Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232342e302f32302d3234203d3e20323634323132.roa
File: 3138372e302e3232342e302f32302d3234203d3e20323634323132.roa (raw, json)
Hash identifier: qKH7wQjbOtghCj0pGNh/rSPEzqnfTpo9Xs5mxHIdKgw=
Subject key identifier: EF:1C:C4:6F:DE:B6:59:5D:F8:3A:B5:B0:33:78:88:94:65:FD:4C:F8
Certificate issuer: /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial: 02993BCB332F383482D2786AACAC60043786D647
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232342e302f32302d3234203d3e20323634323132.roa
Signing time: Tue 27 Aug 2024 14:19:23 +0000
ROA not before: Tue 27 Aug 2024 14:14:23 +0000
ROA not after: Tue 26 Aug 2025 14:19:23 +0000
asID: 264212
IP address blocks: 187.0.224.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:99:3b:cb:33:2f:38:34:82:d2:78:6a:ac:ac:60:04:37:86:d6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Validity
Not Before: Aug 27 14:14:23 2024 GMT
Not After : Aug 26 14:19:23 2025 GMT
Subject: CN=EF1CC46FDEB6595DF83AB5B03378889465FD4CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:5d:f3:84:7d:71:7a:a1:a4:55:c2:60:bd:
b6:36:90:22:ee:06:80:f4:4f:8b:af:08:4b:d0:84:
f6:e7:0b:eb:54:87:37:c4:ae:50:53:36:98:7f:ed:
8f:55:5d:33:7e:97:5a:74:d0:b9:02:5d:18:8a:42:
dd:04:c6:b3:d1:bd:af:94:ce:e1:00:18:87:ce:aa:
6a:25:e3:79:32:20:a7:79:36:c5:6b:7b:76:20:1a:
ae:50:37:d9:1b:12:c0:51:e5:1d:30:29:d8:89:5d:
d2:e7:35:4b:2a:8c:05:b9:9c:49:37:69:1b:ba:23:
d4:a4:cd:46:2a:06:28:72:68:d0:58:ee:4f:d2:fd:
2c:43:e6:3c:92:ca:08:aa:3a:c8:cd:88:e5:bb:49:
5c:0e:80:0f:79:88:d3:06:c1:aa:8a:aa:ce:24:94:
92:1e:d6:93:6d:70:52:46:50:80:fd:2e:e1:5b:94:
81:6a:e0:97:ed:33:02:7f:1e:4d:d5:e7:c3:e9:10:
71:f5:8b:b5:90:51:c4:54:5e:45:e2:53:2a:35:ac:
9e:e3:05:c1:07:7d:1c:bf:3e:0e:e9:3b:1b:9d:87:
a6:f0:c0:cf:90:44:24:09:62:06:ba:0b:96:ce:06:
33:d5:2b:42:3a:f8:bb:06:53:47:1c:4e:5d:30:fd:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1C:C4:6F:DE:B6:59:5D:F8:3A:B5:B0:33:78:88:94:65:FD:4C:F8
X509v3 Authority Key Identifier:
keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3138372e302e3232342e302f32302d3234203d3e20323634323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:05:30:07:81:80:ea:6b:ba:f5:42:a6:6a:01:23:f4:6a:88:
f8:44:dc:31:88:53:7d:01:ec:d4:66:6c:ab:3e:bd:2c:b8:2b:
87:c0:65:23:f6:be:24:f3:94:ab:ba:48:48:2f:b9:09:d3:f4:
c3:58:2c:0f:60:d7:06:7e:49:74:af:8a:2c:87:e8:97:9d:a6:
18:05:f3:b8:8c:d6:96:87:04:5c:1a:07:c4:ac:a9:a6:15:f3:
9d:19:eb:df:a1:bd:ef:2b:3a:a6:b5:d2:23:34:8d:c4:e2:0e:
63:72:8b:d1:a7:dd:7e:fc:fc:b0:5d:fe:b7:45:ef:9c:0c:a5:
b9:18:79:0a:55:ee:dd:b0:cb:83:2d:0e:81:68:58:e1:63:b0:
66:08:00:87:bd:4d:3e:b5:7d:ff:c8:58:ac:58:0f:e0:ad:fc:
45:33:32:c4:db:fc:a8:2b:d3:8e:bf:d5:61:38:78:11:16:1c:
44:d3:a7:d2:07:99:6b:eb:d2:b9:38:18:02:82:8c:60:89:71:
99:47:ca:b9:40:ad:b9:f0:55:0c:a1:30:a8:5b:6e:87:a4:04:
bb:b8:89:2e:56:13:a5:81:bc:e0:0e:93:bb:75:cb:7e:aa:69:
61:02:95:73:0e:2d:e2:31:20:c5:1c:14:e9:27:98:6d:c1:93:
03:91:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 21:33:34 2024 by rpki-client on console-ams.rpki-client.org