmj+Zodx96srplh1cO/89vDGnRr8rH8BHUScileS0KgEBvP5IAlKwhlQ75jE
Vh3cbyLsMjgg0GinLBV/ekdWo5TUncWL8Og0HAWhCfnpzn8ZBpx7y5p4xFwUoC4S
d0cHsmPO6p2SkzWMhXZOvT88FfRye97G3d6VW+Z0DCti9ul4G0qGAJYK2vR/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/nmDBmO9UHc2kvszz6BdKgwdSukwHwYDVR0j
BBgwFoAUOM0fccKo4z2IfAmeuwRqfrEMbCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN0dENUMW9YWDRrWUNvdGFzenh1a3VydUwxTjNZTk1DNFhzcjhvRHY2
dFYvMS8zOENEMUY3MUMyQThFMzNEODg3QzA5OUVCQjA0NkE3RUIxMEM2QzIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0QxRjcxQzJBOEUzM0Q4
ODdDMDk5RUJCMDQ2QTdFQjEwQzZDMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzdHRDVDFvWFg0a1lDb3Rhc3p4dWt1cnVMMU4zWU5NQzRYc3I4b0R2NnRWLzEv
MzQzNTJlMzIzMzM3MmUzMjM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMjM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7fgwDQYJKoZIhvcNAQELBQADggEBACDs2BBL
LW8KSNIHMsRThHeI1eipSSM4GFNF1kKs5Lmj9niieyL4wljajaxVgrNz2TnM+gUi
VPlZ8qDUMbkRNmoJKGMK0nvzmZwf++VLmeE5YDWQ2C2uJt0fCWcTpwSLcVxX5lCq
4nUq5TqCR1PLTicTCeW+yO8kVOiEhzZvssk6+JWJFVhTsPGPjrkS08iD0bOtkY+b
uNKqRQDIAOVAoYfIptoz7TGp6EabbBq1GJJowSxz4s75QQuAXOr5VkDQ/m8N9gsO
Awa162YJp/t70ZvinMoTIrE+L387v+pdMNAOOtRQm/huFh2le8c4do2wk+AJlYdE
nWqZn/CFQSMZPKs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:33:35 2025 by rpki-client