Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa
File: 3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa (raw, json)
Hash identifier: KwHfyHJGA2jfy/fGYWVNQXbOsqG9lWTfGeE+1YFPGMg=
Subject key identifier: 5B:F0:2A:A4:4A:53:2D:64:AE:32:22:D8:9F:12:A3:57:76:73:71:1D
Certificate issuer: /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial: 626956366B7DE73D676EB9739BD4F426D4130FAC
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa
Signing time: Wed 03 Apr 2024 18:31:13 +0000
ROA not before: Wed 03 Apr 2024 18:26:13 +0000
ROA not after: Wed 02 Apr 2025 18:31:13 +0000
asID: 264332
IP address blocks: 138.185.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:69:56:36:6b:7d:e7:3d:67:6e:b9:73:9b:d4:f4:26:d4:13:0f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Validity
Not Before: Apr 3 18:26:13 2024 GMT
Not After : Apr 2 18:31:13 2025 GMT
Subject: CN=5BF02AA44A532D64AE3222D89F12A3577673711D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:9a:70:c5:b8:d8:f8:07:a2:96:96:76:5d:
49:91:f9:9d:ac:f3:d5:c1:e1:a5:63:f5:31:ca:77:
ad:79:74:7c:61:06:7a:d4:ff:57:40:1a:0e:dd:63:
7e:ab:bf:0f:47:e3:56:b2:b5:0b:58:b8:a8:41:18:
5d:e8:86:96:32:68:f7:35:6a:f2:fb:f0:a7:9e:4a:
8b:55:9d:45:72:0e:c6:79:ec:33:b2:cf:a8:4a:ce:
86:16:9c:4d:35:ad:d2:c5:91:6f:fb:16:0b:e8:eb:
e5:7f:de:c6:19:f5:24:b0:ea:d2:98:e3:34:4a:0d:
ae:2e:2f:5a:ab:10:5f:c1:60:9a:9b:70:d1:9c:86:
a5:a7:e2:89:77:01:0e:7f:6b:77:35:5e:bf:79:15:
a0:cd:96:9b:35:b5:54:dd:d5:26:91:5d:fe:7d:86:
5e:d6:31:5a:97:b5:f8:c9:2f:6d:84:3f:8d:9d:91:
61:b2:6f:1b:27:cb:f5:97:3a:7a:da:73:da:a4:9c:
1a:12:19:05:2e:4c:91:81:29:d2:69:4a:e6:64:46:
f8:97:13:7d:d2:bb:1a:3d:97:91:b8:10:30:f4:b2:
ee:43:df:87:7e:43:2d:c0:c6:75:08:a9:ad:68:0a:
c7:83:0e:f5:13:45:85:81:79:0e:99:17:d0:7d:b9:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:2A:A4:4A:53:2D:64:AE:32:22:D8:9F:12:A3:57:76:73:71:1D
X509v3 Authority Key Identifier:
keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cc:34:b9:f8:4e:49:a9:73:78:04:86:1a:75:eb:d0:da:5c:
5d:ec:21:9a:f4:9d:61:a9:c9:81:0d:de:9b:b9:e0:ca:2c:ea:
3d:97:61:b9:56:19:e4:92:78:18:5b:c2:db:68:94:ea:42:ee:
c3:fb:6c:42:78:88:2d:05:e1:9f:0f:09:f5:a9:61:33:4b:46:
f5:52:f8:3f:49:db:3d:9b:47:e6:b3:d5:c5:1d:4a:1a:1e:18:
c4:ef:2b:2d:25:6f:52:43:74:19:59:db:86:42:10:0f:e9:53:
c5:1e:03:d9:88:de:b3:7c:5b:2a:e3:0e:bf:c7:79:d9:a6:24:
c5:52:61:23:6d:7c:12:06:b4:7e:08:9b:5e:e4:52:da:93:e6:
31:06:06:7e:a0:88:1c:3e:1a:dc:c3:b9:80:33:c9:d7:50:27:
1f:38:a6:f6:ef:a4:e8:f1:88:f6:4f:e6:b9:f8:b9:65:50:92:
25:bc:76:6a:0b:87:28:26:0f:ad:12:94:ba:d4:ce:2c:86:35:
c7:8b:cb:03:61:c7:f5:67:25:7d:b4:e6:2d:0b:15:af:9e:f9:
13:6c:9c:53:48:74:51:e7:50:35:6e:34:dd:20:da:d6:73:89:
2c:4e:0d:93:ff:0e:87:c0:26:4a:bc:08:d3:3c:d0:f5:11:03:
8a:c0:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:13:38 2025 by rpki-client