Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32322d3232203d3e20323633333436.roa
File: 3139312e33372e302e302f32322d3232203d3e20323633333436.roa (raw, json)
Hash identifier: N9D5L2Jc7UaJ5eGGw6jtFhur1bYqxIfxoAD5sAlDsLU=
Subject key identifier: C1:45:2F:EC:94:27:8C:7E:58:92:68:8D:CE:84:03:22:03:BF:40:C2
Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial: 2D7EF0C463AAF67EF06A7D1A32ABF5919BF20EDF
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32322d3232203d3e20323633333436.roa
Signing time: Tue 23 Apr 2024 18:49:33 +0000
ROA not before: Tue 23 Apr 2024 18:44:33 +0000
ROA not after: Tue 22 Apr 2025 18:49:33 +0000
asID: 263346
IP address blocks: 191.37.0.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:7e:f0:c4:63:aa:f6:7e:f0:6a:7d:1a:32:ab:f5:91:9b:f2:0e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Validity
Not Before: Apr 23 18:44:33 2024 GMT
Not After : Apr 22 18:49:33 2025 GMT
Subject: CN=C1452FEC94278C7E5892688DCE84032203BF40C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:d0:1c:a4:41:31:49:c5:63:d9:63:15:ee:
0d:84:61:b7:5a:ed:af:fa:c1:9b:c9:65:8f:79:df:
e9:f8:8f:a9:9e:b8:c9:09:3f:33:76:71:ec:57:53:
bb:30:be:15:0f:19:1d:5a:13:1a:d2:29:e7:85:fd:
ff:21:26:1e:02:55:f4:7f:83:fb:20:ce:e1:97:01:
41:55:eb:00:58:ae:a7:83:f2:22:3d:94:69:53:b9:
e4:d2:7f:a0:70:d5:ed:91:1f:59:47:a7:0e:d2:b1:
68:40:f3:75:a4:f3:0d:aa:2c:7e:5b:52:0d:dc:96:
49:b3:16:58:88:78:c7:d9:60:cd:34:34:b3:ee:b5:
48:ef:4b:d3:3d:bd:2d:f8:79:a4:d5:af:6c:c0:12:
06:ba:92:3d:75:68:3f:35:12:80:5f:f3:fd:fb:51:
05:b5:2b:c1:06:98:60:89:85:97:9e:f3:76:89:c7:
0b:fb:43:51:07:f6:ec:bf:93:e0:49:56:e1:a8:73:
ed:57:7d:fb:ca:31:c9:c3:8b:d2:32:64:82:32:d6:
78:73:fd:8d:ca:0f:17:16:2d:a3:0e:31:aa:d9:52:
10:44:3c:04:1f:0a:e8:de:1c:91:d4:ac:97:eb:20:
67:5d:f6:4d:c7:ac:d0:d9:e1:28:3c:53:81:cb:d8:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:45:2F:EC:94:27:8C:7E:58:92:68:8D:CE:84:03:22:03:BF:40:C2
X509v3 Authority Key Identifier:
keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32322d3232203d3e20323633333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:fd:b9:91:3c:2a:f6:47:3b:54:5c:4e:60:5a:f9:65:a8:13:
65:87:a6:0b:17:b0:ac:e5:e5:1e:ed:4c:2f:58:d2:52:1d:71:
c1:5a:ae:b3:ff:9e:99:cd:3e:88:ef:f2:54:fa:25:19:87:3d:
a7:f0:ba:70:83:60:d2:aa:a3:23:67:52:da:89:b5:50:29:67:
df:d7:73:5e:4e:d3:b6:77:72:ca:cd:4c:e5:ea:7b:d9:e0:f6:
99:32:36:cd:b6:54:74:81:7d:87:82:40:81:2c:4d:56:9f:a6:
eb:ec:21:c1:14:a5:63:14:49:b3:55:c3:67:c5:0d:3d:37:79:
10:27:6f:d4:91:2a:f5:a7:09:42:01:56:00:36:20:97:c4:cc:
da:ec:6c:65:45:b9:b5:ba:f3:c8:6c:14:b5:cc:f5:c4:c1:35:
85:8a:04:95:a1:36:ad:91:be:ec:ce:75:2d:5f:6a:0e:ce:62:
1e:95:59:60:af:55:4b:33:3e:f0:e7:0b:b6:5d:cb:b4:a4:44:
16:ff:18:f8:64:f8:e2:fd:92:8c:2b:27:83:1e:4f:26:72:e9:
74:04:59:8a:06:4b:c2:da:96:a7:ca:9e:6c:ff:03:a6:d8:52:
d6:b2:30:d2:7a:61:7c:b4:54:b9:87:3c:9e:ef:04:e3:24:6e:
91:24:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:32 2025 by rpki-client