Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233312e302f32342d3234203d3e203238323936.roa
File: 3138372e3132312e3233312e302f32342d3234203d3e203238323936.roa (raw, json)
Hash identifier: YAw/pwfGTUyNLF+xrwovBSHFgD9RwhYUkWJ1eYtZVsI=
Subject key identifier: FB:A6:49:47:13:DC:B6:6B:85:85:61:E0:92:2E:02:5F:A1:AE:5D:64
Certificate issuer: /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial: 186100D180F31F808D45643A88CABE5D44FCBE5C
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233312e302f32342d3234203d3e203238323936.roa
Signing time: Sun 01 Dec 2024 22:43:23 +0000
ROA not before: Sun 01 Dec 2024 22:38:23 +0000
ROA not after: Sun 30 Nov 2025 22:43:23 +0000
asID: 28296
IP address blocks: 187.121.231.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:61:00:d1:80:f3:1f:80:8d:45:64:3a:88:ca:be:5d:44:fc:be:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Validity
Not Before: Dec 1 22:38:23 2024 GMT
Not After : Nov 30 22:43:23 2025 GMT
Subject: CN=FBA6494713DCB66B858561E0922E025FA1AE5D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:99:73:96:3b:27:97:36:7d:66:70:9f:40:
e9:78:01:a3:c3:27:55:39:06:32:70:9a:22:ff:54:
b9:a9:7b:4c:14:f9:b3:76:75:f9:f4:b8:d6:02:98:
57:73:81:51:5d:f2:98:95:72:c8:4e:03:4d:40:bb:
3d:41:c9:96:f1:ef:64:6c:1f:00:0a:30:af:56:42:
cb:15:bf:3e:a5:32:2f:1a:1d:39:6b:7b:75:50:cd:
7b:e0:5a:5e:d2:e5:9f:39:be:cc:66:be:3a:b6:3e:
e2:74:27:52:63:dd:a5:d2:9a:17:5d:64:e6:38:ae:
7f:bc:68:a9:46:a1:be:61:64:15:20:58:0c:48:00:
ae:0f:d8:46:97:4c:33:d3:7a:e1:02:28:61:47:58:
56:34:92:6d:53:2e:31:3c:df:16:df:6a:9c:3f:a3:
83:46:6b:5d:13:d1:9c:d7:bc:8d:8d:81:a1:7a:2b:
3c:b6:d9:ab:29:73:62:fd:4e:85:e8:f2:45:ae:b0:
ad:48:70:08:da:e0:60:8c:fd:45:5a:af:d2:fe:fc:
94:34:57:ec:88:8e:65:c5:64:eb:bd:2d:d7:00:05:
6e:f4:b5:23:81:85:58:1e:e9:9e:a6:3c:e8:3b:cc:
31:4b:01:30:18:f3:fe:e3:d5:01:1f:52:27:b1:00:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:49:47:13:DC:B6:6B:85:85:61:E0:92:2E:02:5F:A1:AE:5D:64
X509v3 Authority Key Identifier:
keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233312e302f32342d3234203d3e203238323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.121.231.0/24
Signature Algorithm: sha256WithRSAEncryption
be:43:8a:44:6b:61:c5:45:f1:be:d2:3d:a4:b0:d3:af:c8:cd:
ff:af:5a:85:f1:7e:4e:eb:4e:61:6e:8c:a7:14:2c:17:17:67:
de:ec:e1:19:2f:7b:0a:ff:1e:72:38:b0:a4:08:4c:96:ab:8f:
40:99:cf:1e:dd:c8:75:c1:c7:73:ec:79:81:8b:58:60:f0:9a:
c0:d2:bf:8a:bc:30:1f:0a:d4:b8:b4:99:d8:8b:a3:06:27:ce:
10:c1:66:58:ba:6c:9b:15:a5:c8:50:e0:0b:f7:1a:9d:ae:76:
fa:d4:10:52:7f:d5:2d:68:e4:ec:b0:a6:4e:41:d8:35:39:ec:
8a:92:da:c8:98:f9:f0:a0:48:8a:c6:96:16:da:ac:c3:31:7d:
52:a4:18:a6:c6:88:24:ef:cf:c6:4d:3a:99:6c:be:11:e2:20:
a1:63:9f:46:e6:92:5e:a0:31:77:f9:16:5c:ce:e6:a5:e0:08:
13:af:cc:43:ef:d9:82:d5:0b:7f:2a:7b:db:c7:60:75:99:c8:
e8:de:8c:4c:62:3a:20:4f:04:02:00:b9:b9:31:f9:07:5b:ab:
8e:35:43:60:c6:d4:b3:b5:99:9d:7a:0f:45:e4:85:de:cc:33:
09:d0:00:36:4b:44:5a:3b:9f:3e:a4:23:1f:e5:a8:ea:e9:b1:
5d:e7:b5:45
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGGEA0YDzH4CNRWQ6iMq+XUT8vlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQwNzc2MDk1RDBBMkEyNjE3RjUyQTJGNDY1N0I5RDY5
QUE2NjFERDAeFw0yNDEyMDEyMjM4MjNaFw0yNTExMzAyMjQzMjNaMDMxMTAvBgNV
BAMTKEZCQTY0OTQ3MTNEQ0I2NkI4NTg1NjFFMDkyMkUwMjVGQTFBRTVENjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbeJlzljsnlzZ9ZnCfQOl4AaPD
J1U5BjJwmiL/VLmpe0wU+bN2dfn0uNYCmFdzgVFd8piVcshOA01Auz1ByZbx72Rs
HwAKMK9WQssVvz6lMi8aHTlre3VQzXvgWl7S5Z85vsxmvjq2PuJ0J1Jj3aXSmhdd
ZOY4rn+8aKlGob5hZBUgWAxIAK4P2EaXTDPTeuECKGFHWFY0km1TLjE83xbfapw/
o4NGa10T0ZzXvI2NgaF6Kzy22aspc2L9ToXo8kWusK1IcAja4GCM/UVar9L+/JQ0
V+yIjmXFZOu9LdcABW70tSOBhVge6Z6mPOg7zDFLATAY8/7j1QEfUiexAJqpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+6ZJRxPctmuFhWHgki4CX6GuXWQwHwYDVR0j
BBgwFoAUJAd2CV0KKiYX9SovRle51pqmYd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxhS0ZwVWQ2Zm50NFBuNEFlZFpUUzg2U0pXcVZjSzFCenNUaEMyZFlo
R2UvMC8yNDA3NzYwOTVEMEEyQTI2MTdGNTJBMkY0NjU3QjlENjlBQTY2MURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MDc3NjA5NUQwQTJBMjYx
N0Y1MkEyRjQ2NTdCOUQ2OUFBNjYxREQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMYUtGcFVkNmZudDRQbjRBZWRaVFM4NlNKV3FWY0sxQnpzVGhDMmRZaEdlLzAv
MzEzODM3MmUzMTMyMzEyZTMyMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7eecwDQYJKoZIhvcNAQELBQADggEBAL5DikRr
YcVF8b7SPaSw06/Izf+vWoXxfk7rTmFujKcULBcXZ97s4Rkvewr/HnI4sKQITJar
j0CZzx7dyHXBx3PseYGLWGDwmsDSv4q8MB8K1Li0mdiLowYnzhDBZli6bJsVpchQ
4Av3Gp2udvrUEFJ/1S1o5Oywpk5B2DU57IqS2siY+fCgSIrGlhbarMMxfVKkGKbG
iCTvz8ZNOplsvhHiIKFjn0bmkl6gMXf5FlzO5qXgCBOvzEPv2YLVC38qe9vHYHWZ
yOjejExiOiBPBAIAubkx+Qdbq441Q2DG1LO1mZ16D0Xkhd7MMwnQADZLRFo7nz6k
Ix/lqOrpsV3ntUU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:04 2025 by rpki-client