Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/34352e3232352e382e302f32322d3234203d3e20323636393731.roa
File: 34352e3232352e382e302f32322d3234203d3e20323636393731.roa (raw, json)
Hash identifier: HHgmgcE57HuOOLTZJQ+8wqTCjIFu+vp5HU81BjM9yJE=
Subject key identifier: 5E:B9:FB:5A:69:C3:5A:2D:83:88:12:8E:D2:5F:E9:E1:42:48:62:1E
Certificate issuer: /CN=5C1B218A74E747DB3E0B98D77A5336B1E11F5C44
Certificate serial: 105DDCBF79BB014C5812F2572D43AD3BC895C19C
Authority key identifier: 5C:1B:21:8A:74:E7:47:DB:3E:0B:98:D7:7A:53:36:B1:E1:1F:5C:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/34352e3232352e382e302f32322d3234203d3e20323636393731.roa
Signing time: Tue 26 Sep 2023 02:54:23 +0000
ROA not before: Tue 26 Sep 2023 02:49:23 +0000
ROA not after: Tue 24 Sep 2024 02:54:23 +0000
asID: 266971
IP address blocks: 45.225.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5d:dc:bf:79:bb:01:4c:58:12:f2:57:2d:43:ad:3b:c8:95:c1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C1B218A74E747DB3E0B98D77A5336B1E11F5C44
Validity
Not Before: Sep 26 02:49:23 2023 GMT
Not After : Sep 24 02:54:23 2024 GMT
Subject: CN=5EB9FB5A69C35A2D8388128ED25FE9E14248621E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:96:58:43:52:cb:57:bf:1f:1a:e9:1a:3a:
bd:ef:44:e3:c6:d3:61:09:27:fc:bf:b1:50:38:68:
90:04:fd:21:7e:be:d4:9f:b9:c3:67:f7:0c:0c:8b:
16:b8:db:58:56:7a:74:b1:b1:2f:f4:55:02:3f:76:
6e:1b:3e:60:fa:f3:08:ca:ef:8f:fe:66:9e:f0:7e:
85:ae:08:7d:c8:ac:ef:26:e0:47:e2:35:2b:d3:98:
20:06:78:88:b2:1c:d7:80:45:72:bc:0f:0e:0b:a0:
ea:3d:e0:f1:2f:e6:1e:36:02:f4:82:c0:0d:fc:62:
6f:eb:b4:93:a2:67:81:1f:99:83:f9:96:d8:67:3a:
24:bb:37:c9:6f:e5:1b:9f:0b:65:fb:22:2a:37:8f:
3a:0f:40:56:c3:d1:2a:29:42:ed:f0:1f:02:c3:f9:
b3:ca:0c:e4:21:42:c6:9b:8f:a5:1b:c8:de:62:c4:
5d:e8:fe:61:22:ed:91:9e:e9:19:01:80:67:39:9e:
78:bd:33:3d:e4:05:15:b4:ce:3e:6c:30:c5:b8:9e:
74:39:6e:f0:00:40:51:a0:ec:aa:df:47:6d:09:08:
cc:26:b9:5f:4d:bb:6b:67:1a:36:1b:c2:4b:bb:a5:
c8:a9:03:e0:f8:4d:78:05:fe:03:97:6c:ee:8a:9c:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B9:FB:5A:69:C3:5A:2D:83:88:12:8E:D2:5F:E9:E1:42:48:62:1E
X509v3 Authority Key Identifier:
keyid:5C:1B:21:8A:74:E7:47:DB:3E:0B:98:D7:7A:53:36:B1:E1:1F:5C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5C1B218A74E747DB3E0B98D77A5336B1E11F5C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/0/34352e3232352e382e302f32322d3234203d3e20323636393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:e7:c9:55:7f:57:8b:75:60:93:fa:e2:af:1c:9f:f3:d0:9e:
75:9d:6a:ef:41:f0:3d:ae:59:fd:30:d0:41:9c:34:3e:a6:41:
69:93:24:bb:51:f4:bb:70:1b:10:44:a6:67:7f:32:d5:5b:c1:
8e:e8:99:88:bd:c1:76:1c:28:3b:3c:fa:b1:fd:78:bd:ec:97:
81:5c:2f:06:9a:bb:22:08:47:68:12:ca:5b:c7:35:25:bc:bd:
f0:0b:67:35:e3:01:4a:c1:ab:67:86:86:4c:15:d7:17:c9:4d:
35:b2:2c:08:12:1a:d5:1e:97:66:7b:ac:e4:5c:fd:97:c1:73:
06:5d:d1:39:2a:be:93:80:7a:e4:0d:01:0b:bf:f9:a9:c1:7a:
ff:07:99:ef:88:60:31:77:01:8c:46:e3:4e:98:8f:86:5a:6f:
10:ec:c2:f9:03:7f:c9:6a:60:42:56:44:4b:88:7b:c1:3e:7b:
99:b9:b1:f1:86:45:07:c6:d9:55:7f:e3:37:5f:28:c9:d7:4c:
6c:ee:b0:e9:a1:25:15:0e:77:b0:11:80:93:20:3e:d4:83:6a:
d1:1c:83:b1:3d:63:e3:b0:19:1f:3e:8e:0d:57:1f:bd:c7:b9:
92:18:33:9b:cf:0f:ca:85:df:c6:04:ae:20:8c:34:01:be:50:
fb:45:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:06:26 2025 by rpki-client