Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135322e302f32342d3234203d3e203238353732.roa
File: 3230302e3139322e3135322e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier: aouzvdY5kJZHREkJNItmy3aKoL3P+RDzTvrIX0p5g9w=
Subject key identifier: 88:86:7E:5D:72:E8:81:2B:59:2E:EF:9F:B7:33:47:D5:6B:DD:34:59
Certificate issuer: /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial: 21BA16D756466028870F98D031C8C8AE7379CAB0
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135322e302f32342d3234203d3e203238353732.roa
Signing time: Sat 29 Jun 2024 15:32:20 +0000
ROA not before: Sat 29 Jun 2024 15:27:20 +0000
ROA not after: Sat 28 Jun 2025 15:32:20 +0000
asID: 28572
IP address blocks: 200.192.152.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ba:16:d7:56:46:60:28:87:0f:98:d0:31:c8:c8:ae:73:79:ca:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Validity
Not Before: Jun 29 15:27:20 2024 GMT
Not After : Jun 28 15:32:20 2025 GMT
Subject: CN=88867E5D72E8812B592EEF9FB73347D56BDD3459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:d0:2a:23:16:90:82:1e:87:dc:01:9c:83:
a8:24:69:45:a8:8f:a6:4a:21:58:7a:ac:74:b8:59:
4d:47:5a:c2:d5:d2:6a:9c:cb:52:f0:cf:6a:43:8f:
31:bb:76:15:ad:33:3c:b2:d5:cb:90:6e:37:1f:b9:
27:be:2d:7b:39:bc:04:f4:65:b0:3a:75:00:ed:f3:
3f:e6:06:72:77:7c:95:47:7b:26:e9:ae:8b:37:a0:
16:e5:09:a3:bf:da:c5:a1:1c:b4:73:b0:a7:35:dc:
a4:ae:11:6d:c2:48:7c:46:22:51:45:04:8f:c8:91:
53:6d:dc:77:1b:e0:a4:ae:2e:de:b7:3b:a8:1e:58:
b0:c9:67:55:56:9b:ec:fa:0b:59:d4:0f:24:e4:bf:
a5:69:55:61:fb:ca:65:64:57:38:97:98:35:f9:10:
0e:05:9b:d9:ae:f4:df:42:9c:5e:e7:ba:f7:6a:76:
88:f6:a4:36:0d:41:5b:5b:9c:8e:1d:84:8e:2f:d5:
7a:13:8c:15:86:fb:c0:6c:2d:0f:78:1a:a7:7d:27:
2f:14:4e:11:cd:08:ce:b1:fd:39:ce:15:ce:c6:ff:
38:58:86:76:6b:de:a5:fd:1b:4d:b2:1a:ff:88:ea:
a9:8b:e2:c2:57:52:0f:4f:16:d9:7c:a5:0b:db:93:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:7E:5D:72:E8:81:2B:59:2E:EF:9F:B7:33:47:D5:6B:DD:34:59
X509v3 Authority Key Identifier:
keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135322e302f32342d3234203d3e203238353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.192.152.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2a:52:ff:22:1e:7f:b5:af:8e:3b:77:6b:2e:61:b9:df:c2:
89:35:45:77:7b:3f:aa:08:ff:05:30:a0:05:06:3e:e6:e1:15:
62:f0:47:cd:53:c7:19:1a:15:d7:92:78:f0:cd:43:97:cb:38:
5d:ed:a9:de:08:50:59:9d:cd:76:a2:ae:00:d1:78:ae:b0:7a:
ec:08:0a:b2:30:d1:a0:03:01:f0:75:93:15:88:af:7c:76:f0:
56:a7:4f:18:40:e3:11:95:b7:10:3a:72:e3:84:93:38:b6:08:
ee:b8:8f:50:7a:97:f6:69:b5:b7:38:02:3e:5d:0f:e2:4d:24:
a4:9d:4c:ca:15:de:fe:6b:ba:d9:3e:42:7d:75:7b:c2:8e:b3:
82:a5:17:21:e3:87:79:95:98:7b:54:b3:75:bd:f4:af:e3:7c:
06:53:09:ae:77:66:cd:34:60:3d:08:cf:11:41:82:d1:fc:ef:
6e:ec:17:4f:84:eb:f9:e4:84:c0:95:b7:70:93:e0:a9:31:ff:
2f:06:67:93:8b:d1:ca:a4:b7:c9:70:ec:6c:84:d8:09:91:1a:
6f:a0:fb:00:d4:16:e5:cd:f8:80:54:28:11:cd:a8:71:06:37:
2e:5c:ee:e8:1e:3e:f9:7d:3b:a5:40:c2:ce:32:83:70:a0:9f:
72:a2:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:54 2025 by rpki-client