Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/34352e3232352e3134302e302f32322d3234203d3e20323636393338.roa
File: 34352e3232352e3134302e302f32322d3234203d3e20323636393338.roa (raw, json)
Hash identifier: jab/VemT+m+OIIttI1IJGf2bA6k803pfYdSMPKb0Qmw=
Subject key identifier: 41:98:D5:C1:C5:A5:DF:67:ED:A5:84:9A:BD:17:1A:9F:9F:4B:15:42
Certificate issuer: /CN=0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6
Certificate serial: 37ABDE4686275EF48D34151DD3B8A12CFD35CFE8
Authority key identifier: 0A:AE:6E:1F:E9:A1:32:1E:F6:C2:B5:AE:79:9B:C2:E5:A1:A9:0D:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/34352e3232352e3134302e302f32322d3234203d3e20323636393338.roa
Signing time: Thu 13 Mar 2025 18:08:38 +0000
ROA not before: Thu 13 Mar 2025 18:03:38 +0000
ROA not after: Thu 12 Mar 2026 18:08:38 +0000
asID: 266938
IP address blocks: 45.225.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ab:de:46:86:27:5e:f4:8d:34:15:1d:d3:b8:a1:2c:fd:35:cf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6
Validity
Not Before: Mar 13 18:03:38 2025 GMT
Not After : Mar 12 18:08:38 2026 GMT
Subject: CN=4198D5C1C5A5DF67EDA5849ABD171A9F9F4B1542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:00:c2:87:c8:52:2a:30:c7:4a:03:b9:97:
b4:45:03:0d:e5:bc:8e:18:7c:bb:1b:60:51:a6:0c:
52:c3:23:d4:57:b7:6a:91:4e:d5:15:9f:5d:7d:cb:
75:b2:77:6e:0a:d6:b7:b1:6e:d4:d4:60:46:5d:3b:
1c:1b:ed:88:2a:bf:fb:81:06:7b:f4:30:0f:53:67:
54:5e:29:34:ad:3a:e5:b6:c3:28:75:10:f7:c0:33:
cb:31:3d:16:2a:4a:a2:b6:17:93:02:12:7c:0c:48:
c4:d5:8e:e3:be:e4:14:c8:48:3f:b0:7f:26:fe:0a:
04:17:47:65:f6:2d:5d:f4:0d:3b:04:46:47:07:00:
e1:2f:9d:35:d6:91:98:80:b9:8d:95:93:69:35:7b:
82:43:e4:7e:98:ac:cb:0e:dc:b8:a7:02:3a:fb:7a:
ee:25:20:ca:0a:62:27:18:13:5d:22:c2:c3:ed:5f:
a7:41:c0:bd:c5:b1:0f:97:08:48:98:cf:25:c2:85:
44:09:6f:91:c0:c2:c6:ef:39:db:85:a2:e7:ad:f6:
bd:a5:0b:8a:71:61:5c:45:80:7b:e0:4a:ee:48:d8:
f9:cc:d8:a0:2c:4e:00:4c:14:2d:b4:87:49:20:10:
2d:e4:57:60:a4:13:1d:2a:28:b5:58:af:31:8c:a7:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:98:D5:C1:C5:A5:DF:67:ED:A5:84:9A:BD:17:1A:9F:9F:4B:15:42
X509v3 Authority Key Identifier:
keyid:0A:AE:6E:1F:E9:A1:32:1E:F6:C2:B5:AE:79:9B:C2:E5:A1:A9:0D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/34352e3232352e3134302e302f32322d3234203d3e20323636393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.140.0/22
Signature Algorithm: sha256WithRSAEncryption
79:88:4c:8d:c8:77:2e:24:bf:3f:89:7d:d6:b0:de:57:02:64:
c9:3c:84:d2:4a:f0:d3:9f:2f:44:c3:78:99:e1:8c:43:a5:44:
a9:f5:9e:64:f1:d5:0a:99:de:aa:64:55:c9:7a:4d:aa:68:b4:
57:48:07:7f:73:d3:bb:1a:4e:7f:9a:3d:b6:5f:8b:e6:c3:8a:
b0:00:b6:59:9f:54:a5:d8:71:05:74:90:fc:57:9e:9c:ae:a2:
72:d9:e1:ce:0b:10:0b:51:a4:00:70:f3:37:99:80:53:97:05:
b2:a2:8a:97:92:38:c5:d3:58:fe:41:22:c7:5e:89:e9:50:60:
fb:03:02:15:1c:29:2e:ca:5d:fa:54:c7:a6:ed:09:d6:ec:06:
36:fa:46:30:84:77:26:ab:3c:11:a7:f5:e7:a1:39:aa:fe:53:
0e:45:cc:43:60:0d:85:55:ef:7b:e9:e0:e0:3e:35:c9:4c:90:
2b:e9:9f:a9:28:ad:9e:95:71:c2:b5:d3:31:ec:ea:1f:8e:f3:
9d:ee:52:ce:14:c1:62:38:91:51:a9:4f:71:c5:78:14:95:0f:
98:4b:96:00:ff:af:c2:bb:bd:ed:91:8e:96:37:4a:8f:37:3b:
68:42:bc:74:6c:5e:69:68:8f:d5:cf:6e:16:fb:1a:28:ce:dd:
82:aa:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:46 2025 by rpki-client