Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135342e302f32332d3233203d3e203238353732.roa
File: 3230302e3139322e3135342e302f32332d3233203d3e203238353732.roa (raw, json)
Hash identifier: dZ2CqIm6zs4b4nsfbm/FKDfGIGm18Crftx5/owl5SCo=
Subject key identifier: F5:AA:06:AD:EB:B4:EC:DF:4B:9B:87:62:B7:4F:C1:9F:93:AE:18:43
Certificate issuer: /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial: 6FE7AF74CC6AACAA12F36666A1D2C1882D1AE05E
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135342e302f32332d3233203d3e203238353732.roa
Signing time: Sat 29 Jun 2024 15:32:26 +0000
ROA not before: Sat 29 Jun 2024 15:27:26 +0000
ROA not after: Sat 28 Jun 2025 15:32:26 +0000
asID: 28572
IP address blocks: 200.192.154.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e7:af:74:cc:6a:ac:aa:12:f3:66:66:a1:d2:c1:88:2d:1a:e0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Validity
Not Before: Jun 29 15:27:26 2024 GMT
Not After : Jun 28 15:32:26 2025 GMT
Subject: CN=F5AA06ADEBB4ECDF4B9B8762B74FC19F93AE1843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:54:c6:05:1a:0d:95:12:c7:a2:99:9c:ee:
77:9b:62:53:c4:f5:b2:da:dd:1b:f0:a9:68:9f:d0:
b7:d8:7e:93:8b:21:21:3d:b1:05:48:76:5b:0f:a2:
82:02:ad:9c:82:29:92:dd:32:8d:f7:b6:26:b1:0f:
19:69:91:4a:92:ce:bf:c6:81:08:a9:07:f2:68:93:
e6:64:e2:f3:73:1b:ae:65:7a:01:6b:c9:a8:9e:8f:
62:d2:a5:d3:ca:ef:a2:71:72:ce:6b:1c:4f:2b:5a:
d1:a6:e4:0e:ee:b5:67:78:ac:eb:d6:72:b7:5e:24:
42:a8:a2:2e:6d:de:4f:72:8b:06:69:5e:e8:64:b3:
49:dd:10:09:db:7c:9d:f3:25:29:75:87:3b:df:a3:
12:1b:da:34:48:89:87:dc:2a:2c:2c:da:b9:b4:58:
fe:36:9e:01:4d:10:12:cb:61:4f:93:94:06:fc:1f:
c3:6f:aa:b1:e2:f1:bf:88:3e:fc:d1:2b:6c:96:17:
38:8a:ba:6f:56:93:6c:1b:f1:02:e1:2d:88:1b:09:
d9:b8:2e:de:93:d2:25:e6:1a:e3:21:d6:8e:1f:9f:
df:1d:01:7b:fb:1a:7f:2e:fc:81:ac:0f:a4:5d:05:
4e:95:2d:2a:5d:83:28:90:c3:e2:8f:a9:73:1c:a1:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:06:AD:EB:B4:EC:DF:4B:9B:87:62:B7:4F:C1:9F:93:AE:18:43
X509v3 Authority Key Identifier:
keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135342e302f32332d3233203d3e203238353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.192.154.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:0c:2d:4d:c8:a5:6d:fb:e0:d1:e2:54:8a:f5:4f:d2:ae:ee:
b6:c2:49:39:ea:d4:43:8c:40:72:65:78:d4:5d:dd:eb:8a:bd:
06:b5:e1:d9:ae:0b:04:8a:2d:c3:20:28:b9:51:7a:51:2e:70:
4d:04:40:3a:6b:67:ed:e3:ec:e4:9e:01:a8:79:cd:37:2b:54:
09:1b:e6:c7:c2:85:82:77:72:a5:83:4d:79:41:fc:a8:67:7c:
4e:ca:be:92:7b:9b:83:90:54:c5:f4:bf:0a:37:bc:cd:10:a1:
57:b8:38:91:9e:43:a1:f7:6d:01:4d:37:77:e0:d8:60:69:b9:
34:a0:bd:f0:ce:33:e5:62:54:61:1a:6f:ec:15:52:f0:51:89:
c9:ae:8d:57:c8:99:84:56:67:a5:8c:09:ec:60:84:8e:4b:7d:
90:a2:c5:aa:39:d7:20:c2:90:cb:f0:fb:db:78:df:5c:81:d1:
8a:b0:49:cd:07:33:8d:e8:b3:59:af:6e:b1:2e:4b:ef:cf:67:
56:85:42:6d:19:14:53:b0:d4:d4:63:87:8c:1c:89:85:7a:fe:
1d:50:e1:b6:3a:0c:26:9a:21:ff:7a:46:a0:0a:23:fe:c4:b0:
88:e1:b2:31:ff:cf:e2:56:74:9a:29:37:7a:9c:c0:9d:19:c2:
89:e9:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:42 2025 by rpki-client