Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135342e302f32342d3234203d3e203238353732.roa
File: 3230302e3139322e3135342e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier: k+MTo+rucNnhEqxxkSXCvPTxdVfIJjxY8JnP8RWgpvo=
Subject key identifier: 5F:D3:AB:02:3D:58:83:6A:61:74:00:A6:F2:BE:6B:5A:8B:03:47:CE
Certificate issuer: /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial: 0961ADCE5AAE95C519C2138394EB2DBC06C846AF
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135342e302f32342d3234203d3e203238353732.roa
Signing time: Sat 29 Jun 2024 15:32:28 +0000
ROA not before: Sat 29 Jun 2024 15:27:28 +0000
ROA not after: Sat 28 Jun 2025 15:32:28 +0000
asID: 28572
IP address blocks: 200.192.154.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:61:ad:ce:5a:ae:95:c5:19:c2:13:83:94:eb:2d:bc:06:c8:46:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Validity
Not Before: Jun 29 15:27:28 2024 GMT
Not After : Jun 28 15:32:28 2025 GMT
Subject: CN=5FD3AB023D58836A617400A6F2BE6B5A8B0347CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:c8:b5:67:22:02:7d:63:50:b7:ba:27:5a:
66:f1:43:06:f5:9b:c8:2d:9f:0b:65:35:6a:93:01:
60:d5:f6:41:d0:bd:f1:83:f1:7a:30:fc:6f:d1:70:
d8:1e:7c:1c:f6:ca:f1:51:02:47:f7:5f:4a:d2:5c:
54:71:08:01:54:06:af:9c:9e:d3:6b:28:af:54:37:
3d:d1:4e:9e:b2:24:0e:88:41:86:de:cf:35:5b:e4:
87:ad:64:d0:d9:28:08:81:9c:d9:3f:b2:41:dd:7f:
0e:6b:8a:db:5f:d8:74:15:9a:a9:fb:35:62:74:6e:
3f:8b:32:49:f1:46:4c:7a:35:f7:3c:17:3f:1e:59:
1f:0f:6b:15:9d:ac:da:32:cb:b6:75:02:d6:2d:5c:
a6:78:c9:1b:0f:d7:7c:88:55:f9:2a:f4:3e:41:ae:
9d:e1:a0:5c:9d:5d:45:94:73:12:6a:d7:31:3c:99:
25:80:8b:70:7d:e4:c8:35:ff:b1:a1:4c:b3:a9:f1:
dc:c3:bf:12:07:ea:09:45:cb:be:d6:64:25:e1:1f:
32:00:c6:5c:c3:c5:3a:12:f9:94:1a:f3:d1:93:0f:
18:72:3f:7d:2b:ec:b5:26:3f:e7:0e:5a:7a:6a:51:
70:2e:84:8a:36:5c:58:30:17:fe:64:f2:74:e6:1c:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:AB:02:3D:58:83:6A:61:74:00:A6:F2:BE:6B:5A:8B:03:47:CE
X509v3 Authority Key Identifier:
keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135342e302f32342d3234203d3e203238353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.192.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c6:95:0c:57:7a:c1:7e:da:80:3f:bc:82:65:f8:2b:7a:a6:
b4:4b:55:7e:ae:9d:d8:4c:d6:a2:6e:fa:3b:9b:b7:5b:f9:c3:
58:b9:2e:c2:34:3d:8f:40:49:d8:4b:dc:aa:6e:22:8d:c6:33:
1d:f7:49:c0:03:f3:f9:26:77:87:92:21:49:90:6e:8d:58:af:
4a:b6:64:e4:29:30:3a:1a:d1:04:d6:17:75:12:08:51:bf:c0:
47:6d:31:91:e7:d0:b0:37:2c:74:9b:34:f5:7f:16:2a:08:6e:
9a:34:4f:61:93:f2:17:93:6d:ac:90:8f:73:24:5f:8e:01:92:
15:7e:47:d3:84:52:11:81:17:9f:24:e8:f6:03:26:a5:2d:8a:
f3:9b:dc:28:0b:b6:22:d1:81:a8:da:d0:b5:02:01:40:43:79:
74:bd:1e:e8:15:15:d0:d7:4f:ce:36:c6:1d:b9:64:a9:c9:fd:
e0:13:48:56:4a:69:a2:c1:05:84:17:f6:af:4e:56:39:7e:87:
3b:79:a1:f6:20:c0:e5:5c:ce:f9:35:02:5a:36:9b:6c:38:ec:
0a:a2:3d:ab:16:a3:fa:b2:9e:f2:a6:d6:1e:ac:7c:a5:b0:14:
2d:b0:2b:5d:73:6e:d5:5a:87:96:01:3b:02:15:72:2d:d5:df:
54:5c:16:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:37:49 2024 by rpki-client on console-fra.rpki-client.org