Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa
File: 34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa (raw, json)
Hash identifier: 4L/5MtN5jeiGBii2778zcvKJU5mjlA9WUvgPp7+fk9w=
Subject key identifier: 89:4C:60:08:71:73:76:89:84:96:5C:96:29:85:5D:DE:87:1B:06:6A
Certificate issuer: /CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
Certificate serial: 4E8276C4421BF9CAC5368401B4C69E6571B072A3
Authority key identifier: D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa
Signing time: Thu 04 Apr 2024 07:19:54 +0000
ROA not before: Thu 04 Apr 2024 07:14:54 +0000
ROA not after: Thu 03 Apr 2025 07:19:54 +0000
asID: 269699
IP address blocks: 45.191.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:82:76:c4:42:1b:f9:ca:c5:36:84:01:b4:c6:9e:65:71:b0:72:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7277992174B249B4D551A37C49F2DD4D7AA9968
Validity
Not Before: Apr 4 07:14:54 2024 GMT
Not After : Apr 3 07:19:54 2025 GMT
Subject: CN=894C60087173768984965C9629855DDE871B066A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:4d:01:95:e7:c3:8d:3b:e8:0b:e9:9d:35:
c9:ed:ab:ef:23:0d:d4:2e:5f:24:1b:55:28:21:4c:
10:a6:e5:2b:ce:14:d1:39:d7:96:90:d7:7b:b8:70:
76:e7:b4:a5:ef:3c:ee:55:25:54:a2:14:67:61:7c:
9d:4b:02:14:5b:cf:92:2b:d8:46:aa:61:e3:04:0c:
bd:a7:8f:a4:96:c1:f1:45:d3:d0:a9:be:a7:76:e7:
d0:cd:4b:c7:e6:0e:d8:6f:26:c2:15:5b:d0:6d:d7:
7c:fd:56:33:1a:40:f3:ac:3d:5c:c4:86:ec:69:8b:
d6:47:e7:a5:e2:ca:65:0a:1f:39:f0:63:3f:30:f1:
8c:73:c9:76:32:1e:75:05:df:d3:a8:a3:a8:7d:3a:
78:49:42:c5:a8:b2:77:8a:ee:81:57:cd:ce:84:d1:
54:38:76:1d:4b:55:8b:4e:cd:8a:39:e1:72:4d:eb:
8e:45:be:58:a3:be:89:cd:a1:50:e9:f6:7c:8e:6f:
2b:47:5c:eb:74:e7:66:f7:fb:d9:05:16:3d:67:17:
34:4e:8b:1d:d9:38:2d:73:e3:4e:c9:ca:4e:3d:fd:
20:b2:d7:8c:62:91:bd:b6:f8:5d:2c:68:9b:ca:20:
cf:c9:61:bb:ca:38:3d:32:32:c9:70:77:2e:f3:2f:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4C:60:08:71:73:76:89:84:96:5C:96:29:85:5D:DE:87:1B:06:6A
X509v3 Authority Key Identifier:
keyid:D7:27:79:92:17:4B:24:9B:4D:55:1A:37:C4:9F:2D:D4:D7:AA:99:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7277992174B249B4D551A37C49F2DD4D7AA9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/1/34352e3139312e3235352e302f32342d3234203d3e20323639363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.255.0/24
Signature Algorithm: sha256WithRSAEncryption
56:37:35:9c:bf:ec:6e:16:93:6a:7e:84:c1:c3:5d:dd:92:8d:
82:dc:a1:b3:ef:a1:09:e1:79:38:d6:fa:64:dc:01:e0:36:5f:
fa:ac:ea:cf:37:2d:e1:71:7f:23:b2:0c:26:b4:bf:27:f8:fe:
95:54:ee:73:b5:97:62:e4:39:82:e0:f4:e1:8d:8d:76:04:6a:
7d:0b:71:26:fc:be:dc:ee:f7:65:08:90:a6:7b:6a:87:ad:56:
c9:5a:22:a3:98:ef:6b:77:76:4c:55:59:81:ff:db:e2:6c:3f:
b8:21:3e:3f:1a:f3:a8:98:ee:90:47:b7:6a:f9:a0:64:c1:59:
b3:e4:87:4a:d8:2f:ef:71:56:da:b0:8a:c8:6f:72:11:5d:c5:
56:c4:4f:93:dc:61:cb:dc:f0:0c:db:cb:a6:9a:92:25:2c:56:
b0:01:f0:17:f1:1f:f8:d2:ad:08:90:20:38:b5:ec:d6:73:19:
c9:41:27:24:4f:ad:4f:10:52:fd:39:a1:40:ba:84:de:26:06:
cd:77:57:b6:b8:7a:d8:ed:0a:e7:04:8a:85:42:d7:a3:be:94:
50:19:12:3f:3a:34:5a:3a:bb:f0:19:64:af:d3:b9:26:41:3f:
ab:f2:80:92:c9:93:25:4f:f8:fa:f6:1d:09:1c:5f:69:41:a5:
73:69:10:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUToJ2xEIb+crFNoQBtMaeZXGwcqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcyNzc5OTIxNzRCMjQ5QjRENTUxQTM3QzQ5RjJERDRE
N0FBOTk2ODAeFw0yNDA0MDQwNzE0NTRaFw0yNTA0MDMwNzE5NTRaMDMxMTAvBgNV
BAMTKDg5NEM2MDA4NzE3Mzc2ODk4NDk2NUM5NjI5ODU1RERFODcxQjA2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1500BlefDjTvoC+mdNcntq+8j
DdQuXyQbVSghTBCm5SvOFNE515aQ13u4cHbntKXvPO5VJVSiFGdhfJ1LAhRbz5Ir
2EaqYeMEDL2nj6SWwfFF09Cpvqd259DNS8fmDthvJsIVW9Bt13z9VjMaQPOsPVzE
huxpi9ZH56XiymUKHznwYz8w8YxzyXYyHnUF39Ooo6h9OnhJQsWosneK7oFXzc6E
0VQ4dh1LVYtOzYo54XJN645FvlijvonNoVDp9nyObytHXOt052b3+9kFFj1nFzRO
ix3ZOC1z407Jyk49/SCy14xikb22+F0saJvKIM/JYbvKOD0yMslwdy7zL+DVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiUxgCHFzdomEllyWKYVd3ocbBmowHwYDVR0j
BBgwFoAU1yd5khdLJJtNVRo3xJ8t1NeqmWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS
YnYvMS9ENzI3Nzk5MjE3NEIyNDlCNEQ1NTFBMzdDNDlGMkRENEQ3QUE5OTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3Mjc3OTkyMTc0QjI0OUI0
RDU1MUEzN0M0OUYyREQ0RDdBQTk5NjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnMzNtTG9qRkp0bzFlTmVGMTl0Qk1tQ3BRU0w5WWFkQ21FOEE1UnFrUmJ2LzEv
MzQzNTJlMzEzOTMxMmUzMjM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtv/8wDQYJKoZIhvcNAQELBQADggEBAFY3NZy/
7G4Wk2p+hMHDXd2SjYLcobPvoQnheTjW+mTcAeA2X/qs6s83LeFxfyOyDCa0vyf4
/pVU7nO1l2LkOYLg9OGNjXYEan0LcSb8vtzu92UIkKZ7aoetVslaIqOY72t3dkxV
WYH/2+JsP7ghPj8a86iY7pBHt2r5oGTBWbPkh0rYL+9xVtqwishvchFdxVbET5Pc
Ycvc8Azby6aakiUsVrAB8BfxH/jSrQiQIDi17NZzGclBJyRPrU8QUv05oUC6hN4m
Bs13V7a4etjtCucEioVC16O+lFAZEj86NFo6u/AZZK/TuSZBP6vygJLJkyVP+Pr2
HQkcX2lBpXNpEIA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:31:26 2025 by rpki-client