Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
File: 323830343a343663633a3a2f33322d3335203d3e20323637303132.roa (raw, json)
Hash identifier: hUJ3ViYjtOTPqVLKnHpcCJMKqWz/nzvrgDJaIzS7JxY=
Subject key identifier: 42:4C:E8:FC:2B:C7:AC:3C:C2:62:BB:8C:0E:9F:6C:C9:48:95:92:AD
Certificate issuer: /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial: 3D534A305C39B1A2F1A99085A101AFE728B1C42D
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
Signing time: Thu 05 Dec 2024 13:14:52 +0000
ROA not before: Thu 05 Dec 2024 13:09:52 +0000
ROA not after: Thu 04 Dec 2025 13:14:52 +0000
asID: 267012
IP address blocks: 2804:46cc::/32 maxlen: 35
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:53:4a:30:5c:39:b1:a2:f1:a9:90:85:a1:01:af:e7:28:b1:c4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Validity
Not Before: Dec 5 13:09:52 2024 GMT
Not After : Dec 4 13:14:52 2025 GMT
Subject: CN=424CE8FC2BC7AC3CC262BB8C0E9F6CC9489592AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:d0:5e:81:3d:8e:91:29:98:13:da:e2:46:
17:ef:77:10:d2:25:f4:96:0d:be:45:10:e0:ac:7c:
97:a8:db:96:7e:f6:5e:aa:22:64:4b:6c:d7:9a:bf:
e7:b6:df:60:cf:ed:f5:64:cd:3c:07:b8:b5:1c:c5:
e3:4e:ba:9c:a7:79:75:10:b6:03:59:4b:09:c6:46:
4d:dc:16:42:15:54:67:eb:3a:32:13:27:63:8b:a6:
b5:8c:c8:f9:86:a9:ab:39:c0:59:21:35:db:2e:64:
2f:6c:2d:1d:b9:73:0f:af:23:f7:c2:57:17:b4:6f:
09:3e:c7:45:8a:ca:66:90:be:74:56:c1:2b:9c:ec:
98:7f:45:69:92:1f:a0:5e:c4:3d:1b:08:3f:6f:93:
0a:d0:a7:e4:81:fe:33:db:6a:94:0d:5b:73:d8:8e:
e5:6d:2e:ac:b7:35:4e:ac:48:ed:1c:cd:19:23:b3:
11:ae:b5:14:4c:9f:9f:07:17:21:63:ef:6f:05:31:
9c:27:98:94:a1:5a:73:83:21:8a:d3:28:03:d8:9c:
4b:89:2a:fd:58:dd:3c:d8:49:d1:ec:49:00:b0:a8:
a1:b1:23:78:d7:6e:69:53:5e:25:29:09:fe:52:5e:
d1:f8:b3:4b:c1:8c:7f:68:99:69:e8:81:a0:68:87:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4C:E8:FC:2B:C7:AC:3C:C2:62:BB:8C:0E:9F:6C:C9:48:95:92:AD
X509v3 Authority Key Identifier:
keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a343663633a3a2f33322d3335203d3e20323637303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:46cc::/32
Signature Algorithm: sha256WithRSAEncryption
41:50:12:f1:12:21:e8:fc:a3:cb:ac:a4:72:75:28:c2:84:20:
83:8c:92:60:95:8c:2f:05:c2:06:5b:e5:15:64:e9:f4:c7:e5:
d4:93:82:aa:57:b4:19:c6:9a:5f:04:7f:56:c5:1f:66:49:74:
f4:2a:a4:6b:ab:43:6c:ef:88:c6:f0:f1:2f:a7:6a:99:05:8d:
38:61:eb:0c:3b:9b:16:23:52:cf:5f:b1:c9:78:24:9a:36:57:
e6:be:2e:79:12:0d:ad:4e:4e:f5:e0:0d:73:d3:f3:63:3d:16:
5a:3b:5c:c3:e2:ec:57:d3:7a:73:46:20:67:2e:ad:a9:db:88:
22:5a:60:28:19:01:59:06:7f:a2:c4:d7:8d:b8:42:41:80:6d:
83:bd:e6:02:47:ca:ca:d9:8c:0e:07:7b:1d:4d:3d:2f:5b:a2:
84:d2:5d:0b:39:ef:24:3c:9c:f1:3f:44:fe:b9:b6:c7:1d:5e:
18:23:89:97:62:0c:f6:56:a4:42:6a:45:30:db:90:f9:68:ff:
e4:97:f7:df:59:4e:7a:6e:20:35:99:09:d5:f5:ae:5b:e8:7b:
97:b6:c1:7a:b8:f1:2e:76:57:8a:e2:30:a2:a3:4b:96:82:de:
32:f4:49:58:28:35:ac:bc:5b:a2:e0:13:d9:31:a8:77:cb:56:
48:0a:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:47:42 2025 by rpki-client