Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32342d3234203d3e20323730393139.roa
File: 3133382e3138352e36382e302f32342d3234203d3e20323730393139.roa (raw, json)
Hash identifier: dn+jUntKHctULhHtZGcaUoEbhJLJd6OL3riBzC40YUE=
Subject key identifier: 0F:A7:D8:1A:1D:F5:D7:BF:35:58:B7:CE:E1:CA:90:07:0B:7D:35:C2
Certificate issuer: /CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
Certificate serial: 31671B064D40851210DEB9F7F3E08D75659A5048
Authority key identifier: 65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32342d3234203d3e20323730393139.roa
Signing time: Wed 03 Apr 2024 18:32:22 +0000
ROA not before: Wed 03 Apr 2024 18:27:22 +0000
ROA not after: Wed 02 Apr 2025 18:32:22 +0000
asID: 270919
IP address blocks: 138.185.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:67:1b:06:4d:40:85:12:10:de:b9:f7:f3:e0:8d:75:65:9a:50:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
Validity
Not Before: Apr 3 18:27:22 2024 GMT
Not After : Apr 2 18:32:22 2025 GMT
Subject: CN=0FA7D81A1DF5D7BF3558B7CEE1CA90070B7D35C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:98:8e:c1:e8:e2:9b:75:91:a5:7d:67:2f:
57:8e:d8:ab:9c:43:e1:8f:30:51:81:73:5b:0a:e6:
7d:11:72:1f:e3:d0:a6:d8:54:bf:55:db:a6:c9:3a:
74:9d:88:59:e6:c5:1f:91:92:67:41:63:8b:f8:ad:
84:b5:a2:d1:2a:5a:09:5c:10:74:4c:0b:9a:7e:fc:
2b:20:97:c8:e1:66:b7:88:9b:0a:cd:65:04:14:fc:
1c:72:57:21:b1:fa:23:a6:ff:ad:3d:fe:e3:ca:98:
5d:b8:d8:90:63:80:60:82:3f:fc:02:a2:a2:f5:57:
88:7f:59:65:83:5a:30:07:d8:0d:8e:b5:89:a3:cb:
1e:b2:f8:8e:05:96:26:8c:07:b0:e3:17:55:c7:91:
d1:8c:22:58:1b:f3:6b:a9:5f:bf:5b:47:77:dd:20:
68:ce:96:a2:ac:37:77:49:10:08:78:7c:f6:4e:cf:
72:b9:5c:6f:20:32:93:36:08:9d:66:76:2a:52:ae:
43:80:3a:42:6e:88:08:f3:08:6a:8c:ba:22:0e:28:
cc:4c:6a:89:18:93:f5:74:b0:0b:7f:2e:45:08:0f:
eb:54:f9:45:da:45:1b:94:c8:3c:bc:9c:5b:f6:7b:
a9:c3:35:ca:71:de:55:38:fb:eb:ad:38:6e:b0:b0:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:D8:1A:1D:F5:D7:BF:35:58:B7:CE:E1:CA:90:07:0B:7D:35:C2
X509v3 Authority Key Identifier:
keyid:65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32342d3234203d3e20323730393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f3:fa:4a:dc:cb:9f:55:b4:53:ab:11:c5:7d:89:06:61:c7:
8f:13:3c:3f:20:27:97:35:58:fa:43:58:f5:ba:64:76:ca:ba:
ad:0c:2a:5b:b0:da:de:fc:2f:ab:08:bc:27:3f:7f:c8:12:e9:
ec:bb:a7:08:71:74:21:0f:c1:2b:a0:90:2e:b8:f0:f8:d8:38:
36:63:82:f8:39:f0:f0:76:95:49:f7:cd:d5:0a:59:18:b8:d5:
d5:ce:11:52:c5:8b:a8:04:68:d4:1f:38:c9:0f:33:6d:0a:14:
0e:b0:d6:9c:b8:0d:98:33:da:b6:b8:9c:97:cd:ba:b4:a4:33:
ba:44:32:e2:61:69:97:4b:78:33:16:5f:40:67:68:b5:96:4a:
70:95:ab:74:cc:d2:f7:71:19:87:b9:ef:13:bd:d0:91:af:1c:
b4:03:ab:5b:b1:c9:5e:30:43:58:a3:45:72:e5:59:4c:d6:94:
ed:70:c5:fc:3c:fe:7e:ce:ee:03:6c:dd:87:7a:15:1d:a5:ee:
20:cf:2b:3c:a5:68:a8:2d:73:b3:35:b8:98:00:fd:fa:a1:35:
39:01:73:d4:e9:b1:73:e6:bd:ea:fb:0a:93:bf:f1:d0:9e:1d:
2e:a7:1e:61:8a:00:87:69:7d:32:46:99:77:90:3b:1c:70:85:
c4:a7:80:42
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMWcbBk1AhRIQ3rn38+CNdWWaUEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVDRUI5MEIxOUI0OTNFRDY1RUVBQzU1OTY0M0Y0Q0VD
RDRGRUY1QzAeFw0yNDA0MDMxODI3MjJaFw0yNTA0MDIxODMyMjJaMDMxMTAvBgNV
BAMTKDBGQTdEODFBMURGNUQ3QkYzNTU4QjdDRUUxQ0E5MDA3MEI3RDM1QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeW5iOwejim3WRpX1nL1eO2Kuc
Q+GPMFGBc1sK5n0Rch/j0KbYVL9V26bJOnSdiFnmxR+RkmdBY4v4rYS1otEqWglc
EHRMC5p+/Csgl8jhZreImwrNZQQU/BxyVyGx+iOm/609/uPKmF242JBjgGCCP/wC
oqL1V4h/WWWDWjAH2A2OtYmjyx6y+I4FliaMB7DjF1XHkdGMIlgb82upX79bR3fd
IGjOlqKsN3dJEAh4fPZOz3K5XG8gMpM2CJ1mdipSrkOAOkJuiAjzCGqMuiIOKMxM
aokYk/V0sAt/LkUID+tU+UXaRRuUyDy8nFv2e6nDNcpx3lU4++utOG6wsHGBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUD6fYGh311781WLfO4cqQBwt9NcIwHwYDVR0j
BBgwFoAUZc65Cxm0k+1l7qxVlkP0zs1P71wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWJENUR0MWZhWUM2VkRUOHdyNEQzR2lvZUxHTHJhbkhnTno2ZDNMYkV4
VnEvMS82NUNFQjkwQjE5QjQ5M0VENjVFRUFDNTU5NjQzRjRDRUNENEZFRjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1Q0VCOTBCMTlCNDkzRUQ2
NUVFQUM1NTk2NDNGNENFQ0Q0RkVGNUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ViRDVEdDFmYVlDNlZEVDh3cjREM0dpb2VMR0xyYW5IZ056NmQzTGJFeFZxLzEv
MzEzMzM4MmUzMTM4MzUyZTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzOTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKuUQwDQYJKoZIhvcNAQELBQADggEBALTz+krc
y59VtFOrEcV9iQZhx48TPD8gJ5c1WPpDWPW6ZHbKuq0MKluw2t78L6sIvCc/f8gS
6ey7pwhxdCEPwSugkC648PjYODZjgvg58PB2lUn3zdUKWRi41dXOEVLFi6gEaNQf
OMkPM20KFA6w1py4DZgz2ra4nJfNurSkM7pEMuJhaZdLeDMWX0BnaLWWSnCVq3TM
0vdxGYe57xO90JGvHLQDq1uxyV4wQ1ijRXLlWUzWlO1wxfw8/n7O7gNs3Yd6FR2l
7iDPKzylaKgtc7M1uJgA/fqhNTkBc9TpsXPmver7CpO/8dCeHS6nHmGKAIdpfTJG
mXeQOxxwhcSngEI=
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:45 2025 by rpki-client