Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/3138312e3233322e3232382e302f32322d3332203d3e20323731353737.roa
File: 3138312e3233322e3232382e302f32322d3332203d3e20323731353737.roa (raw, json)
Hash identifier: FyAOXIUy4A30bsuJkrfnYu+ZkUMGjqJPXRUiKL+eOsU=
Subject key identifier: 84:E9:A3:0F:86:F0:D3:4D:06:EC:67:99:B0:D6:DF:0A:7C:9E:C8:F0
Certificate issuer: /CN=F123104F555ACBDED882CABD933FE8C954781940
Certificate serial: 06E5DCF1772035CCF90BAAF2BCE2C276A628CD98
Authority key identifier: F1:23:10:4F:55:5A:CB:DE:D8:82:CA:BD:93:3F:E8:C9:54:78:19:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F123104F555ACBDED882CABD933FE8C954781940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/3138312e3233322e3232382e302f32322d3332203d3e20323731353737.roa
Signing time: Mon 09 Sep 2024 17:30:13 +0000
ROA not before: Mon 09 Sep 2024 17:25:13 +0000
ROA not after: Mon 08 Sep 2025 17:30:13 +0000
asID: 271577
IP address blocks: 181.232.228.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e5:dc:f1:77:20:35:cc:f9:0b:aa:f2:bc:e2:c2:76:a6:28:cd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F123104F555ACBDED882CABD933FE8C954781940
Validity
Not Before: Sep 9 17:25:13 2024 GMT
Not After : Sep 8 17:30:13 2025 GMT
Subject: CN=84E9A30F86F0D34D06EC6799B0D6DF0A7C9EC8F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:3f:b2:57:6c:c4:20:11:30:f2:1d:f8:60:
4a:77:59:27:6d:7e:6d:46:d3:c8:e5:b8:ea:cd:bb:
43:d8:91:d7:ff:39:78:e0:f5:61:df:6f:e4:4d:cc:
4a:2e:60:75:58:80:2d:07:a4:73:87:61:77:d6:c1:
0c:6f:7e:6f:d1:d0:87:e3:2b:22:e9:66:c8:6e:9a:
3f:61:51:57:e6:b1:0c:cb:ad:a3:1f:2f:f8:97:d0:
5d:93:f4:b9:ff:5c:1a:cf:57:76:91:cb:48:ca:cb:
c0:a9:ce:36:09:7f:b1:2b:2c:4e:b3:68:31:5d:6e:
79:3b:f2:cf:2c:b0:e1:ba:53:a0:37:2b:fe:67:e4:
2e:46:19:bc:8e:c9:64:10:24:79:f9:f3:bb:fd:2f:
28:d2:be:65:c3:23:dd:a1:d4:cd:f7:2f:c5:30:90:
27:30:3a:6b:f8:ba:f1:e8:b1:78:d8:09:e3:a2:31:
f5:88:04:47:ec:e7:bd:23:14:3c:8e:4b:5d:b8:8b:
4b:a7:0a:3d:5c:a0:f1:33:cd:83:83:4a:8c:c3:4a:
40:a5:15:3c:4e:41:40:b1:2b:c2:40:8d:6a:16:01:
1a:1c:61:36:95:43:5d:7f:5e:f3:e3:08:89:96:93:
55:af:c2:bb:7c:c9:91:52:82:d3:40:e1:91:2e:98:
38:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E9:A3:0F:86:F0:D3:4D:06:EC:67:99:B0:D6:DF:0A:7C:9E:C8:F0
X509v3 Authority Key Identifier:
keyid:F1:23:10:4F:55:5A:CB:DE:D8:82:CA:BD:93:3F:E8:C9:54:78:19:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/F123104F555ACBDED882CABD933FE8C954781940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F123104F555ACBDED882CABD933FE8C954781940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/3138312e3233322e3232382e302f32322d3332203d3e20323731353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.232.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:3e:5a:d7:a5:e7:62:e5:1a:dd:a8:b6:d9:11:48:8e:88:1f:
75:83:de:12:41:f8:ea:84:be:9c:54:c3:68:21:e7:46:3d:2e:
df:9b:68:56:41:d3:94:3e:cb:a7:26:37:84:a5:c1:bb:a9:46:
76:d6:87:d9:ed:57:4c:7d:2e:c7:f6:54:a8:a3:41:a9:d1:6d:
08:7f:e6:79:0c:2d:60:80:76:6a:76:64:d4:ad:50:25:1f:93:
32:5f:48:7f:ab:69:fb:2d:f8:0a:de:4b:d1:e1:3f:24:5a:2e:
ce:09:9c:16:11:d7:41:8a:07:18:3c:28:f4:3f:8f:64:23:4a:
a4:af:f0:fb:99:86:f2:75:09:a9:83:9a:e0:4d:99:23:4c:76:
22:f1:5e:aa:c8:06:9d:25:fc:34:af:dd:a6:d1:80:83:b4:6c:
fe:44:94:ef:d8:d7:93:76:64:b2:9e:e0:79:e2:a6:fd:57:21:
aa:83:1b:6e:1c:d5:cb:78:9d:1b:c1:fe:a7:d2:c8:74:59:61:
40:a3:49:f0:44:46:6c:aa:43:78:bc:62:98:55:c8:6b:dd:29:
c4:21:ff:1f:47:5a:a8:c1:c9:a3:f9:45:ae:83:c8:00:7a:02:
e0:dc:99:11:dd:02:70:3c:c3:e5:2f:2a:f0:b1:e7:75:25:45:
3a:28:87:2b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBuXc8XcgNcz5C6ryvOLCdqYozZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEyMzEwNEY1NTVBQ0JERUQ4ODJDQUJEOTMzRkU4Qzk1
NDc4MTk0MDAeFw0yNDA5MDkxNzI1MTNaFw0yNTA5MDgxNzMwMTNaMDMxMTAvBgNV
BAMTKDg0RTlBMzBGODZGMEQzNEQwNkVDNjc5OUIwRDZERjBBN0M5RUM4RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42D+yV2zEIBEw8h34YEp3WSdt
fm1G08jluOrNu0PYkdf/OXjg9WHfb+RNzEouYHVYgC0HpHOHYXfWwQxvfm/R0Ifj
KyLpZshumj9hUVfmsQzLraMfL/iX0F2T9Ln/XBrPV3aRy0jKy8CpzjYJf7ErLE6z
aDFdbnk78s8ssOG6U6A3K/5n5C5GGbyOyWQQJHn587v9LyjSvmXDI92h1M33L8Uw
kCcwOmv4uvHosXjYCeOiMfWIBEfs570jFDyOS124i0unCj1coPEzzYODSozDSkCl
FTxOQUCxK8JAjWoWARocYTaVQ11/XvPjCImWk1Wvwrt8yZFSgtNA4ZEumDh3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhOmjD4bw000G7GeZsNbfCnyeyPAwHwYDVR0j
BBgwFoAU8SMQT1Vay97Ygsq9kz/oyVR4GUAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXpmOXR5MUN1eTZ2U3h2UjdRWlh6QmRMeTRrMjV3SjZkSFROeDE4TDFZ
bjEvMC9GMTIzMTA0RjU1NUFDQkRFRDg4MkNBQkQ5MzNGRThDOTU0NzgxOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxMjMxMDRGNTU1QUNCREVE
ODgyQ0FCRDkzM0ZFOEM5NTQ3ODE5NDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V6Zjl0eTFDdXk2dlN4dlI3UVpYekJkTHk0azI1d0o2ZEhUTngxOEwxWW4xLzAv
MzEzODMxMmUzMjMzMzIyZTMyMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMTM1MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArXo5DANBgkqhkiG9w0BAQsFAAOCAQEAfD5a
16XnYuUa3ai22RFIjogfdYPeEkH46oS+nFTDaCHnRj0u35toVkHTlD7LpyY3hKXB
u6lGdtaH2e1XTH0ux/ZUqKNBqdFtCH/meQwtYIB2anZk1K1QJR+TMl9If6tp+y34
Ct5L0eE/JFouzgmcFhHXQYoHGDwo9D+PZCNKpK/w+5mG8nUJqYOa4E2ZI0x2IvFe
qsgGnSX8NK/dptGAg7Rs/kSU79jXk3Zksp7geeKm/VchqoMbbhzVy3idG8H+p9LI
dFlhQKNJ8ERGbKpDeLximFXIa90pxCH/H0daqMHJo/lFroPIAHoC4NyZEd0CcDzD
5S8q8LHndSVFOiiHKw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:58:41 2025 by rpki-client