Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32332d3233203d3e20323638383039.roa
File: 34352e3137332e3130302e302f32332d3233203d3e20323638383039.roa (raw, json)
Hash identifier: 8Ybv6WrmgkMLBRYO39t2s0BF8QxAGKyHKpS21auj8ho=
Subject key identifier: F7:DE:E7:45:B8:9D:04:55:1B:94:8D:34:6D:AA:A1:58:E4:12:75:A2
Certificate issuer: /CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
Certificate serial: 197537228BA0D8D5E30E35ECA6834DD3CCCC382B
Authority key identifier: 36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32332d3233203d3e20323638383039.roa
Signing time: Sun 02 Feb 2025 02:10:10 +0000
ROA not before: Sun 02 Feb 2025 02:05:10 +0000
ROA not after: Sun 01 Feb 2026 02:10:10 +0000
asID: 268809
IP address blocks: 45.173.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:75:37:22:8b:a0:d8:d5:e3:0e:35:ec:a6:83:4d:d3:cc:cc:38:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
Validity
Not Before: Feb 2 02:05:10 2025 GMT
Not After : Feb 1 02:10:10 2026 GMT
Subject: CN=F7DEE745B89D04551B948D346DAAA158E41275A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:c4:59:07:0b:e2:d5:bd:2b:49:57:3e:e6:
63:cf:b3:40:b8:a2:9a:cb:bd:d3:02:15:90:48:42:
04:1f:58:d2:7b:90:2b:51:d1:34:bb:5c:38:fa:d6:
ff:d8:2e:6e:06:6b:dc:08:e7:ff:8c:0d:c3:65:fa:
6d:c2:5d:5c:dc:3c:07:cb:9d:25:f8:aa:7e:e3:24:
a6:16:ac:87:15:b5:71:04:a4:8d:2f:c2:11:fd:6c:
fb:86:42:e1:a4:5f:9c:df:b1:2a:e3:cc:e5:14:14:
55:fe:6d:e8:c0:96:c6:9b:2e:dd:cc:dc:d1:15:f2:
5f:95:30:a5:47:aa:d8:90:6f:cf:b0:79:c3:b9:31:
e9:e5:cc:6d:1e:59:10:f1:77:dc:c9:7f:54:a4:f5:
e0:17:6e:77:d3:f1:e2:77:30:ea:ca:8f:16:36:5a:
83:9a:ab:0d:1b:65:22:e5:1a:09:25:97:4f:1b:63:
00:9f:d6:b5:0a:a1:78:bd:57:80:11:0d:29:bb:2f:
12:d2:5d:7d:8b:b0:f0:af:51:ef:70:3a:59:35:83:
25:b9:6d:83:fc:13:3b:ea:e1:db:91:53:5d:45:83:
5f:4c:ff:3d:f0:3a:9a:58:cb:f2:0a:ab:5f:dc:0b:
bb:08:58:d1:2d:f9:c0:9d:7c:67:73:77:a4:bb:02:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:E7:45:B8:9D:04:55:1B:94:8D:34:6D:AA:A1:58:E4:12:75:A2
X509v3 Authority Key Identifier:
keyid:36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32332d3233203d3e20323638383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.100.0/23
Signature Algorithm: sha256WithRSAEncryption
25:9b:d0:f4:f0:50:20:97:b7:3b:45:7d:2a:da:d8:0a:09:2b:
e7:94:35:4a:07:2e:6b:d6:e4:f6:0f:0d:01:4c:a8:38:14:45:
5e:54:d4:b9:f0:de:e5:95:81:6b:5d:32:3a:0b:55:48:99:b1:
94:9c:06:e3:54:1a:8d:f5:a3:8d:70:2c:c7:f4:88:8d:db:6f:
e7:1b:70:d3:49:fa:9d:cc:2d:4a:c6:bc:8c:cb:a5:44:12:5b:
01:ed:95:f4:fc:fc:7a:5a:69:23:c3:00:88:ef:b7:ee:aa:2f:
75:ee:c5:be:d1:b2:3b:25:22:9b:a4:51:b9:7c:18:94:35:8d:
0a:da:31:e7:bd:e6:29:3e:8b:02:76:ca:76:94:22:b4:ec:51:
19:1e:fb:dc:d4:e2:eb:cc:4d:6a:f2:91:4b:b1:cd:e7:ce:d2:
0f:22:47:09:27:3e:88:2e:f3:49:4b:2c:4c:f7:a1:0d:19:c8:
f8:fc:3d:15:b7:74:23:ce:a5:d0:fd:36:e1:12:1e:7d:42:60:
c1:f4:1b:3b:d8:8f:00:fe:61:dc:94:bf:61:e9:59:9f:70:13:
12:61:3a:a7:34:2e:a6:5a:fb:a6:4a:4a:3b:36:8d:73:2a:20:
b7:52:5f:36:e4:92:d9:8a:8a:4d:88:1b:07:62:2e:41:bc:08:
15:c3:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:16:41 2025 by rpki-client