Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232342e302f32332d3233203d3e203238323936.roa
File: 3138372e3132312e3232342e302f32332d3233203d3e203238323936.roa (raw, json)
Hash identifier: RWqgxI1dgWQl0veRQI6FDNZbIHV2tWH/Hnp2Z3JTsTM=
Subject key identifier: 7F:A9:1D:82:04:B7:7C:A2:A3:53:AD:33:A2:8A:A4:5A:74:DB:5C:D4
Certificate issuer: /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial: 089E8C2F3EE98CD8048507B81FA6A505E7E09D01
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232342e302f32332d3233203d3e203238323936.roa
Signing time: Sun 01 Dec 2024 22:42:53 +0000
ROA not before: Sun 01 Dec 2024 22:37:53 +0000
ROA not after: Sun 30 Nov 2025 22:42:53 +0000
asID: 28296
IP address blocks: 187.121.224.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:9e:8c:2f:3e:e9:8c:d8:04:85:07:b8:1f:a6:a5:05:e7:e0:9d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Validity
Not Before: Dec 1 22:37:53 2024 GMT
Not After : Nov 30 22:42:53 2025 GMT
Subject: CN=7FA91D8204B77CA2A353AD33A28AA45A74DB5CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:d5:0b:26:20:2c:dd:0b:7d:e1:28:f2:2b:
9c:0b:5e:57:b4:35:62:e3:93:f8:d5:50:36:90:bb:
0a:e8:cb:bf:c3:9e:49:5a:19:60:19:7b:14:08:70:
77:4d:1a:bb:0d:99:6e:a8:27:f1:72:6f:35:6a:e0:
e1:ed:5b:6a:85:4f:3d:7f:2c:1c:0b:4f:4b:ec:95:
76:c6:72:2c:79:c9:82:73:05:25:54:d2:fc:77:ac:
41:d6:71:cd:f0:9c:f3:a7:75:19:43:ab:1e:eb:c7:
af:4b:7f:30:8c:1f:8c:b0:da:3b:95:0d:d2:00:cc:
68:9e:74:64:8e:f5:8c:e0:27:ba:35:19:c3:f7:01:
cc:c1:3e:d7:73:37:b6:31:40:d5:55:0b:bf:0c:9b:
d9:86:74:eb:28:12:1a:64:ef:d2:59:fd:4b:b4:d8:
3e:b8:b8:4a:5c:32:f1:e3:0e:92:d5:40:26:cf:e0:
e6:6a:7c:7e:3a:eb:dd:f7:44:1b:17:44:8f:15:be:
58:6a:90:99:fb:16:d3:86:f9:4b:66:25:6e:29:8c:
a3:76:13:13:9e:65:00:22:59:2a:0b:34:52:54:8d:
0e:61:f5:b3:37:81:76:d1:34:be:70:67:67:df:d3:
77:2c:12:d4:a1:8f:9c:58:c2:3a:5a:8a:e5:af:32:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:1D:82:04:B7:7C:A2:A3:53:AD:33:A2:8A:A4:5A:74:DB:5C:D4
X509v3 Authority Key Identifier:
keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232342e302f32332d3233203d3e203238323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.121.224.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:7d:3d:35:03:ce:66:be:8e:d1:2b:e2:a5:00:a5:a0:1a:d0:
35:a6:4e:35:c4:45:8b:1a:e0:73:27:5f:66:f7:37:52:7b:29:
da:1c:73:0a:c9:7d:cd:59:5c:1f:a7:c3:8f:b4:c0:21:1e:07:
68:5a:67:26:c9:70:4f:b5:49:1d:82:85:e3:ab:fc:87:b7:26:
6e:c9:06:db:ee:3e:72:25:5e:b0:c2:73:d6:2b:d4:53:c1:d4:
81:76:ff:92:83:4d:40:fb:e1:3c:92:72:e3:49:c5:ed:bf:41:
ef:08:be:26:c8:84:55:41:15:24:c4:75:4e:52:8f:39:08:68:
bb:ca:aa:ad:67:c3:65:66:2f:65:d1:f2:f9:78:bb:16:21:86:
64:00:d1:ff:72:3e:68:23:d5:46:f1:7b:e3:02:ab:d1:63:c6:
16:13:ab:98:bd:57:92:e9:e4:58:74:b0:da:a2:d1:b9:a5:ad:
8f:7b:d1:84:8d:82:39:95:6d:62:49:63:46:23:ad:09:d4:eb:
37:82:19:7d:16:63:e1:d4:31:84:89:f6:33:0f:42:ae:0e:57:
35:cd:48:2c:eb:29:50:ff:64:57:ee:41:ca:6a:89:10:1e:bf:
d6:47:2a:06:ba:15:58:37:c5:08:c1:02:9f:dd:53:c6:f8:92:
ba:1b:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:44 2025 by rpki-client