Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa
File: 34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa (raw, json)
Hash identifier: P3cl1CT/FH34XOiVOZ7o0V52ACoRBoI/nRAQ8J2ig8A=
Subject key identifier: 0A:38:3F:3D:10:9B:D2:36:6A:42:1F:ED:35:49:96:96:22:49:9C:2B
Certificate issuer: /CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
Certificate serial: 028D9026CF80898C2EC07C64C96F8B2C77825DFE
Authority key identifier: 5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa
Signing time: Tue 04 Feb 2025 02:38:09 +0000
ROA not before: Tue 04 Feb 2025 02:33:09 +0000
ROA not after: Tue 03 Feb 2026 02:38:09 +0000
asID: 271599
IP address blocks: 45.174.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8d:90:26:cf:80:89:8c:2e:c0:7c:64:c9:6f:8b:2c:77:82:5d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D12BB9C963386A14A86F86D72A98F70D5D2AE54
Validity
Not Before: Feb 4 02:33:09 2025 GMT
Not After : Feb 3 02:38:09 2026 GMT
Subject: CN=0A383F3D109BD2366A421FED3549969622499C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:ef:e4:ca:0e:13:4a:f3:60:d3:b5:2b:91:
60:45:34:64:8c:3d:ee:90:f7:2d:91:fd:2f:25:d0:
f9:5a:75:21:c3:f8:ee:7a:7b:be:5c:5c:15:d1:79:
6f:e8:f8:e1:cb:28:f2:a6:ef:c3:29:16:0a:d5:ac:
7d:ae:d7:5a:d9:95:21:bf:16:95:ae:a5:00:04:43:
99:71:a8:7b:79:7e:ed:ee:91:1c:b8:ca:54:bf:f7:
8d:e0:22:25:35:4e:3d:59:30:d1:9d:5a:bb:20:68:
21:c3:f7:c1:f7:f6:7d:50:1c:a1:04:31:94:c4:e8:
57:cd:5b:f9:ff:c8:b2:6b:00:3d:97:d9:4e:a6:5f:
85:28:40:14:fb:d4:3c:e2:86:ef:a1:92:8e:e5:26:
f4:67:e6:2d:01:d9:e7:76:95:e3:b6:43:9f:fb:9d:
bf:c5:36:4d:97:21:4d:21:47:98:cb:18:d0:46:d1:
a6:b0:cf:74:05:c0:0a:54:9b:79:b2:d0:3e:91:9b:
2c:4d:de:aa:62:fd:eb:29:6d:bd:ce:ae:64:dc:cc:
60:31:66:22:e9:00:30:92:cd:43:11:83:0d:45:7e:
b2:f2:6a:7d:64:61:ae:1a:82:17:1b:3b:5a:23:76:
61:7d:5c:94:09:21:81:c3:cb:ce:61:66:10:85:df:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:38:3F:3D:10:9B:D2:36:6A:42:1F:ED:35:49:96:96:22:49:9C:2B
X509v3 Authority Key Identifier:
keyid:5D:12:BB:9C:96:33:86:A1:4A:86:F8:6D:72:A9:8F:70:D5:D2:AE:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12BB9C963386A14A86F86D72A98F70D5D2AE54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.196.0/22
Signature Algorithm: sha256WithRSAEncryption
30:be:fe:87:8a:93:7e:2a:f0:59:8c:cd:aa:e7:3a:f2:7a:81:
d1:48:ad:7a:b8:de:74:36:60:51:42:02:36:d6:25:d4:39:f1:
42:b1:d4:f3:8d:2b:d9:23:13:f7:94:72:3f:f5:34:01:8e:2d:
69:4f:f1:5b:9e:6c:33:ea:8a:b7:0a:db:69:9c:e1:c4:b0:97:
44:49:ad:82:cc:5d:c6:7e:4c:b2:b3:4c:f6:3d:c2:44:15:3d:
5d:d4:8c:ec:b5:a5:4b:22:a7:59:f3:9c:a1:a5:ad:7e:42:98:
85:8f:67:0a:27:82:81:5e:79:41:8d:ee:54:d7:b4:f2:af:ea:
07:ce:c8:92:a0:18:c4:d9:e2:b7:26:dc:60:ae:96:40:8b:c1:
e2:5b:35:cb:72:13:d1:db:0b:01:1d:17:63:57:25:2b:16:5e:
dc:80:24:f2:92:41:a0:99:e6:66:37:e7:ce:da:a7:dd:39:47:
d0:fb:07:6c:40:e8:c9:09:25:f2:d6:c2:28:84:d1:a6:88:1a:
a2:cd:8c:f9:0b:be:17:55:f9:c3:47:5f:f5:b5:b3:b3:68:51:
27:bc:d1:91:62:7d:d7:78:7e:33:f6:5d:1e:0b:ef:38:d2:1f:
57:0c:da:0c:50:98:e6:7b:23:83:82:ea:2f:9f:dc:d2:85:ed:
56:f2:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:17:25 2025 by rpki-client