Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3133382e39342e3131362e302f32322d3332203d3e203532363132.roa
File: 3133382e39342e3131362e302f32322d3332203d3e203532363132.roa (raw, json)
Hash identifier: EADFXrsz8jbE4ER7yji2mcTKdieIWENMTH6/9QIk28U=
Subject key identifier: AF:3F:7D:03:08:23:EF:D2:C7:A2:91:33:EE:96:FA:22:7D:13:C8:8A
Certificate issuer: /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial: 584FA93182D20ECC87EB9AFC604BD8D65F4FC881
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3133382e39342e3131362e302f32322d3332203d3e203532363132.roa
Signing time: Mon 06 May 2024 17:05:27 +0000
ROA not before: Mon 06 May 2024 17:00:27 +0000
ROA not after: Mon 05 May 2025 17:05:27 +0000
asID: 52612
IP address blocks: 138.94.116.0/22 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4f:a9:31:82:d2:0e:cc:87:eb:9a:fc:60:4b:d8:d6:5f:4f:c8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Validity
Not Before: May 6 17:00:27 2024 GMT
Not After : May 5 17:05:27 2025 GMT
Subject: CN=AF3F7D030823EFD2C7A29133EE96FA227D13C88A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:dd:b0:b5:2b:2f:08:15:e6:30:dc:84:52:
2f:c8:26:e8:1f:0d:ef:30:9f:e8:41:93:4a:8e:e4:
79:6b:57:1f:4d:0f:4f:1f:c4:a4:32:13:59:1e:87:
23:0f:19:65:26:5e:f6:83:95:52:42:89:15:61:e3:
5f:4d:22:47:d7:41:93:22:04:d5:e2:9d:b9:6a:ec:
27:83:9a:6e:c4:17:5c:77:72:3c:fe:96:0e:f7:fc:
1d:6d:56:3d:66:6f:3d:c8:ac:f3:80:08:b5:5b:17:
bf:a9:40:4d:d5:83:a3:63:c8:da:1c:48:e0:7c:74:
0c:02:69:54:68:df:da:d0:b4:d4:30:66:b2:7a:32:
db:4b:2e:64:5d:86:94:65:16:2a:cb:dd:5f:4f:fd:
6d:ae:24:09:32:5f:6f:c4:f8:79:43:2d:18:b5:4e:
95:ea:c3:78:07:47:52:db:5c:12:69:f3:4e:ad:87:
d2:d6:c5:1b:5d:6d:9a:f7:5d:40:fd:cd:57:8d:f7:
94:d3:b8:79:dc:4f:cb:2a:a7:1c:96:70:44:60:e6:
76:65:52:40:67:f2:bd:30:8d:f2:53:62:78:55:c3:
e4:7f:d9:5c:77:4c:44:d5:65:82:65:6d:c3:fa:c2:
6e:93:50:bd:7d:93:e6:fa:cb:e2:8f:7c:fd:df:e7:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:7D:03:08:23:EF:D2:C7:A2:91:33:EE:96:FA:22:7D:13:C8:8A
X509v3 Authority Key Identifier:
keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3133382e39342e3131362e302f32322d3332203d3e203532363132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:e0:af:15:b4:ea:33:8e:a0:e3:5c:b3:89:e8:e3:38:ba:bc:
ef:3b:85:18:4c:0e:90:53:47:5d:94:40:e4:61:49:b4:c1:25:
41:68:77:23:8e:81:32:30:eb:14:64:3a:21:4c:13:63:66:50:
d5:1a:dc:ff:b7:43:08:47:75:b1:4a:b0:00:27:ca:b5:46:c0:
e6:e3:2b:bc:a5:9b:cc:13:f2:ad:c8:15:36:03:9f:09:14:85:
27:4f:39:55:67:6b:d8:9a:bd:74:86:4d:9c:2e:27:f2:33:92:
3c:d3:e9:dd:0f:e5:92:6d:5c:6b:b4:29:75:7b:1f:ae:f2:57:
c9:25:3b:23:db:40:92:63:0d:1d:c5:0a:ef:11:44:15:a7:37:
7e:df:f8:7f:5a:b7:5e:da:27:da:11:e9:29:db:d5:33:25:1b:
8f:0b:c0:f1:9b:6b:98:32:48:bd:a8:1d:0a:93:f7:ea:1f:b7:
8d:ac:e0:12:4e:84:11:9a:78:d3:e4:33:e2:9f:b5:2e:b2:2b:
91:86:ec:8e:fa:9f:06:38:af:33:68:32:f9:8f:fd:d2:af:66:
be:f4:f8:c6:68:b4:d3:c1:d2:b3:93:39:54:35:91:45:a8:a5:
35:00:bd:6c:2f:a1:3d:75:6e:26:c1:35:3f:40:5b:82:cf:8b:
78:3b:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:53 2025 by rpki-client