Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232382e302f32322d3232203d3e203238323936.roa
File: 3138372e3132312e3232382e302f32322d3232203d3e203238323936.roa (raw, json)
Hash identifier: U4uaRr4dxPv9y+5g2inUXwN0d5IU5gD4WgVStiXxwYU=
Subject key identifier: 4B:D1:3D:2B:C1:46:1F:71:45:4C:C8:CA:4E:C6:BA:E2:E7:A1:F0:B0
Certificate issuer: /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial: 681CDBBF39F9AE0BA9F0E48875CFD6CAA185813A
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232382e302f32322d3232203d3e203238323936.roa
Signing time: Sun 01 Dec 2024 22:45:42 +0000
ROA not before: Sun 01 Dec 2024 22:40:42 +0000
ROA not after: Sun 30 Nov 2025 22:45:42 +0000
asID: 28296
IP address blocks: 187.121.228.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1c:db:bf:39:f9:ae:0b:a9:f0:e4:88:75:cf:d6:ca:a1:85:81:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Validity
Not Before: Dec 1 22:40:42 2024 GMT
Not After : Nov 30 22:45:42 2025 GMT
Subject: CN=4BD13D2BC1461F71454CC8CA4EC6BAE2E7A1F0B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:26:38:0f:e4:a6:cb:43:5f:24:ae:12:6a:
21:50:a3:79:8d:e2:1e:60:0b:06:09:19:20:2e:f9:
5b:a2:4b:fa:52:e5:02:11:f8:e5:96:1e:5b:ff:d2:
1e:e0:d6:2a:b9:a5:1d:52:1d:15:dc:87:06:c4:9b:
7f:fd:a1:fc:21:30:fb:d2:4a:3c:6f:ad:85:70:fa:
a1:eb:99:9e:5a:c0:5a:ca:15:d7:c1:19:a6:23:08:
71:6d:8c:c5:38:c7:94:9d:a2:e6:42:9b:1b:e3:30:
ae:7c:87:22:73:8d:54:64:80:21:64:0d:88:db:3a:
06:e3:13:e5:b3:9a:83:86:d8:b6:b1:57:1e:37:d8:
f5:fb:8d:04:57:bf:f4:e4:7e:f1:79:1e:9f:e0:cf:
1d:27:bc:93:60:9f:17:f2:61:ef:f5:b6:fb:5d:27:
df:f9:ce:4f:7f:12:71:ee:00:3a:79:be:8a:fb:90:
37:86:c2:f5:7e:17:97:3b:bf:94:b9:04:59:9d:7d:
4e:9f:26:47:8e:d6:ae:8a:48:54:c8:a7:06:02:7d:
93:d8:81:fd:e3:29:a4:5b:1e:f2:75:f9:c6:11:75:
1e:b1:f7:bb:e0:f4:b2:63:19:dc:e6:1c:bb:5b:05:
ff:c6:dc:9e:6f:f8:b8:8a:78:b4:90:09:7c:ed:fe:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:3D:2B:C1:46:1F:71:45:4C:C8:CA:4E:C6:BA:E2:E7:A1:F0:B0
X509v3 Authority Key Identifier:
keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3232382e302f32322d3232203d3e203238323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.121.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:17:cf:36:46:f9:83:20:94:f1:20:e9:19:67:fe:7f:5a:a1:
2c:8b:3c:cb:0e:68:aa:7e:91:4d:af:21:4e:3f:d8:7e:b2:c3:
54:24:84:80:69:cf:ef:04:45:68:f2:db:f1:23:1b:ec:2d:e5:
69:b2:03:7e:51:de:6a:5e:e7:29:8b:fe:01:6d:61:e6:3a:e7:
b7:90:8d:79:89:31:4a:e6:4e:38:91:20:fd:bd:95:fc:5d:80:
96:07:77:c9:1d:f7:7a:a2:ed:38:ed:c2:60:7c:69:a3:da:62:
d7:b9:8a:b8:ee:8a:14:3d:56:b8:d8:da:91:57:8d:55:64:9e:
dd:b0:4d:eb:10:cf:d0:dc:db:9b:9c:ff:c6:66:f6:f7:df:1d:
5b:be:b0:6a:b0:f9:a4:76:f1:bf:59:5f:78:54:39:8d:d3:73:
f2:41:bb:22:54:78:ff:b8:ea:3e:09:56:ec:b6:68:3c:a0:3a:
06:65:ed:93:08:ec:34:d1:1d:6e:71:37:50:de:e3:80:4c:b3:
04:54:b4:1c:58:2e:a6:53:73:0b:85:8f:de:a3:c1:92:8c:25:
19:51:cd:fd:95:cc:a3:5b:af:62:38:07:fe:88:1a:1b:7a:c2:
df:41:cd:5d:17:f0:4c:cc:00:7e:5e:a8:38:2b:e7:6d:6e:09:
75:59:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:29:16 2025 by rpki-client