Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa
File: 34352e3233342e3130302e302f32322d3232203d3e203631353932.roa (raw, json)
Hash identifier: TnzJ5EsTJysakCmlPNyMY0Qb62odzRbxfybNlr6nayQ=
Subject key identifier: 80:46:99:04:C9:8C:F8:65:EF:FF:DB:F3:A2:2C:07:A0:51:17:FF:40
Certificate issuer: /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial: 1E6127C4348E86206272E810CDEC80246141B6C1
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa
Signing time: Wed 12 Feb 2025 14:31:05 +0000
ROA not before: Wed 12 Feb 2025 14:26:05 +0000
ROA not after: Wed 11 Feb 2026 14:31:05 +0000
asID: 61592
IP address blocks: 45.234.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:61:27:c4:34:8e:86:20:62:72:e8:10:cd:ec:80:24:61:41:b6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Validity
Not Before: Feb 12 14:26:05 2025 GMT
Not After : Feb 11 14:31:05 2026 GMT
Subject: CN=80469904C98CF865EFFFDBF3A22C07A05117FF40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bd:ba:e7:da:00:3c:88:ea:af:7b:62:78:57:
56:c8:41:c6:70:42:34:b4:43:4b:4c:a9:69:78:65:
43:b5:81:c5:a5:46:3f:74:60:2c:f5:6f:3c:1e:3d:
26:66:5c:ef:40:f9:8a:b3:3e:01:e3:92:10:7f:95:
f8:50:1e:c5:cb:71:02:57:bc:dd:08:56:8e:27:2d:
49:97:59:ad:e6:d1:f1:a9:79:e9:2a:06:29:05:11:
31:37:c7:74:f7:70:96:3a:2c:b4:d9:10:d4:f3:6e:
08:28:43:df:ab:eb:c6:97:b2:93:2f:23:59:81:ec:
71:1b:79:0c:b3:7b:de:63:01:03:03:7c:06:d3:20:
8f:5b:72:01:ee:7b:d1:46:45:24:bc:2a:cb:f7:5c:
ea:1a:9c:43:6a:db:b0:4f:a0:4b:13:93:c5:7f:56:
a1:c9:19:40:33:0c:4b:2e:ca:fd:3b:cd:58:07:5e:
91:58:14:f2:19:2e:99:d1:30:c0:26:11:6e:32:19:
ea:dc:44:92:1c:09:68:fe:f5:4b:cd:3f:a3:f6:c7:
63:b1:f6:93:80:e2:fc:d1:86:16:26:7c:87:ec:75:
7a:c0:32:8b:93:05:91:b0:9d:fd:19:a1:8b:a4:b2:
0f:6b:d5:56:e6:dd:fb:63:0c:23:a7:2a:91:9c:7c:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:99:04:C9:8C:F8:65:EF:FF:DB:F3:A2:2C:07:A0:51:17:FF:40
X509v3 Authority Key Identifier:
keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32322d3232203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.100.0/22
Signature Algorithm: sha256WithRSAEncryption
40:44:c7:45:32:4e:80:cc:0c:4a:c4:3b:ae:ad:36:97:9e:65:
09:e0:f8:8e:4e:fd:18:84:f0:8b:ef:f4:36:bc:41:ca:f4:9d:
1d:91:fc:e3:69:3a:c3:a2:59:39:a5:bf:f4:1b:a5:06:3f:65:
bb:fd:41:4c:d5:c2:88:c9:c2:ac:91:23:c2:15:7e:37:2d:6a:
29:50:7b:32:08:f0:0f:04:ae:be:7a:50:c6:46:99:bb:3e:ad:
e9:e2:2d:ec:8c:24:30:d0:e3:76:d4:6e:59:26:66:20:6f:83:
3c:a8:02:92:46:42:05:43:0e:6c:80:94:3a:fd:41:8e:8b:91:
fd:51:8b:f4:0c:35:88:b4:c4:6c:83:1f:9b:84:0f:ea:46:6d:
52:7b:ba:af:60:cb:e9:93:15:3c:5c:a0:8b:d0:7b:62:9b:0a:
5f:f8:3c:89:87:dc:ba:12:7c:50:c5:0a:1c:04:ac:5d:65:8e:
ec:00:c9:f4:ef:be:34:8b:03:ae:99:0e:f0:8f:1d:a6:59:77:
2c:20:76:f9:3b:0c:c4:73:6a:1a:4e:92:35:d4:41:ef:46:2a:
20:21:ad:b8:7a:81:3c:3b:e3:ed:1c:d1:79:1a:28:0e:b3:c6:
c9:3e:43:3e:90:b4:34:c4:8a:da:cd:33:94:32:ee:0c:2b:5e:
e6:89:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:53:16 2025 by rpki-client