Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136332e38342e302f32322d3234203d3e20323638353436.roa
File: 34352e3136332e38342e302f32322d3234203d3e20323638353436.roa (raw, json)
Hash identifier: Y8tmyw1gE7RPImp40XPE6BnRCx7NR9s3j2X3UdqgA7M=
Subject key identifier: 5F:E9:92:F8:8C:B0:0B:CF:0B:83:9E:95:35:B7:64:92:1B:14:C9:23
Certificate issuer: /CN=37CA3286264D504D79210CC12A74E15D2E230251
Certificate serial: 7D242D8AAD9884A4CD722CE860DB03FBA4C59945
Authority key identifier: 37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136332e38342e302f32322d3234203d3e20323638353436.roa
Signing time: Mon 12 Aug 2024 13:16:05 +0000
ROA not before: Mon 12 Aug 2024 13:11:05 +0000
ROA not after: Mon 11 Aug 2025 13:16:05 +0000
asID: 268546
IP address blocks: 45.163.84.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:24:2d:8a:ad:98:84:a4:cd:72:2c:e8:60:db:03:fb:a4:c5:99:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37CA3286264D504D79210CC12A74E15D2E230251
Validity
Not Before: Aug 12 13:11:05 2024 GMT
Not After : Aug 11 13:16:05 2025 GMT
Subject: CN=5FE992F88CB00BCF0B839E9535B764921B14C923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:e0:ec:eb:ae:75:35:ed:8c:e3:5e:c5:a5:
40:c2:ef:fb:fd:73:97:25:10:8a:c9:fa:91:e9:59:
7d:f5:d3:9c:30:80:c9:47:2e:d6:4a:38:7a:52:42:
c3:14:f1:a2:3a:e6:ce:50:1d:dd:4f:46:d8:af:f1:
66:03:ce:ef:81:36:9a:cc:fe:ec:cb:67:cd:db:eb:
f8:0a:c3:42:9d:46:ac:a8:d6:87:ca:3c:ab:a1:e2:
33:a8:ac:c0:51:eb:e1:85:ee:df:eb:e5:c5:63:99:
b5:95:57:c6:84:83:c5:0f:5b:c3:dc:0e:de:af:4d:
9d:47:b4:cd:50:3e:c3:65:c0:90:7c:42:58:36:e3:
71:f2:ba:75:d9:8f:f1:a0:5a:59:da:7b:67:41:86:
0a:f5:b7:fd:b5:97:82:7b:5f:b3:13:58:3f:3e:6f:
08:c5:cf:3d:43:e9:e9:b4:95:82:95:de:d0:bd:02:
15:77:56:12:35:db:b5:af:0a:53:b6:15:df:fa:41:
ba:94:86:0f:16:ab:61:bf:04:fe:42:57:1e:ec:8b:
71:35:4c:b6:bc:49:69:98:7b:c3:b6:05:c3:5c:64:
e8:ca:be:5b:a8:77:d6:12:12:c4:1a:58:f5:20:23:
01:18:58:22:ef:e4:70:f4:d9:93:c6:69:d1:7d:13:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E9:92:F8:8C:B0:0B:CF:0B:83:9E:95:35:B7:64:92:1B:14:C9:23
X509v3 Authority Key Identifier:
keyid:37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/34352e3136332e38342e302f32322d3234203d3e20323638353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.84.0/22
Signature Algorithm: sha256WithRSAEncryption
63:6b:f5:c7:b6:20:a7:24:56:3d:c3:e5:39:04:6b:32:00:0f:
43:67:ba:e3:c9:e7:5c:04:34:0c:b2:cd:44:37:6d:3f:01:43:
a3:c3:e7:51:0d:b1:6b:eb:8d:c7:a4:dd:53:1e:35:84:1e:14:
63:df:72:16:89:19:48:25:bb:ac:53:5b:f4:9b:77:aa:41:10:
5f:f0:73:f4:35:86:e4:c0:ee:aa:58:1b:4c:88:25:03:a1:f6:
b6:9e:c0:4c:b9:ea:d4:bf:95:ec:dd:47:16:37:a7:d5:77:33:
1d:71:44:5c:bd:44:67:70:95:a8:cf:73:d8:c6:cc:f1:91:89:
0d:bc:46:65:70:29:74:ff:10:67:77:ac:b0:71:d8:3f:e4:d1:
85:39:ba:72:b6:16:ae:7e:d4:46:73:d9:15:16:b8:da:58:93:
37:74:6a:98:f6:4e:7c:ee:d7:95:3e:a4:f4:42:f5:31:78:e3:
cd:f1:74:37:f2:8b:35:5c:bb:34:29:b0:25:c2:28:2f:4b:52:
62:04:91:fa:b1:b1:1f:d1:a8:55:41:28:96:41:8f:50:c9:23:
65:c9:5c:f8:02:b4:65:75:2e:fc:cc:df:a6:78:c5:34:d2:e1:
bc:30:7e:6f:2a:f9:d0:c0:ac:e4:3e:30:e2:07:43:8e:1f:d4:
8e:43:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:24:07 2025 by rpki-client