Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232312e302f32342d3234203d3e20323638303932.roa
File: 34352e3136382e3232312e302f32342d3234203d3e20323638303932.roa (raw, json)
Hash identifier: hirZ8Tjal77CNFhm7/iXM4OgsX2H+ZKNiPRPCZHr7Fg=
Subject key identifier: 7C:1D:AD:94:21:BF:55:3C:47:74:0F:A2:8F:48:0E:BA:86:B2:EC:AD
Certificate issuer: /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial: 0C069B9A5A0368AC142BEE38F7BD697B877D5F98
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232312e302f32342d3234203d3e20323638303932.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 268092
IP address blocks: 45.168.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:06:9b:9a:5a:03:68:ac:14:2b:ee:38:f7:bd:69:7b:87:7d:5f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=7C1DAD9421BF553C47740FA28F480EBA86B2ECAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8e:58:b9:cd:4f:d7:ab:7f:ca:1b:aa:ae:36:
a3:92:ee:9a:b1:b4:9e:47:8d:69:db:0d:82:63:7a:
86:93:9b:38:bd:a7:a2:b2:7b:c6:0c:a5:ff:23:cd:
53:06:d3:bc:b4:71:19:ef:bc:dc:24:06:12:9b:91:
87:ac:e4:9c:9d:a0:14:ca:ef:23:7d:02:b5:67:1c:
f6:78:86:b6:31:f5:3d:57:54:5c:6a:89:08:6b:27:
7e:7c:8f:1c:90:77:41:d9:de:56:82:f0:f8:e8:bf:
b8:e4:b3:50:92:d3:52:81:d3:b8:0e:60:16:30:e4:
c1:ce:e4:70:8e:03:84:b5:87:93:61:61:02:3f:c8:
fc:56:44:d2:03:d5:47:4d:75:da:79:1a:53:76:15:
19:43:e9:5a:89:89:af:fe:1e:06:44:db:2c:ca:c5:
50:83:f6:2b:af:d2:b9:46:d3:2b:68:d7:7c:59:96:
26:93:3d:a8:78:62:0a:48:92:71:3e:10:02:bc:31:
5c:7a:04:e4:29:ae:69:21:76:90:b3:64:fe:9b:56:
4c:a1:85:60:c2:bd:08:83:e1:e1:0d:8a:ac:b0:8a:
21:d4:73:f8:db:e3:d0:6e:bc:86:ab:23:fe:9b:b9:
cc:c5:f3:45:74:06:16:d7:e1:b2:fe:45:72:44:69:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:AD:94:21:BF:55:3C:47:74:0F:A2:8F:48:0E:BA:86:B2:EC:AD
X509v3 Authority Key Identifier:
keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232312e302f32342d3234203d3e20323638303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.221.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cd:48:98:90:98:da:13:57:85:f5:0d:ba:63:0c:18:37:4d:
06:9f:85:ad:53:b3:69:46:ce:a9:6c:40:da:58:9f:c1:5a:c7:
67:95:0c:ed:d5:ce:5f:16:3c:55:b2:42:c6:80:ef:b4:e4:1a:
81:00:65:f0:f6:ae:86:ed:f7:02:d7:c6:70:24:87:a1:60:70:
8d:30:7d:d2:86:e8:49:99:02:ba:10:b3:4c:d8:f8:a2:b5:90:
84:61:be:b8:05:b2:60:ed:e6:e2:a5:03:73:a8:79:cc:99:1e:
c5:ec:3d:00:46:3d:17:7a:69:84:8a:7c:d8:36:ea:8b:f7:0f:
e4:31:fb:b1:9b:f8:d1:e4:f7:71:11:09:12:80:c6:a5:2c:b3:
1b:e4:e0:44:b8:50:b7:ff:1d:07:2d:e8:aa:29:f0:0d:75:aa:
21:b2:23:59:3d:2f:c9:f4:ad:7c:fe:7b:31:ff:95:fe:91:d5:
cb:c6:43:f8:70:dd:cc:a5:38:ab:b0:f0:f3:b5:35:92:76:2c:
b2:2a:4b:2d:fa:42:9b:2d:69:bd:f2:3d:45:18:93:da:6a:fb:
b4:8c:63:78:5e:94:82:2e:d1:fa:6d:08:ea:3a:93:05:79:64:
3b:c1:2e:df:fc:75:56:ff:e0:fd:22:fc:25:f1:f4:94:d9:0f:
43:aa:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:16 2025 by rpki-client