Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32342d3234203d3e20323638303932.roa
File: 34352e3136382e3232302e302f32342d3234203d3e20323638303932.roa (raw, json)
Hash identifier: pCIqabkH5i2qKipspJwJwxOE4E4PNnEGKm7ikdLTQE0=
Subject key identifier: 61:42:EF:E3:AC:2A:2D:BA:FF:DB:03:51:DC:74:28:E2:F1:6F:ED:07
Certificate issuer: /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial: 2FF074905F6057DE5B17A0487302F40CB01A25BC
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32342d3234203d3e20323638303932.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 268092
IP address blocks: 45.168.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f0:74:90:5f:60:57:de:5b:17:a0:48:73:02:f4:0c:b0:1a:25:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=6142EFE3AC2A2DBAFFDB0351DC7428E2F16FED07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:15:cd:82:90:ce:42:cc:67:e9:c4:8a:22:
c0:39:c6:d0:2e:c8:34:b5:40:aa:ec:51:8e:cf:ca:
1b:6c:c1:1f:e8:46:79:e4:de:1c:66:4d:ee:c0:10:
38:76:02:e6:6c:09:f4:9f:59:f0:2d:c1:a1:79:83:
f0:54:ec:a0:da:82:e2:40:89:2e:0f:d9:95:95:23:
6f:6a:47:9b:c0:20:dc:8d:1f:d4:3c:48:c1:21:20:
12:3d:ea:ce:ef:ef:58:ca:51:96:93:37:7a:5e:79:
4d:03:35:2d:4d:5e:dd:65:a4:20:a6:c0:84:88:2e:
79:42:a2:a6:bb:0f:a8:99:f3:69:82:79:da:a9:0d:
87:fa:e8:23:44:56:b9:ba:9b:a2:14:e5:6f:bf:b8:
c3:85:ca:1a:12:a0:7d:02:f4:b1:9b:82:94:0d:74:
78:32:88:61:fb:b0:08:da:cf:cd:53:f8:2a:40:2c:
81:d8:b2:6c:88:21:24:6e:ba:3a:9e:4d:69:43:41:
9b:4e:96:2d:54:42:3f:3a:d4:7d:2b:6f:78:75:48:
eb:7e:46:e4:a5:09:ac:db:65:30:7e:de:79:51:5d:
13:ed:68:0a:51:7e:24:fe:0d:10:0c:4e:9a:ab:e9:
27:22:a2:06:af:ee:39:a6:ab:7d:d6:3d:0f:a6:c3:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:42:EF:E3:AC:2A:2D:BA:FF:DB:03:51:DC:74:28:E2:F1:6F:ED:07
X509v3 Authority Key Identifier:
keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32342d3234203d3e20323638303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.220.0/24
Signature Algorithm: sha256WithRSAEncryption
07:76:7c:c9:8d:2d:68:50:e5:c6:0f:10:95:a8:6c:d6:69:20:
6f:fc:4c:f5:c4:32:25:c7:b2:fd:cf:71:d7:dd:cd:b7:c1:a1:
9b:d0:8f:c2:70:c5:50:76:88:b1:b0:90:90:2a:3c:8d:82:30:
54:a9:3c:bc:d3:aa:ae:9f:cf:60:3e:ea:0f:f3:68:19:ce:2d:
b7:f1:7e:7d:2f:0f:f7:6e:d9:dc:35:15:f5:9f:73:68:08:3b:
90:bd:a0:14:5d:92:c2:9e:0d:a8:d5:0d:a4:be:16:48:b3:b8:
85:f8:17:20:a2:44:a4:c0:8b:31:f8:e6:d3:cc:f8:3b:97:61:
92:62:0b:54:9b:3f:5d:44:64:bb:03:20:57:87:4a:7c:8c:9a:
a4:2c:e7:b6:77:78:30:67:12:f6:9b:72:38:31:80:72:dd:95:
bf:d1:0f:57:3b:85:ab:10:f6:ad:d5:2e:4e:c0:fc:17:7b:74:
09:f8:e7:b6:b2:e9:2a:d4:5e:19:d4:f8:fc:0c:44:b4:b2:c7:
22:c1:01:03:ea:6a:79:2a:9d:3b:96:1a:67:e4:c9:10:dc:f9:
2c:77:3a:0a:29:1f:87:be:e1:88:14:0f:58:35:0b:1b:ee:72:
4a:15:4f:63:6d:67:99:31:c9:26:52:ab:d2:ee:17:cd:0f:74:
cf:a5:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:57 2025 by rpki-client