Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa
File: 3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa (raw, json)
Hash identifier: Tn4WZxP7vRIVY0/1PLnSoPJWIErqaHS10q0zQg8LLko=
Subject key identifier: 2C:B1:63:92:98:1E:E4:3F:0E:8B:1A:B5:E3:7A:C6:8C:EE:3B:C7:87
Certificate issuer: /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial: 0FF1A23F5A4CB9E2E9C0D1730E44A5D9BC075955
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa
Signing time: Wed 03 Apr 2024 18:31:13 +0000
ROA not before: Wed 03 Apr 2024 18:26:13 +0000
ROA not after: Wed 02 Apr 2025 18:31:13 +0000
asID: 264332
IP address blocks: 138.185.22.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f1:a2:3f:5a:4c:b9:e2:e9:c0:d1:73:0e:44:a5:d9:bc:07:59:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Validity
Not Before: Apr 3 18:26:13 2024 GMT
Not After : Apr 2 18:31:13 2025 GMT
Subject: CN=2CB16392981EE43F0E8B1AB5E37AC68CEE3BC787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:37:88:ed:f0:9b:a7:93:cf:91:9c:9b:d9:
0d:aa:a6:7a:85:2b:30:45:f6:50:0e:23:ee:83:1b:
b5:ae:b1:c4:0c:40:fc:77:e3:ce:81:47:58:a7:27:
ca:b3:4a:de:57:8a:d3:9a:e3:fd:5f:1d:f1:76:3e:
b0:03:64:35:87:c0:7c:61:5f:1a:60:7f:b3:de:4f:
70:03:73:79:f1:a8:24:6a:47:34:5f:79:ba:8b:c3:
e5:22:1f:58:6c:ef:22:c3:f1:bb:a5:17:8e:76:89:
1f:1a:56:47:8a:c4:8c:95:e9:1f:7c:ba:0b:32:0d:
b2:aa:92:55:9a:b0:11:6c:24:57:8e:16:49:01:d3:
49:5c:ea:b1:c7:0c:0c:7b:47:e4:ca:81:13:e1:3e:
91:7e:87:62:08:22:66:c3:42:24:9b:be:e8:c0:77:
61:3e:65:9e:50:6d:45:e2:0c:04:03:69:37:fc:82:
07:80:81:d2:33:16:35:bd:22:63:31:d5:48:d2:55:
c7:bd:2e:03:03:da:ac:31:d6:e8:92:a5:97:f7:dd:
2a:4b:a5:a4:de:1b:d6:fe:df:b0:55:e6:88:12:45:
e9:24:20:a6:59:10:14:e8:29:75:64:04:da:83:c9:
08:c2:ae:a0:82:97:44:54:fa:43:61:fe:9f:0c:d6:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:63:92:98:1E:E4:3F:0E:8B:1A:B5:E3:7A:C6:8C:EE:3B:C7:87
X509v3 Authority Key Identifier:
keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.22.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:3c:dc:91:c5:44:55:e4:b4:cf:40:57:0c:5d:ba:11:56:e7:
01:3c:c9:5e:7a:a6:78:ad:ea:13:09:44:a5:35:a6:58:00:a3:
90:92:f4:40:e1:30:d2:a6:75:e9:d0:03:5a:31:d2:87:d3:d5:
de:ec:65:95:08:54:e1:75:83:06:78:db:6a:c7:03:6b:3a:52:
50:ec:af:3a:6e:28:92:fc:d4:4c:16:dc:5c:58:26:cb:f3:a3:
c8:a2:98:a8:eb:3d:78:7e:c9:04:0b:a2:72:3e:11:7a:f2:6e:
0d:9c:46:00:18:f9:49:af:21:04:0a:fd:08:2b:13:3b:b5:90:
74:48:8f:ae:c8:a6:05:2b:85:86:ca:b2:ce:aa:aa:ea:25:41:
82:ca:4c:bc:04:6f:83:a2:d9:99:0d:07:1c:be:ef:11:fa:1f:
e1:55:ae:f1:8c:2e:8f:5b:0c:06:02:5e:df:ee:de:46:37:af:
f5:73:db:4d:d8:92:2c:88:90:47:cd:a6:5a:e1:2f:62:60:88:
4a:6e:2d:cf:d9:6f:60:1f:73:4f:4d:e4:29:c2:e4:02:c0:60:
f0:8d:d5:54:24:a6:f0:77:eb:43:f7:63:49:84:18:17:f6:cd:
16:66:c7:57:86:82:9b:b6:c2:38:c4:c6:ec:3a:a0:76:e6:fd:
1e:ac:79:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD/GiP1pMueLpwNFzDkSl2bwHWVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E1MDlCQTQ4RTc5OTA0RjY5NjkwNzIyRDY1QUFEQjlB
RDNBNDdBQjAeFw0yNDA0MDMxODI2MTNaFw0yNTA0MDIxODMxMTNaMDMxMTAvBgNV
BAMTKDJDQjE2MzkyOTgxRUU0M0YwRThCMUFCNUUzN0FDNjhDRUUzQkM3ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWdzeI7fCbp5PPkZyb2Q2qpnqF
KzBF9lAOI+6DG7WuscQMQPx3486BR1inJ8qzSt5XitOa4/1fHfF2PrADZDWHwHxh
Xxpgf7PeT3ADc3nxqCRqRzRfebqLw+UiH1hs7yLD8bulF452iR8aVkeKxIyV6R98
ugsyDbKqklWasBFsJFeOFkkB00lc6rHHDAx7R+TKgRPhPpF+h2IIImbDQiSbvujA
d2E+ZZ5QbUXiDAQDaTf8ggeAgdIzFjW9ImMx1UjSVce9LgMD2qwx1uiSpZf33SpL
paTeG9b+37BV5ogSRekkIKZZEBToKXVkBNqDyQjCrqCCl0RU+kNh/p8M1qjXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULLFjkpge5D8Oixq143rGjO47x4cwHwYDVR0j
BBgwFoAUelCbpI55kE9paQci1lqtua06R6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzlOUGZaZWJxZ0hvUDV5TkN6VXhhM0pNU1BqS1ROZURmeFFRdmtwUEpO
Rk0vMS83QTUwOUJBNDhFNzk5MDRGNjk2OTA3MjJENjVBQURCOUFEM0E0N0FCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBNTA5QkE0OEU3OTkwNEY2
OTY5MDcyMkQ2NUFBREI5QUQzQTQ3QUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c5TlBmWmVicWdIb1A1eU5DelV4YTNKTVNQaktUTmVEZnhRUXZrcFBKTkZNLzEv
MzEzMzM4MmUzMTM4MzUyZTMyMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKuRYwDQYJKoZIhvcNAQELBQADggEBAK083JHF
RFXktM9AVwxduhFW5wE8yV56pnit6hMJRKU1plgAo5CS9EDhMNKmdenQA1ox0ofT
1d7sZZUIVOF1gwZ422rHA2s6UlDsrzpuKJL81EwW3FxYJsvzo8iimKjrPXh+yQQL
onI+EXrybg2cRgAY+UmvIQQK/QgrEzu1kHRIj67IpgUrhYbKss6qquolQYLKTLwE
b4Oi2ZkNBxy+7xH6H+FVrvGMLo9bDAYCXt/u3kY3r/Vz203YkiyIkEfNplrhL2Jg
iEpuLc/Zb2Afc09N5CnC5ALAYPCN1VQkpvB360P3Y0mEGBf2zRZmx1eGgpu2wjjE
xuw6oHbm/R6seVg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:08:34 2025 by rpki-client