Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3139312e3234332e39322e302f32322d3234203d3e20323638353436.roa
File: 3139312e3234332e39322e302f32322d3234203d3e20323638353436.roa (raw, json)
Hash identifier: l688Dx39g3Wqh15KDX6V85nwAeFJZFJqe4Ibusv0Ido=
Subject key identifier: B4:0E:42:08:61:7D:4D:2A:A5:DE:08:94:A2:99:DF:06:1D:83:8E:F1
Certificate issuer: /CN=37CA3286264D504D79210CC12A74E15D2E230251
Certificate serial: 03CFD60FD5834FFDA1948453394ACAD8FB52EADB
Authority key identifier: 37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3139312e3234332e39322e302f32322d3234203d3e20323638353436.roa
Signing time: Mon 12 Aug 2024 13:16:41 +0000
ROA not before: Mon 12 Aug 2024 13:11:41 +0000
ROA not after: Mon 11 Aug 2025 13:16:41 +0000
asID: 268546
IP address blocks: 191.243.92.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:cf:d6:0f:d5:83:4f:fd:a1:94:84:53:39:4a:ca:d8:fb:52:ea:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37CA3286264D504D79210CC12A74E15D2E230251
Validity
Not Before: Aug 12 13:11:41 2024 GMT
Not After : Aug 11 13:16:41 2025 GMT
Subject: CN=B40E4208617D4D2AA5DE0894A299DF061D838EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:b5:3f:57:47:e5:47:27:cc:ab:0e:5e:79:
34:48:b5:a8:3b:cb:76:8d:67:bc:ac:28:4d:21:1b:
23:91:b1:2c:c2:f7:3f:b8:6a:92:f9:f6:37:8c:1e:
ca:0c:0d:21:6a:44:b2:8c:a7:67:ac:46:ec:e1:aa:
1e:58:90:bf:3d:b7:de:eb:15:e9:94:da:36:39:ba:
fa:64:da:e6:62:7c:82:ff:44:78:6a:92:2b:56:74:
57:73:b8:b4:60:2a:0d:67:8e:ef:cd:9d:ea:f8:24:
8c:3d:9c:0b:90:b8:69:f4:c6:87:ff:e2:d0:68:33:
37:19:7a:a1:cb:66:a0:1d:39:e8:69:dc:ab:dc:48:
98:80:0e:e6:4d:18:b6:52:e4:ad:99:fe:d6:c1:5e:
bf:e0:3f:94:05:d2:c2:aa:c2:90:4d:a6:7f:a1:84:
42:27:03:df:bc:c2:d8:5d:76:8d:77:cb:74:ab:c5:
6f:70:10:48:f3:37:36:87:92:b4:98:0b:83:3f:37:
60:54:97:28:71:6a:83:fe:73:d9:fd:12:cf:4b:a8:
f8:1c:5f:ba:fc:4c:fd:22:83:61:8a:38:1b:a6:a6:
2d:bb:27:01:87:49:66:66:f2:85:dd:a5:e8:79:6c:
48:0d:52:09:87:c4:66:86:dd:10:ba:05:c2:56:c5:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0E:42:08:61:7D:4D:2A:A5:DE:08:94:A2:99:DF:06:1D:83:8E:F1
X509v3 Authority Key Identifier:
keyid:37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3139312e3234332e39322e302f32322d3234203d3e20323638353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.92.0/22
Signature Algorithm: sha256WithRSAEncryption
43:95:ce:ea:a1:cd:bf:69:8f:4b:c8:20:68:b2:53:ba:96:1e:
a9:08:59:e1:5d:38:55:b3:e4:32:c7:d1:fe:c5:5e:0f:59:f6:
95:1c:51:51:76:98:c7:42:3e:49:72:89:e3:d8:d1:7e:24:59:
a9:95:4e:b0:0d:b0:75:ba:7d:54:1e:e9:2e:19:20:e6:6e:a2:
0f:01:1f:8b:b5:e3:a6:9b:bd:ef:aa:e1:2e:da:fa:43:92:20:
f8:2b:2a:31:e9:91:22:72:d1:b8:9d:15:6b:21:e0:45:92:7c:
17:5c:07:31:0b:ed:9b:9f:4f:96:2e:86:fa:8f:98:74:d8:d5:
f1:97:60:d3:80:37:11:65:ec:79:19:9d:a7:e3:0e:c4:29:6e:
b5:75:0d:45:38:b6:ca:1c:96:32:59:62:97:77:50:f1:80:74:
3b:e8:a7:c0:f8:c5:c3:96:40:95:42:8e:4f:60:dc:40:fb:6a:
db:41:d6:5c:e4:64:4b:98:d8:85:7c:3e:45:e4:f1:03:12:4e:
62:a6:e5:9b:ce:c9:2a:d1:3a:b1:c5:68:0a:ac:49:7d:d7:6d:
ce:2e:07:47:6e:4d:18:e0:a5:66:35:05:77:38:76:0e:1c:78:
80:ec:53:3f:3c:88:1c:23:d9:a1:cf:67:09:8e:97:4f:a7:f2:
54:ec:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:46:01 2025 by rpki-client