Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa
File: 3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa (raw, json)
Hash identifier: CrnyO67+CL21trK4zRBLwHtSZOOO4F28T93kDrW/Dyw=
Subject key identifier: 50:B8:A5:A7:4D:E5:BF:2E:2F:C3:5F:71:3C:B6:A7:59:90:FE:65:22
Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Certificate serial: 3D2D48AAD4072E3DAB0E8E6C6B45EFF23E3E1756
Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa
Signing time: Thu 04 Apr 2024 15:05:54 +0000
ROA not before: Thu 04 Apr 2024 15:00:54 +0000
ROA not after: Thu 03 Apr 2025 15:05:54 +0000
asID: 264867
IP address blocks: 168.205.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2d:48:aa:d4:07:2e:3d:ab:0e:8e:6c:6b:45:ef:f2:3e:3e:17:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05
Validity
Not Before: Apr 4 15:00:54 2024 GMT
Not After : Apr 3 15:05:54 2025 GMT
Subject: CN=50B8A5A74DE5BF2E2FC35F713CB6A75990FE6522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:1f:3e:23:91:ea:f6:ee:0d:f7:cc:b1:51:
b4:7e:e7:c5:d9:cf:94:1d:ef:2d:c0:bb:5e:d9:7d:
ef:8d:56:d4:e5:ab:09:ef:dc:e0:89:cd:2a:69:71:
14:f5:d1:c3:2e:a5:e5:3f:a1:a4:c8:eb:fc:1e:73:
ad:a2:ac:cc:54:a9:37:d3:af:46:02:77:01:69:cd:
ea:90:bb:db:67:d9:0a:49:59:26:05:18:3b:8a:8f:
1c:4b:db:67:35:1c:b1:a2:ef:50:2d:8b:12:52:56:
15:64:bc:23:c9:5e:9e:e2:11:2b:34:97:36:61:6e:
c3:c7:c5:04:0f:c5:08:d5:c4:dd:2a:5d:a9:a4:07:
f4:ba:15:59:15:91:e9:ee:e5:83:ba:89:c1:59:88:
4c:df:5e:bc:2e:11:4f:19:14:0f:0a:57:bd:bc:93:
d5:71:51:9b:02:08:f6:a8:cf:5b:1f:db:02:df:d4:
fe:91:d3:69:59:59:62:f2:e2:6e:40:2e:55:2d:8f:
7f:5d:e4:8b:a3:fe:7d:e6:66:e3:b7:c4:77:ae:87:
ef:c9:e4:54:e3:5a:74:07:fe:a6:d4:1e:5e:57:15:
b1:db:a3:8a:b9:8f:5b:d2:5d:a8:44:b3:8c:58:97:
91:c4:eb:45:16:2d:aa:f8:b1:da:d0:6e:f6:a6:98:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B8:A5:A7:4D:E5:BF:2E:2F:C3:5F:71:3C:B6:A7:59:90:FE:65:22
X509v3 Authority Key Identifier:
keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/3136382e3230352e3232342e302f32322d3232203d3e20323634383637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.224.0/22
Signature Algorithm: sha256WithRSAEncryption
be:46:73:15:ab:ab:55:1d:db:11:6c:15:c6:8d:76:47:70:c0:
d5:b9:29:21:ae:28:74:a3:fb:31:7e:ec:f6:91:14:dc:7d:9d:
8a:2a:f3:74:42:c2:d8:d8:ea:04:2c:8a:5e:53:ce:84:de:82:
30:ee:a3:a1:98:cd:b0:5c:62:8f:dd:e4:d0:91:46:6e:ac:05:
c1:a7:79:80:26:f7:b0:e2:ab:ef:ac:5d:f4:f9:1d:7a:b6:f3:
3e:44:88:c9:88:58:5f:76:d8:43:09:63:cd:d1:2a:34:cd:94:
02:de:92:7b:85:38:a0:65:34:83:1f:e0:44:65:a5:63:49:22:
31:a3:61:d5:44:ff:eb:b5:63:3d:1e:f3:c8:83:82:dd:77:9c:
31:bc:a5:e1:b2:ab:8c:41:50:d3:e4:30:52:fb:3e:1d:37:2d:
33:54:13:c2:45:6e:12:6a:7e:01:90:0d:d4:da:be:58:a0:db:
45:12:9e:05:fb:4d:ae:a5:b4:bc:13:20:5f:c6:e7:ec:09:7d:
1c:a9:9b:34:0a:8b:1b:20:97:9d:91:86:d8:53:8f:e1:29:57:
77:b4:37:4c:90:6f:09:b9:02:56:0b:ec:9b:e2:61:a6:81:5d:
52:f8:6b:61:25:a8:f5:f7:8b:ab:28:85:96:14:ed:cf:8e:3a:
e9:d4:56:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:56:51 2025 by rpki-client