Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/3133312e3136312e3136302e302f32322d3332203d3e20323639343130.roa
File: 3133312e3136312e3136302e302f32322d3332203d3e20323639343130.roa (raw, json)
Hash identifier: kVc6NaZzq551esqtK1Sl5X9m+AXVxJD0NKbdo9ybOoc=
Subject key identifier: 5C:95:8C:89:F1:70:DB:A2:39:99:BB:35:E8:9C:98:D9:6A:B2:45:74
Certificate issuer: /CN=97D3A19503990A77B10974CDCEE1CED41F9D742C
Certificate serial: 7F181B45162C128C410322470FE4F405F418F2CD
Authority key identifier: 97:D3:A1:95:03:99:0A:77:B1:09:74:CD:CE:E1:CE:D4:1F:9D:74:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/3133312e3136312e3136302e302f32322d3332203d3e20323639343130.roa
Signing time: Thu 04 Apr 2024 11:02:18 +0000
ROA not before: Thu 04 Apr 2024 10:57:18 +0000
ROA not after: Thu 03 Apr 2025 11:02:18 +0000
asID: 269410
IP address blocks: 131.161.160.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:18:1b:45:16:2c:12:8c:41:03:22:47:0f:e4:f4:05:f4:18:f2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97D3A19503990A77B10974CDCEE1CED41F9D742C
Validity
Not Before: Apr 4 10:57:18 2024 GMT
Not After : Apr 3 11:02:18 2025 GMT
Subject: CN=5C958C89F170DBA23999BB35E89C98D96AB24574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:ef:cd:36:75:44:ea:cb:d5:59:e7:b6:85:
6c:18:57:4c:31:a3:fb:2b:e3:35:58:93:69:f9:f4:
2e:8f:7f:80:26:d2:5a:b9:2f:cd:18:a5:48:55:19:
77:db:19:51:28:b8:ac:48:f0:bb:bd:ce:16:53:a3:
d0:ca:88:61:3f:22:b3:17:98:86:86:1c:6b:a7:f2:
8d:66:b7:dd:b5:64:60:c1:b8:2e:4f:24:40:95:80:
0f:17:12:43:84:b8:aa:9b:21:e3:8b:7d:73:41:08:
cb:81:06:80:d5:7f:f3:3a:97:dd:56:3d:26:b0:e8:
91:a6:f7:94:c7:28:08:8a:ce:05:d9:dc:a8:46:b8:
c8:0d:b5:8f:b5:a4:71:6a:a1:a1:de:5c:e2:49:ee:
c2:70:53:61:9d:df:b5:76:38:39:09:74:0f:4e:23:
59:88:23:b1:59:2d:d8:9b:3b:f3:a2:b6:2f:1d:ee:
19:ca:c3:cc:f9:82:fd:55:51:48:cd:c1:1e:e7:6e:
03:57:bf:20:21:31:67:20:51:68:cc:54:f9:86:f6:
c4:96:72:9e:94:01:11:e4:e6:a9:2a:7e:59:f3:a0:
93:e7:01:de:52:14:19:85:ce:47:cf:f4:7a:af:38:
64:e9:b5:ec:b8:e3:e0:9e:7f:d5:d6:0e:c5:0e:bf:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:8C:89:F1:70:DB:A2:39:99:BB:35:E8:9C:98:D9:6A:B2:45:74
X509v3 Authority Key Identifier:
keyid:97:D3:A1:95:03:99:0A:77:B1:09:74:CD:CE:E1:CE:D4:1F:9D:74:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97D3A19503990A77B10974CDCEE1CED41F9D742C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nHPBjUmP2kHicLoC3JN7jti3cW47X7bYaXdVEkiVnwh/1/3133312e3136312e3136302e302f32322d3332203d3e20323639343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.160.0/22
Signature Algorithm: sha256WithRSAEncryption
18:cb:04:1c:58:a4:14:49:d6:d7:79:e3:e7:52:f3:48:d0:76:
73:9a:c3:68:af:dd:e0:6e:76:48:d6:9f:c1:b6:58:ac:92:f4:
d7:e1:96:ce:67:67:c2:d1:c8:7d:f9:03:3d:fb:1d:94:49:10:
85:ff:60:11:71:ed:71:23:5b:0b:50:88:77:a4:a4:b6:e1:40:
d0:31:d7:ba:57:ba:dd:d0:23:2e:0c:82:58:1e:ed:25:bc:fa:
23:2f:3c:74:10:30:31:d0:a2:4c:46:7a:a8:ed:90:af:5c:05:
08:51:c6:3d:de:42:df:dc:df:e1:6d:fb:54:b0:9d:db:bb:7c:
d5:ac:23:d6:26:21:9d:a0:57:62:50:54:6f:f1:08:66:54:59:
c2:05:88:c2:b5:d2:3d:03:c8:61:a3:10:f3:19:cb:cb:27:56:
ba:39:11:e9:7a:5d:ca:5e:2c:e1:79:ef:e0:52:10:1a:5f:b4:
23:0b:6e:c9:2a:c3:a7:70:fc:e9:21:4c:49:f0:e7:24:74:78:
da:b3:4d:4c:ed:10:cc:96:c8:45:29:23:a5:a9:8d:45:5a:22:
2f:b6:30:15:f5:d9:ec:99:b7:c6:9b:4b:0a:df:6d:88:8f:c9:
a0:09:50:db:65:3b:2c:af:51:6a:d1:6f:88:4f:c0:82:63:ea:
00:47:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:37:48 2024 by rpki-client on console-ams.rpki-client.org