Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31322e302f32322d3232203d3e20323638373739.roa
File: 34352e3137322e31322e302f32322d3232203d3e20323638373739.roa (raw, json)
Hash identifier: /tmBflWVhpvwHvle3gOd3TGhMKe2FQlRV9tgaT4my7E=
Subject key identifier: 36:C8:22:C8:B9:1C:45:58:89:8F:64:95:CA:B0:FA:B2:9A:DA:7A:76
Certificate issuer: /CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
Certificate serial: 295A55F5030E7F4B0DD0B070EB6FC58B1171FBF0
Authority key identifier: AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31322e302f32322d3232203d3e20323638373739.roa
Signing time: Tue 02 Jan 2024 14:13:55 +0000
ROA not before: Tue 02 Jan 2024 14:08:55 +0000
ROA not after: Tue 31 Dec 2024 14:13:55 +0000
asID: 268779
IP address blocks: 45.172.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5a:55:f5:03:0e:7f:4b:0d:d0:b0:70:eb:6f:c5:8b:11:71:fb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB7D5AB80919646E3C28D3DD43EBF003B21C697B
Validity
Not Before: Jan 2 14:08:55 2024 GMT
Not After : Dec 31 14:13:55 2024 GMT
Subject: CN=36C822C8B91C4558898F6495CAB0FAB29ADA7A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:25:41:37:52:da:19:5a:a2:92:57:ac:83:
3f:40:2d:9d:61:45:54:af:61:11:bd:79:26:a4:2d:
4a:08:36:0b:37:93:23:d8:bd:b8:77:5d:48:1b:8f:
f6:69:44:08:78:9d:19:43:35:39:c7:31:2c:a9:32:
1d:a5:1c:77:00:6c:91:23:07:eb:7a:65:3d:9f:44:
eb:2d:86:9e:41:00:80:ea:10:37:d8:c7:b7:95:2c:
e7:6e:26:6f:32:e8:be:66:6b:ec:23:41:87:aa:29:
ab:e5:36:b4:04:a7:aa:8a:de:97:8b:ec:bc:f5:b9:
e5:6d:6c:5a:18:95:89:ed:f9:87:35:55:50:1a:47:
2b:5e:4b:f0:48:57:a8:aa:f1:60:7d:1e:aa:f3:4f:
fe:7f:ef:6d:d1:ea:18:39:0b:74:60:94:9a:8a:f8:
6c:db:af:82:fc:67:c9:13:4e:8e:c9:f1:0f:c1:36:
19:ad:05:5b:fd:5e:82:c0:7d:0c:ee:b8:c9:a9:80:
37:a1:5a:4b:37:51:21:12:df:41:57:3d:4b:91:5d:
51:e9:08:21:b1:30:0c:a5:1f:a9:4b:e8:27:44:fe:
5f:e8:cf:9e:ed:9f:26:4b:71:f4:67:91:33:16:0b:
5e:c5:5a:12:70:da:3d:12:bd:28:91:18:ba:11:7e:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C8:22:C8:B9:1C:45:58:89:8F:64:95:CA:B0:FA:B2:9A:DA:7A:76
X509v3 Authority Key Identifier:
keyid:AB:7D:5A:B8:09:19:64:6E:3C:28:D3:DD:43:EB:F0:03:B2:1C:69:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB7D5AB80919646E3C28D3DD43EBF003B21C697B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQndqqMYps4SzyeKamUPGnM7zjXMBHZRizhWkFXYpmPf/0/34352e3137322e31322e302f32322d3232203d3e20323638373739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:9d:6e:71:79:8c:d4:6e:a8:f3:0e:56:70:d0:f8:14:f1:7c:
42:75:f1:7c:0f:48:45:41:e5:78:d9:5a:f0:de:53:8a:9c:7f:
63:c1:82:3c:de:11:ad:a1:f3:66:81:7f:59:2a:50:57:af:7c:
17:c0:2e:b6:b7:e6:53:4d:86:52:71:0c:73:9c:17:b0:b9:97:
85:fc:1a:4f:9a:cb:f5:ca:b0:a0:08:dd:29:c8:e9:8f:69:30:
16:cd:b6:07:2f:7f:55:63:88:91:61:b5:5d:b2:5c:a2:8f:88:
29:88:e1:ff:17:86:fc:28:8a:c0:28:a0:6f:59:eb:41:f9:d8:
d3:3f:f3:86:b4:5f:39:2d:37:0b:89:2e:4e:57:87:28:f0:c1:
15:e7:98:e4:ad:1e:d5:43:ef:79:0a:e9:b1:47:64:66:39:00:
b5:cc:9e:d6:d8:be:08:8d:6d:b4:f7:51:92:ab:ed:6b:1d:2a:
22:11:b7:0d:a1:72:d8:ce:43:50:15:7f:ad:c5:9c:27:ee:13:
9d:b5:3c:da:a5:e6:6a:82:f3:ed:87:fd:01:45:24:07:dc:41:
a4:6c:c1:d9:87:24:6d:1e:5a:b3:a1:40:82:77:fa:48:bb:27:
ea:b7:75:60:e4:f4:b2:f3:0c:0c:88:00:88:70:1b:a3:16:5b:
f8:d7:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:48:06 2025 by rpki-client