Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135352e302f32342d3234203d3e203238353732.roa
File: 3230302e3139322e3135352e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier: AVdVejwCjgdKRpJ7GT6Pw1WLmU6LCUOkygcvWL2l+4w=
Subject key identifier: 5D:D3:4A:81:97:D6:33:B8:1F:90:30:77:D4:9A:A6:D5:11:2D:F9:32
Certificate issuer: /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial: 1A7CFD43266C440C2ACA0DB4B36361321E89F94D
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135352e302f32342d3234203d3e203238353732.roa
Signing time: Sat 29 Jun 2024 15:32:30 +0000
ROA not before: Sat 29 Jun 2024 15:27:30 +0000
ROA not after: Sat 28 Jun 2025 15:32:30 +0000
asID: 28572
IP address blocks: 200.192.155.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7c:fd:43:26:6c:44:0c:2a:ca:0d:b4:b3:63:61:32:1e:89:f9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Validity
Not Before: Jun 29 15:27:30 2024 GMT
Not After : Jun 28 15:32:30 2025 GMT
Subject: CN=5DD34A8197D633B81F903077D49AA6D5112DF932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e6:2b:9f:32:49:fc:de:dc:9e:1c:0b:6d:56:
7e:45:2e:ca:7b:43:c5:cc:06:8e:e3:02:a0:f3:de:
39:a3:da:fa:eb:f3:05:92:93:6b:a5:1b:44:75:f6:
74:2f:19:c9:ad:e9:3f:25:e6:3f:64:2a:c5:62:12:
14:88:f3:76:f6:de:30:d2:57:0b:f1:3b:19:82:93:
ee:45:97:cb:a5:3a:72:6c:4c:1d:c0:64:86:ef:c0:
52:08:a1:2d:07:29:07:6d:2d:7b:7b:a4:3a:a1:f2:
7c:2c:06:33:4f:30:0b:5c:9a:aa:1d:e8:d0:39:81:
6b:bb:5e:47:a7:7c:dd:12:03:d1:29:82:e5:75:06:
0f:d0:db:5b:cc:de:68:74:b3:45:f0:3b:47:54:aa:
f7:92:b1:8c:f5:df:ee:1a:f5:35:31:f1:a6:b5:39:
53:35:26:d1:1e:6f:ed:8c:7a:dd:d9:17:fc:32:7d:
f8:17:08:b6:bc:4f:83:8b:19:31:f5:07:7d:41:0e:
08:82:ef:12:77:21:f0:36:d2:78:4c:2f:3f:9d:96:
28:28:af:ad:88:27:88:7e:91:57:33:0e:e2:58:72:
3d:58:cd:ff:e1:92:53:73:4e:0f:83:e7:28:cd:b3:
e9:a0:c1:e6:e1:04:56:e0:7a:7e:f1:ae:a9:fc:2b:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:4A:81:97:D6:33:B8:1F:90:30:77:D4:9A:A6:D5:11:2D:F9:32
X509v3 Authority Key Identifier:
keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135352e302f32342d3234203d3e203238353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.192.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c8:6e:e7:ed:d1:8a:61:4a:82:a1:35:cd:4f:36:c3:65:4b:
3d:8a:57:5a:4d:c9:d8:52:9c:7b:5d:2f:e0:48:af:82:32:5b:
57:9d:66:d9:e0:7a:1b:c1:25:76:df:04:55:30:93:ab:07:8b:
1f:de:18:e6:ae:2c:9c:c6:45:bc:65:8e:9f:e7:73:ed:e3:2d:
9d:16:df:82:bb:0f:f7:c8:a2:d6:7a:6a:ab:61:ed:3d:47:e0:
e4:58:9b:5c:5b:e9:55:12:5c:b3:98:bf:03:6c:4d:59:6e:80:
22:99:0c:56:f4:5e:68:67:10:d5:c6:3d:db:d4:fd:56:22:fe:
f0:bb:af:09:28:07:50:1c:70:cb:ea:ee:40:74:57:9c:c4:24:
f6:6c:4f:30:52:25:4b:96:32:e9:8d:af:a7:fe:7a:87:15:10:
6d:dd:17:d0:45:f7:6d:dc:f2:22:51:a8:c5:6e:74:ab:93:c3:
79:e5:5d:90:4e:a9:b0:8e:b9:b8:24:08:c8:21:c4:01:08:07:
21:cd:76:c3:16:df:bf:b3:be:6a:65:43:d4:34:22:cd:6e:f7:
0b:d8:6f:aa:8a:ac:30:11:b2:f2:ce:af:25:41:e6:40:67:ab:
11:92:05:ed:d5:72:a4:de:03:57:f2:8c:63:ab:df:8e:f1:8a:
ff:31:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:50:06 2025 by rpki-client