Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134342e302f32302d3230203d3e203238353732.roa
File: 3230302e3139322e3134342e302f32302d3230203d3e203238353732.roa (raw, json)
Hash identifier: 8KThI/QCwfmJxd6CmEZx10K9aCop9UZWOG7zFd4MU5Q=
Subject key identifier: 3E:AB:E4:42:AA:3E:F4:AA:4A:79:96:66:6B:61:09:82:5C:07:F2:8B
Certificate issuer: /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial: 3FC6C47E953A0CBBC1E5C297B8F610CE0A30332A
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134342e302f32302d3230203d3e203238353732.roa
Signing time: Sat 29 Jun 2024 15:31:54 +0000
ROA not before: Sat 29 Jun 2024 15:26:54 +0000
ROA not after: Sat 28 Jun 2025 15:31:54 +0000
asID: 28572
IP address blocks: 200.192.144.0/20 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c6:c4:7e:95:3a:0c:bb:c1:e5:c2:97:b8:f6:10:ce:0a:30:33:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Validity
Not Before: Jun 29 15:26:54 2024 GMT
Not After : Jun 28 15:31:54 2025 GMT
Subject: CN=3EABE442AA3EF4AA4A7996666B6109825C07F28B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a6:5e:a0:0e:9f:90:1a:c2:52:77:b1:72:c4:
5d:37:7f:19:91:56:45:d7:83:d0:dc:4e:8d:6c:33:
47:9d:8e:c7:a9:42:85:5c:7e:a8:58:e4:b2:7f:53:
d1:ae:93:8d:9b:e9:2d:c7:2d:8c:a7:76:99:eb:b4:
02:4f:13:9d:92:a3:72:fe:62:13:9d:21:b3:5d:36:
35:80:84:a5:b3:aa:12:ab:25:49:fc:f9:06:4a:25:
04:fb:6e:21:19:34:70:48:71:ea:fe:1f:38:b2:3d:
bb:9f:49:89:1b:51:48:13:b3:25:bc:c7:a6:09:24:
ad:b9:45:54:f6:04:23:35:87:7b:46:ea:26:d1:ff:
29:f1:2f:16:54:48:9b:e7:e0:b1:77:42:df:64:d0:
f7:dc:66:4b:e0:f8:43:9a:77:2e:43:c5:6f:36:59:
54:92:71:29:04:78:6c:98:e3:28:b0:5b:95:50:17:
ce:55:fe:88:b2:e5:4c:cd:03:71:19:62:0b:8a:cb:
19:09:80:ef:38:50:53:8a:9f:b9:06:f5:72:61:56:
18:10:01:25:f3:2b:6e:40:cb:df:02:e8:09:a6:1b:
23:a1:e9:a5:9a:28:f1:83:4d:8b:d3:20:74:ec:cd:
b1:a9:94:75:58:74:d5:70:30:50:ab:fa:9c:56:93:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AB:E4:42:AA:3E:F4:AA:4A:79:96:66:6B:61:09:82:5C:07:F2:8B
X509v3 Authority Key Identifier:
keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134342e302f32302d3230203d3e203238353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.192.144.0/20
Signature Algorithm: sha256WithRSAEncryption
54:43:e6:2a:83:4c:f8:3a:ca:18:05:f8:7f:e5:78:4b:af:f6:
2e:a6:e2:dc:c7:8b:b0:51:db:4f:ec:3c:2f:9f:85:99:43:84:
e2:34:4e:62:c4:fc:16:f5:9b:2a:c5:65:5c:52:76:f8:5c:f9:
12:ab:ed:f0:45:78:55:be:dc:36:48:77:87:86:b9:f2:6c:b7:
8f:c2:54:1a:dc:48:3f:c5:ce:af:13:b6:7e:12:2f:dd:43:38:
39:4e:8a:9a:79:fe:2f:a9:d7:2a:b9:a6:4d:4c:6e:8d:63:51:
aa:8f:fe:fd:c1:d9:69:68:be:e8:35:ac:2b:33:11:6c:82:19:
5d:fc:36:99:57:98:32:b5:63:53:01:a9:7b:5a:06:80:d1:64:
e3:63:ac:d1:18:71:bc:84:22:c9:40:79:50:70:93:9d:3a:b8:
c7:7e:6d:16:26:81:8f:cf:3e:c6:cc:4b:cc:ac:ac:3b:1f:64:
40:46:b0:fb:4b:3b:87:94:e2:c5:45:90:3b:6a:c6:df:2a:ee:
3e:7f:fa:51:84:68:33:3c:21:9c:a9:c3:99:8a:0e:53:9c:d0:
ea:f8:ae:96:2f:f0:7d:4b:9a:06:fb:86:05:63:c4:b8:6d:98:
2f:44:d6:9e:82:67:9e:66:4c:da:84:e9:a6:3b:ef:8c:ad:3e:
36:06:e9:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP8bEfpU6DLvB5cKXuPYQzgowMyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlFQUUzOEQxNUY1ODk5RDM2MDlDNDExRUIxQTFDNkI0
MkRGQjAwOTAeFw0yNDA2MjkxNTI2NTRaFw0yNTA2MjgxNTMxNTRaMDMxMTAvBgNV
BAMTKDNFQUJFNDQyQUEzRUY0QUE0QTc5OTY2NjZCNjEwOTgyNUMwN0YyOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDspl6gDp+QGsJSd7FyxF03fxmR
VkXXg9DcTo1sM0edjsepQoVcfqhY5LJ/U9Guk42b6S3HLYyndpnrtAJPE52So3L+
YhOdIbNdNjWAhKWzqhKrJUn8+QZKJQT7biEZNHBIcer+HziyPbufSYkbUUgTsyW8
x6YJJK25RVT2BCM1h3tG6ibR/ynxLxZUSJvn4LF3Qt9k0PfcZkvg+EOady5DxW82
WVSScSkEeGyY4yiwW5VQF85V/oiy5UzNA3EZYguKyxkJgO84UFOKn7kG9XJhVhgQ
ASXzK25Ay98C6AmmGyOh6aWaKPGDTYvTIHTszbGplHVYdNVwMFCr+pxWk/MZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPqvkQqo+9KpKeZZma2EJglwH8oswHwYDVR0j
BBgwFoAUGerjjRX1iZ02CcQR6xoca0LfsAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk5abWZjelg4eExwVUxDQVhXQnhhamt3QkhESkprc0poSks0UG9hd3hB
U1EvMC8xOUVBRTM4RDE1RjU4OTlEMzYwOUM0MTFFQjFBMUM2QjQyREZCMDA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RUFFMzhEMTVGNTg5OUQz
NjA5QzQxMUVCMUExQzZCNDJERkIwMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOWm1mY3pYOHhMcFVMQ0FYV0J4YWprd0JIREpKa3NKaEpLNFBvYXd4QVNRLzAv
MzIzMDMwMmUzMTM5MzIyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzgzNTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATIwJAwDQYJKoZIhvcNAQELBQADggEBAFRD5iqD
TPg6yhgF+H/leEuv9i6m4tzHi7BR20/sPC+fhZlDhOI0TmLE/Bb1myrFZVxSdvhc
+RKr7fBFeFW+3DZId4eGufJst4/CVBrcSD/Fzq8Ttn4SL91DODlOipp5/i+p1yq5
pk1Mbo1jUaqP/v3B2Wlovug1rCszEWyCGV38NplXmDK1Y1MBqXtaBoDRZONjrNEY
cbyEIslAeVBwk506uMd+bRYmgY/PPsbMS8ysrDsfZEBGsPtLO4eU4sVFkDtqxt8q
7j5/+lGEaDM8IZypw5mKDlOc0Or4rpYv8H1Lmgb7hgVjxLhtmC9E1p6CZ55mTNqE
6aY774ytPjYG6a0=
-----END CERTIFICATE-----
Generated at Wed Nov 20 09:39:29 2024 by rpki-client on console-ams.rpki-client.org