Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/3136382e3139342e3137392e302f32342d3234203d3e20323635343030.roa
File: 3136382e3139342e3137392e302f32342d3234203d3e20323635343030.roa (raw, json)
Hash identifier: iLKUchBKpmxBeowJn5Ub8jao+zHWi18ErIsU6lLm8T4=
Subject key identifier: 65:E6:79:F5:63:9B:84:34:34:3A:44:C3:78:1F:8C:DE:FE:4D:E8:4A
Certificate issuer: /CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
Certificate serial: 7E1162CADD0982025A5024EB28480158273D0C74
Authority key identifier: 51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/3136382e3139342e3137392e302f32342d3234203d3e20323635343030.roa
Signing time: Fri 26 Apr 2024 16:49:47 +0000
ROA not before: Fri 26 Apr 2024 16:44:47 +0000
ROA not after: Fri 25 Apr 2025 16:49:47 +0000
asID: 265400
IP address blocks: 168.194.179.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:11:62:ca:dd:09:82:02:5a:50:24:eb:28:48:01:58:27:3d:0c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
Validity
Not Before: Apr 26 16:44:47 2024 GMT
Not After : Apr 25 16:49:47 2025 GMT
Subject: CN=65E679F5639B8434343A44C3781F8CDEFE4DE84A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:cf:1e:60:15:78:5c:7a:f9:1f:28:08:e6:
a4:84:8a:54:d6:50:6c:3c:62:5d:47:dc:bd:95:bb:
c8:40:75:9b:1a:71:f3:12:0c:28:f7:47:9e:ef:df:
4e:b1:9c:ea:6c:0c:38:d2:5d:92:f4:2b:54:8b:15:
5d:6f:bd:09:a8:02:c4:41:81:2a:f9:9c:c7:fd:20:
9a:b5:bb:10:8c:7b:fa:9c:72:e8:50:f1:44:91:6a:
7d:2f:28:04:9c:55:53:e1:a5:fb:dd:11:3e:b5:63:
19:e0:8c:59:bb:95:b2:2d:cd:8c:30:52:2a:d5:72:
63:af:45:89:09:20:99:f2:61:11:10:64:e0:1c:ed:
7f:4a:57:58:6b:00:36:1c:98:f6:99:c9:5a:66:03:
8f:a3:fc:57:49:fc:21:63:44:4a:6e:c1:13:61:90:
6b:94:57:06:2c:dd:aa:97:c9:de:ad:a2:00:5d:2d:
65:83:ee:15:9e:06:be:44:71:6c:b1:84:f3:fc:0c:
f4:47:90:2b:3b:0b:9c:9e:94:d2:06:6c:41:64:ff:
3e:d6:fe:cf:2c:64:a7:2c:e4:c9:1e:e6:e9:1e:81:
ac:1e:d4:e5:5c:e2:7e:8f:b5:53:94:ec:c0:e7:67:
b8:b2:18:13:dc:d1:58:64:47:e9:20:c9:73:84:98:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:79:F5:63:9B:84:34:34:3A:44:C3:78:1F:8C:DE:FE:4D:E8:4A
X509v3 Authority Key Identifier:
keyid:51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/3136382e3139342e3137392e302f32342d3234203d3e20323635343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.179.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ee:cf:cd:85:6f:b8:74:a5:c0:e4:70:55:34:13:b7:ef:67:
a6:fa:6b:f3:04:15:59:3f:e4:15:81:88:f7:d3:33:12:3d:30:
da:ac:ec:05:1a:84:cb:ce:a0:51:7d:2d:9b:fe:bd:16:ed:10:
3a:a9:c6:92:b2:ba:bf:08:48:12:73:b2:66:e4:74:6c:cf:f3:
c7:53:6f:84:62:ac:03:33:7e:35:69:24:a0:36:11:5b:a2:2b:
e1:8f:f8:39:14:09:2b:ca:02:15:d2:17:19:f4:20:13:c2:74:
e8:0f:71:1b:a8:24:7a:d9:61:99:08:ac:f4:e9:eb:0f:56:4e:
60:a2:2b:78:27:e4:5b:3e:b4:9a:42:e1:b1:9a:dd:11:d5:8d:
93:83:7a:26:61:49:12:5c:31:95:6e:57:25:2e:af:23:9f:df:
0e:39:9c:61:76:d8:8f:03:5b:8b:f8:b9:c8:08:64:ee:e0:01:
fd:86:78:78:e6:90:bd:7d:1c:30:96:0d:55:c6:71:95:b0:9d:
62:2c:4f:c2:12:65:92:f8:b0:a0:50:ec:c3:85:d9:f8:d4:99:
21:44:f7:d4:13:67:41:c8:11:a9:74:3d:e1:33:cb:3d:36:84:
fa:03:bc:ae:e1:dc:79:84:d8:c7:06:8c:4a:20:dd:b2:bb:d4:
72:78:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org