Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
File: 34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier: T6fUIJEUFs+djCyIj60kGutcwlqduxsCNq9XE897EL4=
Subject key identifier: A3:C0:F8:0E:90:6C:BF:33:49:6D:7A:9A:18:51:C1:3B:2D:5C:D1:8C
Certificate issuer: /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial: 0E90E83E86805B2DF2E9FCC532B572D6A2D6F932
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
Signing time: Wed 04 Dec 2024 16:44:00 +0000
ROA not before: Wed 04 Dec 2024 16:39:00 +0000
ROA not after: Wed 03 Dec 2025 16:44:00 +0000
asID: 266924
IP address blocks: 45.224.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:90:e8:3e:86:80:5b:2d:f2:e9:fc:c5:32:b5:72:d6:a2:d6:f9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Validity
Not Before: Dec 4 16:39:00 2024 GMT
Not After : Dec 3 16:44:00 2025 GMT
Subject: CN=A3C0F80E906CBF33496D7A9A1851C13B2D5CD18C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:63:0f:07:ee:d0:b1:7d:21:8e:1e:0c:7c:
da:87:73:7a:09:c7:c9:0c:5b:a0:56:86:f7:a7:d8:
1e:c6:26:1f:63:d5:a9:96:05:20:6f:76:e2:7d:f7:
c7:5c:c4:41:c5:03:5d:94:a6:5a:04:16:09:9c:7b:
c7:fd:57:81:22:c1:6e:fa:ff:82:52:6d:f2:ed:d9:
89:0a:0a:ef:42:16:9b:50:9c:8b:6b:81:ac:64:08:
ed:56:cc:97:8b:a3:60:bb:ee:2d:7d:91:ee:7a:b9:
8b:67:65:89:1b:8e:09:b4:28:4b:ef:47:6a:f3:48:
8d:5d:c4:7c:6f:ed:0d:07:04:6b:90:49:e3:2e:39:
95:c8:30:82:83:5e:4c:7d:a6:a3:dd:a9:fe:6c:51:
f5:a4:68:85:eb:01:35:d7:aa:0a:2a:fa:9f:15:d6:
8c:99:b6:b2:e8:f6:fd:2a:ab:31:7e:46:92:2b:2c:
74:5c:3c:88:d5:18:24:de:8f:ce:dd:0f:33:68:36:
5f:ef:6d:21:03:7c:b6:fc:5e:04:b3:e5:d7:82:91:
ab:77:c3:57:03:f4:c8:f2:52:19:95:5a:c4:59:14:
8c:4e:65:e3:ad:eb:89:ae:b7:1c:cf:ca:d5:35:a0:
e0:3d:2d:4c:29:a0:77:8e:dd:03:d7:b3:65:38:d6:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:F8:0E:90:6C:BF:33:49:6D:7A:9A:18:51:C1:3B:2D:5C:D1:8C
X509v3 Authority Key Identifier:
keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.35.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3c:ad:b0:47:a6:21:03:02:7c:ac:00:52:e8:07:90:73:6b:
6f:b2:d5:b9:d4:3f:6e:34:27:e3:08:18:60:65:5c:3f:f3:76:
aa:05:11:b0:65:e2:9e:8f:4d:d1:2d:fc:97:71:a4:d4:26:4f:
10:1d:1c:72:2e:29:9c:60:ff:aa:a8:d0:e4:7a:80:17:fa:89:
31:92:74:c9:e2:ed:be:70:74:6b:1b:97:e8:de:9b:81:34:a3:
f6:3a:c3:b3:1a:1c:b6:ab:77:7d:d5:cc:b5:04:f7:74:cb:7b:
8d:ff:a3:77:3e:4a:1b:03:2e:66:32:17:9a:c7:f7:88:bf:04:
54:8a:b8:32:4d:75:2e:0d:4b:0c:d1:73:e1:e9:b2:0d:0c:3f:
23:51:41:a8:06:c9:19:fe:85:da:1a:a0:52:dd:c2:3e:0c:ef:
7e:c1:8f:d4:0b:30:9f:e7:65:d3:6d:af:4d:53:aa:43:04:85:
a1:8b:a7:a5:9a:3d:64:4b:df:51:59:74:ef:19:a7:bc:83:d3:
7a:81:5e:f6:a2:96:09:d2:ad:70:b9:05:52:2e:e5:e1:a0:cf:
e0:57:03:df:3f:47:a5:4f:2d:00:ba:ae:dd:61:6a:92:54:bc:
91:54:71:c5:79:01:aa:dc:35:72:d5:f8:f5:41:cc:b4:9b:09:
16:29:c4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:55:55 2025 by rpki-client