Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/3134332e302e32382e302f32322d3232203d3e20323633393931.roa
File: 3134332e302e32382e302f32322d3232203d3e20323633393931.roa (raw, json)
Hash identifier: RcTnpuji6QTVvODOUQhpOdjlhMSPyGAPXfuS7BjTE+4=
Subject key identifier: 56:A5:2A:A1:67:18:90:B5:A9:94:A3:C4:13:9F:EB:23:97:86:11:46
Certificate issuer: /CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Certificate serial: 52DFE34608E3132ABAE9D78F2AEB7529C4EC9EDE
Authority key identifier: 97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/3134332e302e32382e302f32322d3232203d3e20323633393931.roa
Signing time: Thu 25 Apr 2024 19:52:19 +0000
ROA not before: Thu 25 Apr 2024 19:47:19 +0000
ROA not after: Thu 24 Apr 2025 19:52:19 +0000
asID: 263991
IP address blocks: 143.0.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:df:e3:46:08:e3:13:2a:ba:e9:d7:8f:2a:eb:75:29:c4:ec:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971334C1223E510A2C0DAA6AC00F2D40330D6C48
Validity
Not Before: Apr 25 19:47:19 2024 GMT
Not After : Apr 24 19:52:19 2025 GMT
Subject: CN=56A52AA1671890B5A994A3C4139FEB2397861146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:b4:ed:94:14:96:e8:47:e3:92:e2:aa:48:
fd:6e:2c:88:12:31:7a:7b:a3:73:4f:ab:08:8d:d4:
d5:63:d7:40:9c:d0:6f:f2:19:8e:42:35:73:eb:d3:
a3:c4:1a:21:c4:76:7d:b3:fd:27:49:58:54:7b:bc:
92:18:d2:e1:f0:8e:16:a6:21:ca:4b:9b:bf:e4:43:
17:16:72:e0:97:e2:a5:54:a5:83:4e:14:c3:8b:a4:
5a:70:7a:c3:fe:59:fd:7a:29:78:09:8c:94:24:e3:
1a:ba:fe:46:6f:09:c1:97:48:5f:90:bc:8c:e6:7c:
57:c2:3b:d6:d9:77:5d:e5:65:e9:43:b3:89:26:69:
16:84:9e:a9:49:26:2c:01:37:20:b9:a4:aa:cd:01:
54:4b:82:3b:9f:ec:f2:45:b0:e0:41:81:af:60:d8:
9b:f1:72:2e:73:80:9c:f7:28:43:7d:40:5f:77:48:
c0:2b:c3:32:10:31:5d:13:6b:7d:06:ae:62:1c:7a:
79:b6:d5:9f:0a:2f:5c:9d:48:50:2e:21:8e:9f:f0:
ab:71:cf:a2:ae:1a:a9:be:22:ba:fc:a4:c6:b8:2d:
ee:e5:fd:f5:45:97:74:0e:07:c5:e5:a2:55:9c:3b:
9a:a7:a0:be:47:cf:f0:67:d6:80:f9:66:9f:43:59:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A5:2A:A1:67:18:90:B5:A9:94:A3:C4:13:9F:EB:23:97:86:11:46
X509v3 Authority Key Identifier:
keyid:97:13:34:C1:22:3E:51:0A:2C:0D:AA:6A:C0:0F:2D:40:33:0D:6C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/971334C1223E510A2C0DAA6AC00F2D40330D6C48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/971334C1223E510A2C0DAA6AC00F2D40330D6C48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhpbtAJ7rnPWLCrz2MMKGHU7XGZoUqWJ9pu1JGCfDvBf/0/3134332e302e32382e302f32322d3232203d3e20323633393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.28.0/22
Signature Algorithm: sha256WithRSAEncryption
25:ec:4c:43:a6:36:2c:e3:91:83:43:59:50:31:6f:c5:e8:4d:
e5:8b:0f:7b:2c:5b:61:dc:a5:83:3b:2f:22:a3:bb:60:33:71:
94:ca:9b:d0:f8:5f:be:3f:04:ff:21:07:d8:ec:6e:7f:f2:a7:
10:33:fd:2a:0b:21:b5:a9:38:c5:e5:24:3f:a4:fd:8e:41:23:
80:06:7d:c2:d5:c1:8e:68:0a:bd:ed:43:80:a9:95:06:98:55:
8d:3c:8a:f1:17:c0:16:26:7b:5d:a9:69:1b:09:04:75:78:56:
8d:90:b7:25:23:33:bd:e7:36:ca:02:bb:9a:fd:54:b4:55:4f:
86:b5:ad:77:57:13:26:bb:b9:3c:64:7d:40:4b:81:2d:63:59:
33:b7:62:b6:a7:e3:3e:60:f5:17:77:32:be:76:fd:f3:ae:27:
d6:99:d1:0f:bc:b2:07:9c:ac:e6:10:9b:62:3b:60:56:b0:d8:
43:56:5b:fe:4d:48:e4:9d:98:37:e3:3c:b6:9a:f8:5a:d3:71:
bc:20:8d:ec:26:ed:2d:00:7a:cd:b5:86:94:34:40:c0:35:15:
c1:a9:4a:e8:db:b7:7e:71:38:c3:18:0a:48:20:15:d5:b5:eb:
b2:26:9a:2d:5c:0c:9d:10:5c:2d:a9:f5:47:f0:be:e8:75:9b:
1f:31:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:26:21 2025 by rpki-client