Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/3138312e3233332e33342e302f32342d3234203d3e20323632333134.roa
File: 3138312e3233332e33342e302f32342d3234203d3e20323632333134.roa (raw, json)
Hash identifier: tSB0oCCEjoznKDaHSADO/sFg6D0bKJbhLTgnIeGvMDw=
Subject key identifier: 3D:F2:2E:5E:BE:04:60:BD:C8:C6:FC:98:D9:C9:BE:1E:78:48:97:29
Certificate issuer: /CN=910800F18E96181F4CD878BAE067D0CFA1814220
Certificate serial: 77ED352614F2D0A033474ED26E19A819A47D81B1
Authority key identifier: 91:08:00:F1:8E:96:18:1F:4C:D8:78:BA:E0:67:D0:CF:A1:81:42:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910800F18E96181F4CD878BAE067D0CFA1814220.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/3138312e3233332e33342e302f32342d3234203d3e20323632333134.roa
Signing time: Mon 30 Sep 2024 19:05:21 +0000
ROA not before: Mon 30 Sep 2024 19:00:21 +0000
ROA not after: Mon 29 Sep 2025 19:05:21 +0000
asID: 262314
IP address blocks: 181.233.34.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ed:35:26:14:f2:d0:a0:33:47:4e:d2:6e:19:a8:19:a4:7d:81:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910800F18E96181F4CD878BAE067D0CFA1814220
Validity
Not Before: Sep 30 19:00:21 2024 GMT
Not After : Sep 29 19:05:21 2025 GMT
Subject: CN=3DF22E5EBE0460BDC8C6FC98D9C9BE1E78489729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:e1:6d:31:6e:42:a6:69:84:5e:40:a4:ff:
66:06:16:95:10:ee:7c:5a:9b:57:97:29:ec:d3:40:
c8:34:29:28:a9:80:51:04:b7:0d:b2:12:60:10:5f:
de:ef:6d:15:d5:70:e0:68:40:de:c8:f6:15:1e:c9:
f2:ec:34:32:68:e0:25:cc:4e:1a:79:ed:24:e1:f6:
58:16:7a:b8:bb:1d:30:21:33:08:a0:dd:62:fe:7b:
8e:f9:1e:ab:4a:2f:2f:86:60:09:03:7a:b3:13:5f:
6e:23:cd:f3:60:06:dc:62:2a:d2:3a:84:f4:41:37:
fc:9c:92:c6:1e:58:61:cd:ea:bd:ca:53:70:7d:6d:
96:fe:54:10:57:5d:00:e6:26:e0:43:bc:e5:fd:8a:
f0:6f:f6:49:b2:59:55:91:a5:2a:60:71:62:ff:e9:
a6:66:37:02:d4:4b:be:a8:9a:8a:6f:15:dc:75:c1:
bb:71:15:80:d2:4e:1e:e6:89:19:74:d4:82:2f:f6:
7f:86:b0:dc:55:33:25:04:1d:8d:f6:a8:61:1d:c6:
a7:67:11:a5:71:d8:e8:35:b7:f5:b2:ee:f5:6e:98:
df:9e:c4:06:7e:21:17:53:e8:21:b1:ab:73:c0:3e:
63:f1:f0:2c:ce:9a:f2:0b:66:36:95:a7:fd:4e:90:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:2E:5E:BE:04:60:BD:C8:C6:FC:98:D9:C9:BE:1E:78:48:97:29
X509v3 Authority Key Identifier:
keyid:91:08:00:F1:8E:96:18:1F:4C:D8:78:BA:E0:67:D0:CF:A1:81:42:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/910800F18E96181F4CD878BAE067D0CFA1814220.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910800F18E96181F4CD878BAE067D0CFA1814220.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UmbrZVmJw5kWpvZHv3yCLvGeiLf9681j3DuR9tmv8Ex/0/3138312e3233332e33342e302f32342d3234203d3e20323632333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.34.0/24
Signature Algorithm: sha256WithRSAEncryption
08:3e:20:a7:c4:39:9b:1f:08:a8:b0:34:53:68:1d:13:0e:1f:
59:d1:42:f2:b1:23:a7:af:e0:8a:98:25:e2:33:36:66:9a:ef:
f0:a5:6b:46:d2:a6:7a:fb:59:9f:65:ea:ac:9d:69:e1:ae:cf:
95:9e:82:0e:49:e2:2c:ec:eb:0c:9c:f2:b0:f2:73:fd:cb:ce:
5f:9d:9f:13:8b:32:64:ab:84:1d:78:29:5e:c1:b8:8a:08:7e:
ed:89:f8:40:01:90:81:c9:ab:2f:1f:ce:7f:52:fd:6c:96:81:
7c:b9:5f:cc:04:0e:5b:e2:dc:6e:70:a2:43:bb:db:56:a2:9a:
a2:cc:18:38:e8:1e:b2:5a:c4:19:7d:f4:30:7a:07:7e:f4:f7:
b1:7b:a1:d0:f8:78:a1:8a:f1:5e:a9:b0:c2:e4:49:fd:a3:a4:
4c:e3:1a:3b:02:e8:e7:bd:9a:67:2c:0b:05:9f:b8:5d:45:a6:
37:23:31:b8:af:5f:1c:49:6a:5b:be:c9:22:ff:e0:81:4f:fb:
3a:00:45:be:09:d6:b4:27:1f:fb:4b:e5:ea:73:2e:f8:b8:61:
69:6d:45:59:a4:c8:3b:f1:5c:f2:75:a8:57:cc:4c:8e:5c:23:
24:00:e4:b6:ba:8c:c9:da:3b:67:f1:08:3c:b1:60:26:30:4d:
fe:ea:b1:d2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd+01JhTy0KAzR07SbhmoGaR9gbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTEwODAwRjE4RTk2MTgxRjRDRDg3OEJBRTA2N0QwQ0ZB
MTgxNDIyMDAeFw0yNDA5MzAxOTAwMjFaFw0yNTA5MjkxOTA1MjFaMDMxMTAvBgNV
BAMTKDNERjIyRTVFQkUwNDYwQkRDOEM2RkM5OEQ5QzlCRTFFNzg0ODk3MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+v+FtMW5CpmmEXkCk/2YGFpUQ
7nxam1eXKezTQMg0KSipgFEEtw2yEmAQX97vbRXVcOBoQN7I9hUeyfLsNDJo4CXM
Thp57STh9lgWeri7HTAhMwig3WL+e475HqtKLy+GYAkDerMTX24jzfNgBtxiKtI6
hPRBN/ycksYeWGHN6r3KU3B9bZb+VBBXXQDmJuBDvOX9ivBv9kmyWVWRpSpgcWL/
6aZmNwLUS76omopvFdx1wbtxFYDSTh7miRl01IIv9n+GsNxVMyUEHY32qGEdxqdn
EaVx2Og1t/Wy7vVumN+exAZ+IRdT6CGxq3PAPmPx8CzOmvILZjaVp/1OkElRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPfIuXr4EYL3IxvyY2cm+HnhIlykwHwYDVR0j
BBgwFoAUkQgA8Y6WGB9M2Hi64GfQz6GBQiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlVtYnJaVm1KdzVrV3B2Wkh2M3lDTHZHZWlMZjk2ODFqM0R1Ujl0bXY4
RXgvMC85MTA4MDBGMThFOTYxODFGNENEODc4QkFFMDY3RDBDRkExODE0MjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMDgwMEYxOEU5NjE4MUY0
Q0Q4NzhCQUUwNjdEMENGQTE4MTQyMjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJVbWJyWlZtSnc1a1dwdlpIdjN5Q0x2R2VpTGY5NjgxajNEdVI5dG12OEV4LzAv
MzEzODMxMmUzMjMzMzMyZTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16SIwDQYJKoZIhvcNAQELBQADggEBAAg+IKfE
OZsfCKiwNFNoHRMOH1nRQvKxI6ev4IqYJeIzNmaa7/Cla0bSpnr7WZ9l6qydaeGu
z5Wegg5J4izs6wyc8rDyc/3Lzl+dnxOLMmSrhB14KV7BuIoIfu2J+EABkIHJqy8f
zn9S/WyWgXy5X8wEDlvi3G5wokO721aimqLMGDjoHrJaxBl99DB6B37097F7odD4
eKGK8V6psMLkSf2jpEzjGjsC6Oe9mmcsCwWfuF1FpjcjMbivXxxJalu+ySL/4IFP
+zoARb4J1rQnH/tL5epzLvi4YWltRVmkyDvxXPJ1qFfMTI5cIyQA5La6jMnaO2fx
CDyxYCYwTf7qsdI=
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:59:32 2025 by rpki-client