Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32322d3234203d3e20323633333436.roa
File: 3139312e33372e302e302f32322d3234203d3e20323633333436.roa (raw, json)
Hash identifier: Yrmu7Eei3xmVqpiX6YWEyJk5ULwEDQW7yoqqL4rJRTQ=
Subject key identifier: 6F:4F:E2:7C:CD:6F:37:81:8C:E0:69:7C:87:CD:26:F4:56:5A:B4:4D
Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial: 7A34A5F8098739999E076AF357DB4B35E65E4152
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32322d3234203d3e20323633333436.roa
Signing time: Wed 05 Jun 2024 18:41:27 +0000
ROA not before: Wed 05 Jun 2024 18:36:27 +0000
ROA not after: Wed 04 Jun 2025 18:41:27 +0000
asID: 263346
IP address blocks: 191.37.0.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:34:a5:f8:09:87:39:99:9e:07:6a:f3:57:db:4b:35:e6:5e:41:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Validity
Not Before: Jun 5 18:36:27 2024 GMT
Not After : Jun 4 18:41:27 2025 GMT
Subject: CN=6F4FE27CCD6F37818CE0697C87CD26F4565AB44D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:7d:4c:de:33:93:35:ee:04:b8:e2:ab:50:
96:6f:27:ee:3d:03:13:ce:3b:5c:e9:e0:c1:ef:c7:
c0:aa:09:fc:e1:2e:01:41:1a:37:63:fd:41:b8:98:
f0:03:9b:f6:a6:e3:cd:34:a3:76:fd:99:57:d5:57:
72:4a:44:1c:fd:92:63:64:a3:c6:af:fe:a0:bb:e7:
87:e2:ca:d8:e4:24:27:fd:98:5d:b0:8c:56:aa:6b:
21:d5:b7:99:60:e1:61:62:59:7d:ae:69:8c:fe:22:
4e:d0:61:93:66:51:88:c4:99:01:c2:45:54:9a:55:
52:e3:dc:d7:bf:06:fc:c0:6b:e1:ba:b5:a0:b4:b6:
4c:f1:f8:4d:d0:65:f2:84:d1:b1:5f:82:5b:3d:c1:
b8:b3:5c:8e:c8:89:ac:c7:b3:2d:6c:39:d6:e5:99:
be:9d:2e:32:e0:7b:76:29:4b:71:1d:5a:f9:87:f7:
02:c3:8b:55:39:23:bc:20:f2:75:b8:f0:7c:be:ff:
e1:88:95:42:51:a8:21:e9:6b:89:87:a0:c7:c2:1a:
96:3a:f8:6a:ed:f3:93:6b:41:8c:28:57:d3:e4:59:
b0:6c:2e:62:7a:b8:57:9b:3f:7f:1c:be:74:00:4d:
80:50:33:3b:31:90:88:54:5f:be:5f:3a:b7:1e:72:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4F:E2:7C:CD:6F:37:81:8C:E0:69:7C:87:CD:26:F4:56:5A:B4:4D
X509v3 Authority Key Identifier:
keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e302e302f32322d3234203d3e20323633333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.0.0/22
Signature Algorithm: sha256WithRSAEncryption
65:e5:fd:aa:45:11:1e:81:17:28:23:20:37:e5:47:8b:04:a5:
d4:30:ad:08:0b:0a:99:bd:8e:fe:1f:a2:17:56:9f:85:77:bb:
38:5d:c9:b8:07:6b:e4:27:d4:b4:7c:3a:14:00:1e:f8:e0:fb:
5d:4a:df:fa:4b:6c:93:66:fd:9e:0e:0a:cf:cd:08:60:25:2a:
b4:64:fa:49:70:71:61:05:62:f8:f8:11:c6:05:86:aa:93:41:
43:ef:3d:b5:e5:d6:ae:52:8a:27:b2:a9:68:05:ba:59:a0:9b:
00:fb:58:fa:25:f4:98:e5:ec:39:d9:0e:80:87:f9:7f:17:a1:
0f:27:5a:05:47:98:e9:1b:43:ed:70:c1:05:23:ee:53:3d:c5:
bf:73:1e:cc:98:c5:1c:62:87:84:2b:18:aa:ba:69:8f:b4:27:
34:8f:2c:4f:f5:0e:f6:3f:78:50:50:50:97:43:2d:13:db:c7:
b8:47:66:48:91:98:8b:45:9a:1f:60:c4:9b:a7:d1:2f:dd:a9:
2f:d0:25:59:8b:51:0d:e0:73:3f:d7:29:37:48:96:d6:37:95:
7a:e1:e5:ee:c9:66:12:fb:5b:fb:bf:7a:2c:3c:7e:36:92:a8:
34:d5:1f:24:52:ad:9d:05:54:15:63:74:9d:ce:1a:6c:3b:f3:
74:e9:36:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:38 2025 by rpki-client