Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/3136382e3139342e3137372e302f32342d3234203d3e20323635343030.roa
File: 3136382e3139342e3137372e302f32342d3234203d3e20323635343030.roa (raw, json)
Hash identifier: z6oV/gMqT2STMdXHdvo/GdMo3HhkUqk90f/n0NpxFGc=
Subject key identifier: 20:CE:55:44:29:09:64:90:58:37:AD:7C:A5:68:FF:9C:E1:E9:DF:60
Certificate issuer: /CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
Certificate serial: 58829F6C3B5B4C7BB19A455DF74745DBB91280D9
Authority key identifier: 51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/3136382e3139342e3137372e302f32342d3234203d3e20323635343030.roa
Signing time: Fri 28 Mar 2025 17:04:34 +0000
ROA not before: Fri 28 Mar 2025 16:59:34 +0000
ROA not after: Fri 27 Mar 2026 17:04:34 +0000
asID: 265400
IP address blocks: 168.194.177.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:82:9f:6c:3b:5b:4c:7b:b1:9a:45:5d:f7:47:45:db:b9:12:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
Validity
Not Before: Mar 28 16:59:34 2025 GMT
Not After : Mar 27 17:04:34 2026 GMT
Subject: CN=20CE5544290964905837AD7CA568FF9CE1E9DF60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:cd:42:0a:65:6e:0b:43:e9:16:11:f2:a3:
97:e3:fc:f8:be:ea:35:a7:ed:4c:7e:33:c7:b6:5a:
ac:6f:ba:53:aa:4d:b2:1b:1e:bc:2b:98:2a:01:fb:
4f:eb:f8:e3:18:49:a4:74:55:94:22:48:d1:8a:af:
dc:48:41:5a:f8:4d:89:d1:3f:15:85:4b:17:c1:17:
59:7c:f5:ab:bb:32:27:38:bb:57:9d:9c:aa:c1:90:
87:63:b7:c7:e0:2b:6c:18:0f:fe:cf:6c:c0:c0:35:
43:37:c9:b5:f8:71:5e:d9:5b:95:9c:3e:88:ef:ea:
02:ba:8a:c4:c8:b0:0e:2d:fc:5d:6b:82:a5:ae:7e:
7b:d2:17:7b:c1:9f:cb:24:61:44:ab:b0:12:6f:9e:
83:fb:9d:1b:0f:2f:14:61:2e:98:a3:e3:89:2e:8c:
dd:09:a2:ae:26:e9:07:c0:15:2d:43:10:01:4b:b0:
6f:a7:01:92:56:3b:91:08:f4:6c:11:84:55:42:1a:
e0:30:83:c0:c6:e4:27:c4:ff:1f:69:4c:55:7b:b2:
fa:c2:56:e9:2c:c2:a0:72:de:2e:ef:1c:0e:79:f2:
74:f2:e9:b1:2f:6a:33:57:e6:49:62:fb:ad:e7:23:
4c:bd:43:83:c7:ef:34:dc:dc:ab:8e:81:ab:75:69:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:55:44:29:09:64:90:58:37:AD:7C:A5:68:FF:9C:E1:E9:DF:60
X509v3 Authority Key Identifier:
keyid:51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/3136382e3139342e3137372e302f32342d3234203d3e20323635343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.177.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:04:54:2e:b2:8d:c3:a1:4e:62:11:8c:b4:fd:c5:5d:60:a3:
8e:75:8c:5d:55:6e:a0:1f:ec:2c:e7:ef:10:7c:53:62:60:aa:
36:6a:14:3c:f9:e0:ce:63:65:86:3a:36:50:e4:f7:a7:e6:26:
4c:57:2c:53:ba:62:3a:d9:af:61:13:95:64:ea:65:5f:30:6d:
63:c9:e9:32:bb:aa:f3:eb:4e:97:cf:ca:e2:d8:d1:96:24:a4:
2d:2c:56:b2:9f:92:d2:96:b9:a2:0c:fe:ae:3d:b5:32:c0:f0:
00:7b:47:95:62:48:99:f9:84:d1:23:9f:35:cd:21:74:3d:a2:
a7:b6:e0:32:f5:65:d8:89:6c:bf:eb:da:29:17:75:e4:66:64:
57:90:b4:87:5b:d4:9a:41:bb:f4:49:6b:66:4f:95:37:70:54:
42:4c:b9:c7:a3:1f:8b:21:ea:6f:cc:2d:86:48:52:ef:96:a8:
de:9a:0c:be:6a:7a:14:c4:7e:68:ec:d7:fb:85:0d:b9:8e:b2:
3f:fe:ee:ce:e0:ab:a5:58:d7:04:14:35:ed:d9:18:f1:4c:cd:
e9:c7:8f:f9:6a:8c:89:93:3c:f0:b0:3b:44:27:de:61:91:6c:
11:5d:7d:98:94:1a:29:d2:0c:93:34:7f:08:ee:8c:90:f3:c6:
e9:9b:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:57:53 2025 by rpki-client