Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234302e302f32322d3232203d3e20323634333836.roa
File: 34352e362e3234302e302f32322d3232203d3e20323634333836.roa (raw, json)
Hash identifier: juruPl2kjcO73bG4/qiFRSAnEp5thNwRV1oVzqnu8Fw=
Subject key identifier: 18:44:6F:69:1F:3E:CB:07:B2:76:47:60:DA:1C:7D:87:49:1E:09:27
Certificate issuer: /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial: 46BC706FE97D9A2D318251179EA9F04110BEDFCF
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234302e302f32322d3232203d3e20323634333836.roa
Signing time: Wed 03 Apr 2024 21:32:13 +0000
ROA not before: Wed 03 Apr 2024 21:27:13 +0000
ROA not after: Wed 02 Apr 2025 21:32:13 +0000
asID: 264386
IP address blocks: 45.6.240.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:bc:70:6f:e9:7d:9a:2d:31:82:51:17:9e:a9:f0:41:10:be:df:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
Validity
Not Before: Apr 3 21:27:13 2024 GMT
Not After : Apr 2 21:32:13 2025 GMT
Subject: CN=18446F691F3ECB07B2764760DA1C7D87491E0927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:7b:42:a4:7b:33:46:04:71:3e:04:1a:77:
73:18:8f:1c:f6:68:33:74:ce:0d:fc:3c:a5:7c:65:
fa:d5:a4:52:f9:16:6d:0d:b8:c8:75:87:3a:7c:42:
e0:d4:92:2d:d8:6f:39:7f:4d:4c:e1:43:4f:23:35:
6e:db:77:c7:7d:52:a2:04:75:0b:c2:b9:6b:00:1a:
93:b3:aa:bd:de:24:80:48:06:ac:76:15:df:46:b8:
c7:2e:9c:a0:28:fd:e8:c2:18:c5:ef:ce:11:85:03:
1f:95:eb:ec:ba:b6:73:f6:b8:c3:b0:dc:c8:c6:d5:
ed:ef:05:49:bf:40:b5:2c:95:c2:66:ae:98:65:0b:
f0:e7:72:f7:14:28:8f:1a:a2:f0:5c:a7:1e:2a:9e:
0c:ff:c0:45:20:c2:a6:b4:fc:0a:45:53:a6:01:d2:
b6:f3:fa:61:70:f3:d5:cf:d1:e6:b6:dd:23:13:fe:
2e:04:d9:a1:1c:aa:3c:f4:6d:f0:04:3f:ea:fc:2a:
0a:c4:d9:04:b4:82:60:8b:69:66:4d:86:11:0e:80:
51:3f:83:6a:9d:97:3c:f9:be:62:97:cb:5f:a5:6e:
ef:7a:93:3e:75:8b:31:e6:c8:d1:52:88:1e:1f:b6:
e7:1e:c7:19:01:2a:f4:29:ee:a1:af:42:ca:19:0d:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:6F:69:1F:3E:CB:07:B2:76:47:60:DA:1C:7D:87:49:1E:09:27
X509v3 Authority Key Identifier:
keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/34352e362e3234302e302f32322d3232203d3e20323634333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.240.0/22
Signature Algorithm: sha256WithRSAEncryption
25:eb:25:b7:54:62:4d:42:e0:8a:3d:20:9d:d1:04:d8:c1:66:
4a:90:dd:26:79:d9:9b:15:a8:7b:eb:b1:50:50:cd:04:dd:36:
a1:91:66:ac:fb:46:de:11:17:5c:ac:0e:1c:1f:4f:19:e6:be:
fc:9a:ad:e5:9d:cf:31:24:17:29:fe:64:18:c6:4e:f3:06:f4:
d8:64:45:3d:df:02:75:25:8a:27:1a:98:3c:44:0e:74:d3:3e:
34:2d:7c:cc:7e:0d:4c:6e:6a:d4:f4:4a:33:31:82:c6:ca:24:
5f:53:52:2e:d8:22:13:1c:38:9f:dd:63:a2:6f:98:c7:47:a2:
d0:2a:96:c5:9c:7b:c1:d6:12:66:e9:71:98:4a:55:09:4a:67:
26:5b:28:f2:e6:84:36:65:eb:64:31:98:6f:db:03:97:b7:0c:
a8:b5:7b:55:ce:8e:2b:8c:a1:4c:bd:85:40:c5:0b:86:75:95:
ad:18:38:e5:4c:d2:43:43:d7:d2:ac:96:51:16:b8:0e:9d:c4:
3a:a7:0b:f5:fa:6a:6a:0e:03:0c:cb:60:68:c7:c9:17:71:d9:
08:73:e8:16:e2:3d:d9:0d:77:40:0e:55:c5:c0:72:70:62:3d:
64:07:89:59:7b:fe:01:0d:78:f9:ef:5d:ba:28:51:67:4a:65:
13:82:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 06:39:22 2024 by rpki-client on console-ams.rpki-client.org