Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/34352e3138312e32342e302f32332d3233203d3e20323639313633.roa
File: 34352e3138312e32342e302f32332d3233203d3e20323639313633.roa (raw, json)
Hash identifier: dHlRQaRJTyrFYcq3IsYl+jk3tup2rMkIoTjGji0MVs0=
Subject key identifier: 6B:DE:33:7C:49:E0:68:3F:A5:35:DE:99:47:A3:74:66:A4:A2:46:B6
Certificate issuer: /CN=939B31761D811EC12BDF8456C574E6874A3AAD78
Certificate serial: 0967D64FEE914F2CDF305A8688F3C88D73470494
Authority key identifier: 93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/34352e3138312e32342e302f32332d3233203d3e20323639313633.roa
Signing time: Mon 03 Feb 2025 06:00:24 +0000
ROA not before: Mon 03 Feb 2025 05:55:24 +0000
ROA not after: Mon 02 Feb 2026 06:00:24 +0000
asID: 269163
IP address blocks: 45.181.24.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:67:d6:4f:ee:91:4f:2c:df:30:5a:86:88:f3:c8:8d:73:47:04:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=939B31761D811EC12BDF8456C574E6874A3AAD78
Validity
Not Before: Feb 3 05:55:24 2025 GMT
Not After : Feb 2 06:00:24 2026 GMT
Subject: CN=6BDE337C49E0683FA535DE9947A37466A4A246B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:94:88:70:52:cd:e5:6a:09:7f:c6:04:52:
ab:e1:c0:60:8f:ea:17:1e:75:57:80:50:c0:7c:62:
68:ea:a7:5b:27:c1:44:3a:70:9b:c2:d4:21:d0:49:
f1:5d:84:5d:ce:38:dc:9a:cd:aa:22:4b:6f:30:0c:
9f:f8:30:8e:38:13:44:c8:5e:e7:bb:cd:6e:4d:f9:
e9:ce:1d:74:45:d4:a8:36:e2:89:06:38:05:f5:17:
a2:93:9f:f1:1a:87:1d:03:0f:f4:65:b3:e8:4f:84:
42:1d:18:cb:b9:02:b7:c0:e8:bb:8d:95:fc:3f:15:
1d:3e:7c:df:25:f8:ee:61:62:fb:e1:40:18:fb:3d:
4e:af:a3:c7:38:3d:c8:58:39:46:20:fd:3a:28:43:
db:dd:39:27:36:d2:3a:df:98:a0:9a:ec:8e:f4:fa:
fa:d9:d5:1d:e3:a0:7c:09:9e:fd:21:12:9c:62:ea:
6d:2a:b8:76:84:5b:8e:76:55:04:ba:94:44:3f:65:
ce:c7:3b:5d:73:2a:7f:18:6b:b8:73:13:6e:b8:d2:
05:e7:bf:f3:1a:4c:29:6c:6e:b5:9c:5f:41:e4:41:
76:ea:37:2a:ea:02:01:b9:d0:0f:03:05:54:52:54:
cf:ad:dc:6b:22:f4:9c:0e:cd:84:4f:f8:71:25:fe:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DE:33:7C:49:E0:68:3F:A5:35:DE:99:47:A3:74:66:A4:A2:46:B6
X509v3 Authority Key Identifier:
keyid:93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/34352e3138312e32342e302f32332d3233203d3e20323639313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.24.0/23
Signature Algorithm: sha256WithRSAEncryption
53:aa:45:b5:b8:1a:b8:a4:bf:25:77:9e:3c:11:43:2b:d9:a2:
8a:8f:5f:28:f5:5f:69:aa:42:77:ab:a4:4d:cf:1f:46:8c:ed:
17:ad:10:b3:2b:b1:2d:e2:08:0a:27:40:e3:6e:86:31:a6:29:
c3:b8:12:33:b7:38:49:d0:14:34:4a:6b:2a:d1:cd:51:c1:a2:
03:af:9b:c1:65:5f:5d:47:be:cd:66:bf:fd:5f:57:27:df:6d:
68:c4:40:46:56:d0:26:fa:d2:c3:80:30:35:7a:77:a2:48:99:
2a:30:e3:94:d1:d4:f2:11:64:86:20:61:b4:18:02:1c:cb:a2:
ce:b3:5d:22:91:4b:42:b0:39:7c:ce:bd:81:8e:8d:b2:96:d9:
da:c3:f1:18:a9:5c:69:ad:4b:9b:ec:03:ea:77:53:ed:2d:ae:
b5:30:26:42:22:f1:0d:88:d6:b2:8f:3b:a3:32:d6:6f:06:1d:
1e:2e:50:50:22:0c:e8:28:de:86:4f:bd:83:f6:c7:d7:8a:51:
a1:d6:e5:13:09:2a:a9:63:fb:06:35:3a:bf:d1:b0:e6:0d:dd:
1c:e5:81:28:43:91:b4:a4:16:8b:0c:15:77:d7:5a:b2:c4:19:
37:5c:0d:cd:f6:ed:ba:fc:fb:15:37:24:2c:21:7e:df:5e:a9:
f4:be:27:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCWfWT+6RTyzfMFqGiPPIjXNHBJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM5QjMxNzYxRDgxMUVDMTJCREY4NDU2QzU3NEU2ODc0
QTNBQUQ3ODAeFw0yNTAyMDMwNTU1MjRaFw0yNjAyMDIwNjAwMjRaMDMxMTAvBgNV
BAMTKDZCREUzMzdDNDlFMDY4M0ZBNTM1REU5OTQ3QTM3NDY2QTRBMjQ2QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqZSIcFLN5WoJf8YEUqvhwGCP
6hcedVeAUMB8Ymjqp1snwUQ6cJvC1CHQSfFdhF3OONyazaoiS28wDJ/4MI44E0TI
Xue7zW5N+enOHXRF1Kg24okGOAX1F6KTn/Eahx0DD/Rls+hPhEIdGMu5ArfA6LuN
lfw/FR0+fN8l+O5hYvvhQBj7PU6vo8c4PchYOUYg/TooQ9vdOSc20jrfmKCa7I70
+vrZ1R3joHwJnv0hEpxi6m0quHaEW452VQS6lEQ/Zc7HO11zKn8Ya7hzE2640gXn
v/MaTClsbrWcX0HkQXbqNyrqAgG50A8DBVRSVM+t3Gsi9JwOzYRP+HEl/j1xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUa94zfEngaD+lNd6ZR6N0ZqSiRrYwHwYDVR0j
BBgwFoAUk5sxdh2BHsEr34RWxXTmh0o6rXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhx
M3ovMC85MzlCMzE3NjFEODExRUMxMkJERjg0NTZDNTc0RTY4NzRBM0FBRDc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOUIzMTc2MUQ4MTFFQzEy
QkRGODQ1NkM1NzRFNjg3NEEzQUFENzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRON05pUUFNVjFneXhyeXpreUwxNzk0WG9XeEhxaFppY1ZnelQ3bWI4cTN6LzAv
MzQzNTJlMzEzODMxMmUzMjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbUYMA0GCSqGSIb3DQEBCwUAA4IBAQBTqkW1uBq4
pL8ld548EUMr2aKKj18o9V9pqkJ3q6RNzx9GjO0XrRCzK7Et4ggKJ0DjboYxpinD
uBIztzhJ0BQ0Smsq0c1RwaIDr5vBZV9dR77NZr/9X1cn321oxEBGVtAm+tLDgDA1
eneiSJkqMOOU0dTyEWSGIGG0GAIcy6LOs10ikUtCsDl8zr2Bjo2yltnaw/EYqVxp
rUub7APqd1PtLa61MCZCIvENiNayjzujMtZvBh0eLlBQIgzoKN6GT72D9sfXilGh
1uUTCSqpY/sGNTq/0bDmDd0c5YEoQ5G0pBaLDBV311qyxBk3XA3N9u26/PsVNyQs
IX7fXqn0vief
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:49:50 2025 by rpki-client