Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/34352e342e31362e302f32322d3332203d3e20323636303533.roa
File: 34352e342e31362e302f32322d3332203d3e20323636303533.roa (raw, json)
Hash identifier: 7Tm/CjevQjkXDey9rGJqueNRlV51W4jMQWwHzT2/K8s=
Subject key identifier: BC:D3:B1:53:88:A3:02:02:B6:82:E8:F4:CF:90:F0:FC:93:F6:A7:36
Certificate issuer: /CN=E27513DF0F80F1E934FC7A0C421F868E94751182
Certificate serial: 455F773FCC9F1969CEEABAACEC59794B32AA1720
Authority key identifier: E2:75:13:DF:0F:80:F1:E9:34:FC:7A:0C:42:1F:86:8E:94:75:11:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/34352e342e31362e302f32322d3332203d3e20323636303533.roa
Signing time: Wed 29 Jan 2025 11:47:25 +0000
ROA not before: Wed 29 Jan 2025 11:42:25 +0000
ROA not after: Wed 28 Jan 2026 11:47:25 +0000
asID: 266053
IP address blocks: 45.4.16.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5f:77:3f:cc:9f:19:69:ce:ea:ba:ac:ec:59:79:4b:32:aa:17:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E27513DF0F80F1E934FC7A0C421F868E94751182
Validity
Not Before: Jan 29 11:42:25 2025 GMT
Not After : Jan 28 11:47:25 2026 GMT
Subject: CN=BCD3B15388A30202B682E8F4CF90F0FC93F6A736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:ee:2c:15:96:38:3b:c8:8d:1c:49:18:4e:
66:eb:a7:b9:e8:81:ab:64:a3:5b:e7:62:1a:2f:58:
1e:46:56:e7:a6:38:8c:74:13:fc:f9:10:e6:a4:f3:
57:02:af:ab:47:c7:73:30:99:68:1c:0f:13:e9:7e:
07:bb:14:81:c7:35:83:6e:e4:5f:00:82:c8:a4:5f:
5d:4c:86:ad:ba:d2:63:76:33:69:b2:83:3f:7f:bf:
c4:a8:45:62:1c:38:08:21:fb:30:f2:20:4a:03:78:
dd:d2:22:f6:b8:52:19:1d:da:b8:bb:06:cf:91:96:
b9:a0:59:38:13:4c:df:37:2c:b2:60:f1:ae:e3:3f:
69:b2:3e:a3:d4:35:19:41:2d:10:ad:cf:5f:56:0a:
4e:98:97:d6:cf:0c:de:5d:4a:96:a8:88:55:31:02:
f8:f8:39:b7:ea:8f:8d:f3:dc:32:1b:06:fd:e6:e1:
03:1f:7c:00:8a:65:a8:30:89:5d:d1:57:36:98:d4:
0f:a9:75:43:16:48:06:0e:44:79:6d:91:1d:38:18:
fd:4c:e7:23:4f:bc:43:f6:90:d8:80:0f:7e:7b:9a:
ea:ea:cf:79:28:56:d4:1a:09:03:02:fd:8a:c3:89:
2a:91:77:fd:db:9d:c0:29:54:6e:f5:1b:7d:68:ee:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:B1:53:88:A3:02:02:B6:82:E8:F4:CF:90:F0:FC:93:F6:A7:36
X509v3 Authority Key Identifier:
keyid:E2:75:13:DF:0F:80:F1:E9:34:FC:7A:0C:42:1F:86:8E:94:75:11:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/34352e342e31362e302f32322d3332203d3e20323636303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.16.0/22
Signature Algorithm: sha256WithRSAEncryption
74:79:85:06:b4:2e:40:32:b6:90:44:f2:c0:7f:cf:60:91:96:
c7:34:a6:a3:d9:ac:d4:84:34:fc:49:c3:6e:8a:f9:29:91:35:
66:d7:2c:49:af:41:71:29:75:8a:6e:66:7e:60:fc:27:9d:13:
e5:9f:a9:5f:02:13:64:c1:50:cc:73:93:10:1f:a1:22:4e:c8:
43:b4:7b:de:e4:9b:26:52:f0:04:57:2a:20:6f:7c:19:8e:ef:
3f:07:e9:44:38:13:bc:36:78:1c:81:5b:60:06:aa:13:70:57:
fc:a2:71:26:fe:1a:5d:d3:a6:c2:1c:ca:7b:42:29:70:b6:ae:
af:9a:ab:4c:d4:98:c7:bd:74:eb:1c:31:7a:f1:1d:6d:25:ce:
0b:7f:83:69:2d:c1:a3:22:b6:ab:38:b9:6f:73:5c:63:98:9f:
8d:76:95:d9:0b:0b:27:8e:53:e0:04:6b:59:33:2f:a5:7a:bf:
31:0a:60:ce:3e:f2:bd:8b:5d:58:56:08:06:cb:1c:2e:30:bb:
69:72:96:b8:01:cc:f3:e6:5a:70:fc:5d:51:a7:72:41:c0:55:
c3:fd:53:d5:56:28:b0:07:b2:b1:5e:a3:e8:44:2c:75:ed:80:
54:f6:9a:ff:c0:6c:9d:ea:14:f3:36:94:eb:22:52:be:2d:85:
53:5c:2c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:42 2025 by rpki-client