Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/3138362e3139352e3136382e302f32322d3234203d3e20323632373338.roa
File: 3138362e3139352e3136382e302f32322d3234203d3e20323632373338.roa (raw, json)
Hash identifier: gd9eCT45ma06ILxIsfJDbmF1504Jx/gv3TxluDyc5YQ=
Subject key identifier: CE:63:0D:B8:88:B0:2E:82:AB:3E:CC:0F:6D:AA:82:D1:2F:BF:C3:B2
Certificate issuer: /CN=A50362E1730E440E6BA771E7529DAB6A4505D5B0
Certificate serial: 6E125741F9F61202AC0E95A46336A744608BD57C
Authority key identifier: A5:03:62:E1:73:0E:44:0E:6B:A7:71:E7:52:9D:AB:6A:45:05:D5:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A50362E1730E440E6BA771E7529DAB6A4505D5B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/3138362e3139352e3136382e302f32322d3234203d3e20323632373338.roa
Signing time: Wed 07 May 2025 13:09:39 +0000
ROA not before: Wed 07 May 2025 13:04:39 +0000
ROA not after: Wed 06 May 2026 13:09:39 +0000
asID: 262738
IP address blocks: 186.195.168.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:12:57:41:f9:f6:12:02:ac:0e:95:a4:63:36:a7:44:60:8b:d5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A50362E1730E440E6BA771E7529DAB6A4505D5B0
Validity
Not Before: May 7 13:04:39 2025 GMT
Not After : May 6 13:09:39 2026 GMT
Subject: CN=CE630DB888B02E82AB3ECC0F6DAA82D12FBFC3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:31:4f:3c:69:31:50:1d:9a:38:de:38:9e:44:
4c:28:96:6f:d6:95:e2:e7:40:8b:2f:92:19:71:af:
17:69:8f:f5:b5:56:f8:f0:bb:ca:c5:3f:c8:44:be:
13:89:79:80:60:21:4c:42:11:88:68:b0:b1:02:d6:
62:ce:8c:ca:71:ae:d1:d7:a0:e2:13:fe:0f:da:72:
64:7b:1d:81:e6:cf:43:e3:48:d6:21:20:cb:e1:a2:
d1:fa:dc:cc:63:f0:36:80:2f:47:55:5c:68:32:1a:
18:43:14:a3:c9:35:6f:70:aa:3f:eb:aa:1e:4c:ca:
09:b7:57:23:66:75:b0:9e:2a:2d:9d:7f:b2:d4:86:
8d:48:11:06:e3:0e:88:fc:4d:90:14:22:42:0b:8c:
58:12:19:dc:d4:27:c1:1d:7c:35:98:47:02:d5:da:
97:7a:47:49:39:aa:c6:58:2d:33:bc:ca:7b:4f:58:
09:4f:c8:07:a4:8c:e0:77:55:e6:51:b2:94:57:09:
fb:44:3a:43:8b:c2:f7:65:e4:e1:c9:61:9e:91:ff:
1c:93:52:36:50:c6:76:30:24:e9:45:ff:9e:df:4d:
51:e2:04:0b:8f:96:d5:af:74:07:e4:fa:0c:3e:d4:
0e:42:f3:46:41:07:a2:d1:9e:ca:c0:3b:29:7a:22:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:0D:B8:88:B0:2E:82:AB:3E:CC:0F:6D:AA:82:D1:2F:BF:C3:B2
X509v3 Authority Key Identifier:
keyid:A5:03:62:E1:73:0E:44:0E:6B:A7:71:E7:52:9D:AB:6A:45:05:D5:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/A50362E1730E440E6BA771E7529DAB6A4505D5B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A50362E1730E440E6BA771E7529DAB6A4505D5B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/0/3138362e3139352e3136382e302f32322d3234203d3e20323632373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.195.168.0/22
Signature Algorithm: sha256WithRSAEncryption
21:64:f4:ff:5f:57:59:63:ff:59:db:aa:64:51:b6:fd:eb:e2:
9e:99:a9:04:ab:0b:d4:0f:34:4d:22:0e:c5:c2:cc:ce:57:50:
18:68:ab:2e:23:b5:a5:e9:be:5e:b7:c7:cd:c5:5e:76:d2:eb:
89:65:4a:60:4a:a8:1f:65:b5:be:bb:44:55:75:51:aa:ff:26:
42:74:eb:02:06:04:61:96:e8:fb:5f:3f:ce:cf:28:98:96:88:
5c:64:b6:1b:0a:fb:b7:1b:18:6a:f0:17:65:65:fe:32:60:cd:
49:46:29:0d:b3:f8:de:0c:d7:31:ee:0f:3a:8b:43:14:8d:94:
40:2c:a9:77:a6:f1:d9:88:af:75:b8:0e:c1:6a:15:aa:cc:24:
51:cf:fc:b5:fd:2d:c7:52:98:e1:fe:f3:8e:57:e9:4e:c3:8e:
b3:bd:ad:ae:2b:c6:44:92:ef:d5:9b:d0:86:14:36:05:03:3b:
fc:4f:e9:bb:1c:cd:7b:0c:64:07:63:72:0e:61:ea:b1:17:89:
91:fe:36:3f:b7:5d:ef:76:2e:09:93:f5:9c:f6:cd:05:4e:7a:
a6:f2:46:18:2a:b9:e7:35:83:df:2d:00:86:28:93:76:c6:5b:
5e:66:2a:5c:23:c1:33:38:80:cf:18:7b:d0:ec:e4:a9:0b:42:
ac:36:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:17:57 2025 by rpki-client