Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/34352e3138352e3230302e302f32322d3332203d3e20323639343032.roa
File: 34352e3138352e3230302e302f32322d3332203d3e20323639343032.roa (raw, json)
Hash identifier: bo2UI+gCKUcVCRSmqXNbbt9+tPhzCwSDENqZ1mBJItI=
Subject key identifier: 8F:40:95:E8:5E:B6:2E:8C:16:B4:18:01:B5:D5:AE:E7:2E:38:B9:A7
Certificate issuer: /CN=DBA1CF48944FF403C0171F9F9804FDE0402A3A6A
Certificate serial: 3E97BAC61AE9A19F0329104E111DBB48F7798189
Authority key identifier: DB:A1:CF:48:94:4F:F4:03:C0:17:1F:9F:98:04:FD:E0:40:2A:3A:6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBA1CF48944FF403C0171F9F9804FDE0402A3A6A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/34352e3138352e3230302e302f32322d3332203d3e20323639343032.roa
Signing time: Fri 06 Jan 2023 20:37:38 +0000
ROA not before: Fri 06 Jan 2023 20:32:38 +0000
ROA not after: Fri 05 Jan 2024 20:37:38 +0000
asID: 269402
IP address blocks: 45.185.200.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:97:ba:c6:1a:e9:a1:9f:03:29:10:4e:11:1d:bb:48:f7:79:81:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA1CF48944FF403C0171F9F9804FDE0402A3A6A
Validity
Not Before: Jan 6 20:32:38 2023 GMT
Not After : Jan 5 20:37:38 2024 GMT
Subject: CN=8F4095E85EB62E8C16B41801B5D5AEE72E38B9A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:a9:f6:e6:9d:ab:f3:2e:bc:3e:57:17:2f:
93:8c:df:47:18:c9:e0:bb:3d:fe:6e:75:11:63:85:
9b:f0:64:60:e1:dd:92:6f:24:8d:54:36:d1:7c:1d:
49:d7:70:92:21:2e:57:9c:94:49:da:28:41:c0:85:
e0:75:cb:da:4b:fd:39:9b:e5:59:d4:fc:2d:c0:b8:
61:41:54:ae:9a:87:0d:49:97:41:26:59:8a:9a:8c:
a8:fa:2b:63:3d:84:e6:54:99:98:6f:40:32:e0:87:
b8:c3:23:f5:bb:81:d2:d3:86:19:b3:1d:6f:fe:61:
a1:68:36:cc:84:c5:7b:da:7b:be:29:a1:ce:10:94:
63:59:ca:66:51:7d:7f:f2:4f:77:06:5c:53:2f:4f:
fa:8b:ff:ed:4f:0e:e8:94:8a:44:08:9c:5e:ef:94:
9c:3a:f4:d3:d5:2e:f4:d1:33:6f:b0:33:db:c5:d0:
4d:00:d2:d2:da:48:02:aa:c1:03:a9:9b:e8:04:c3:
d7:be:ac:1b:00:47:10:be:5b:0e:89:bd:79:35:7f:
ce:e5:77:81:0e:8c:03:19:b9:b1:19:a5:35:53:e1:
4e:a4:16:da:d9:de:a3:db:55:a2:06:f8:6e:f8:4d:
98:6c:db:a2:34:02:ab:c8:b3:7b:96:33:d1:7b:f4:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:95:E8:5E:B6:2E:8C:16:B4:18:01:B5:D5:AE:E7:2E:38:B9:A7
X509v3 Authority Key Identifier:
keyid:DB:A1:CF:48:94:4F:F4:03:C0:17:1F:9F:98:04:FD:E0:40:2A:3A:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/DBA1CF48944FF403C0171F9F9804FDE0402A3A6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBA1CF48944FF403C0171F9F9804FDE0402A3A6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/23yiujdYZ67U5BNtmawRCYKCEaqQ3muxjyaZuKYwVn1Q/0/34352e3138352e3230302e302f32322d3332203d3e20323639343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.200.0/22
Signature Algorithm: sha256WithRSAEncryption
68:bb:bd:27:9a:2a:75:cf:4d:c5:ea:a5:09:f0:09:fe:1a:eb:
15:be:b5:d6:e0:75:5a:a7:15:21:01:36:d6:30:b9:4d:62:00:
87:6c:2b:62:7f:18:cf:71:13:be:bf:07:ab:63:24:18:48:7e:
51:92:f1:a6:d0:13:be:2b:f5:2d:ce:d6:f0:db:58:87:46:7e:
d4:6b:0f:a4:16:b2:e8:b8:a5:f7:07:00:a2:87:1b:fd:5d:1b:
1f:3a:a3:0f:e7:23:30:5a:00:5b:6a:ce:70:72:e1:2e:b4:96:
6c:b1:d4:34:76:0d:9c:48:15:34:73:88:a6:45:6c:0e:f1:a1:
21:17:e3:16:03:57:99:4f:a0:22:91:01:c8:62:84:a9:41:00:
ec:3c:fa:0e:94:3e:5b:98:d8:ce:34:71:09:ac:0c:ff:d2:b6:
3c:e7:92:0c:12:ed:6f:96:7c:3c:66:1d:2b:78:80:27:70:19:
15:7f:d3:65:84:57:5d:3e:41:a6:f2:26:d0:fa:67:f6:0b:98:
c8:64:74:02:c3:d9:aa:72:d1:84:86:c7:ed:28:68:cd:90:81:
ee:74:be:78:23:1a:7c:ba:a9:87:68:04:72:be:bf:30:b8:64:
72:1a:cd:7d:54:0e:f4:74:23:80:eb:2c:85:33:59:85:16:fd:
bb:3d:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:03 2025 by rpki-client