Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33322e302f32302d3234203d3e203238323233.roa
File: 3138392e3132362e33322e302f32302d3234203d3e203238323233.roa (raw, json)
Hash identifier: rmxno0HqbYp4VX1SGkZoqvmmVC0nH3isiCzGITmpJv8=
Subject key identifier: A6:50:A3:91:13:98:6B:F2:FE:B3:10:C5:86:87:80:06:06:1A:97:21
Certificate issuer: /CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
Certificate serial: 230918C5EE6039500AE4E36357EF079B002A3935
Authority key identifier: 87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33322e302f32302d3234203d3e203238323233.roa
Signing time: Thu 04 Apr 2024 00:27:44 +0000
ROA not before: Thu 04 Apr 2024 00:22:44 +0000
ROA not after: Thu 03 Apr 2025 00:27:44 +0000
asID: 28223
IP address blocks: 189.126.32.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:09:18:c5:ee:60:39:50:0a:e4:e3:63:57:ef:07:9b:00:2a:39:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
Validity
Not Before: Apr 4 00:22:44 2024 GMT
Not After : Apr 3 00:27:44 2025 GMT
Subject: CN=A650A39113986BF2FEB310C586878006061A9721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:e8:ca:59:8c:f7:c8:b0:f6:d4:78:9f:bd:
85:d2:da:6e:38:72:ea:cc:fc:09:08:38:5d:1e:7d:
98:29:e2:ac:5f:bb:96:cb:e0:61:8d:ab:40:a4:f1:
b8:18:2a:5c:12:e8:46:40:90:51:c5:85:60:51:74:
08:b8:79:7e:01:2f:d1:a8:81:bb:16:04:a2:86:a5:
49:6d:ca:4e:ec:28:16:ab:90:2c:dd:b5:6f:c9:83:
03:86:99:25:8d:4f:6e:be:2f:5e:27:fd:60:c4:ad:
d2:23:46:7a:98:c8:e5:56:fb:66:fa:a4:bd:9c:51:
44:32:28:82:aa:71:4c:58:e7:16:5c:c0:79:58:8a:
73:e6:50:6c:07:e0:d8:ce:91:7d:12:49:4a:dd:1e:
e5:3f:5a:a1:f1:89:60:b1:0f:46:23:19:c8:03:d3:
68:40:8c:b3:ba:76:39:23:1d:63:63:1a:34:f1:19:
9b:a3:ab:a2:71:b9:93:fb:cf:08:ae:13:f1:8c:9e:
d0:98:5d:88:59:e0:25:de:dc:b4:0b:ff:28:cf:69:
b3:2e:6a:90:c3:5a:e0:c2:d5:96:ca:21:be:98:59:
68:b5:cf:59:fe:0d:1f:f8:b4:80:02:4b:9d:52:31:
18:bd:36:5a:55:e4:80:56:40:ad:47:b0:40:80:e0:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:A3:91:13:98:6B:F2:FE:B3:10:C5:86:87:80:06:06:1A:97:21
X509v3 Authority Key Identifier:
keyid:87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33322e302f32302d3234203d3e203238323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.32.0/20
Signature Algorithm: sha256WithRSAEncryption
41:d2:4a:49:90:44:2b:e1:81:a1:e9:cd:ed:09:7a:91:cf:2c:
7d:4f:ac:b1:41:e3:6f:4f:fb:97:db:f5:f3:22:4d:8b:f3:c7:
4c:6a:fc:bc:f3:67:76:8e:da:80:a0:04:6e:9a:06:b2:db:32:
48:c4:54:36:f8:22:55:0f:f4:44:ce:d5:90:fb:94:66:25:7b:
a2:93:a6:e9:35:63:9a:fc:8d:25:c7:ba:0c:fd:ae:3a:14:3b:
04:ec:cb:43:bd:1c:37:de:d8:fc:c5:d8:af:83:ee:a9:b0:0f:
e1:71:2f:e4:1b:29:4e:05:3d:a9:0d:e8:12:85:c7:5b:0b:4f:
77:15:53:d5:1d:6a:16:1f:82:be:87:f1:0d:51:a1:bf:10:20:
9d:71:e6:57:6e:20:fd:a8:30:4f:93:07:b6:ea:fc:65:8e:84:
67:66:b8:94:64:25:e8:3e:31:6f:1d:8e:da:ab:38:78:59:12:
26:0a:cf:66:b5:ce:d3:3b:11:f3:16:e3:23:d8:c6:fd:5e:30:
76:31:19:36:52:43:59:c6:70:c7:b6:f1:35:9b:59:3f:2c:ff:
c0:26:93:89:9b:00:f2:d9:b6:e0:c1:cf:3d:5d:9d:f3:c2:94:
e2:ea:bb:fc:db:4c:0a:d0:82:00:3c:26:19:fe:d5:83:35:05:
ab:6a:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org