Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa
File: 34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa (raw, json)
Hash identifier: On0dGlaSVWrT6BujHBQaBp5W69TJZDL2QCYhhErsMrg=
Subject key identifier: 15:7D:3B:86:9D:05:35:5C:F8:DF:6B:32:8A:EA:C3:7D:14:B6:00:D7
Certificate issuer: /CN=569BF931593F4C319AE13FDDED528F2CBDC53798
Certificate serial: 288E024C984845B812B78DAD727416C39C3411CF
Authority key identifier: 56:9B:F9:31:59:3F:4C:31:9A:E1:3F:DD:ED:52:8F:2C:BD:C5:37:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/569BF931593F4C319AE13FDDED528F2CBDC53798.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa
Signing time: Tue 04 Feb 2025 20:34:52 +0000
ROA not before: Tue 04 Feb 2025 20:29:52 +0000
ROA not after: Tue 03 Feb 2026 20:34:52 +0000
asID: 273400
IP address blocks: 45.172.174.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8e:02:4c:98:48:45:b8:12:b7:8d:ad:72:74:16:c3:9c:34:11:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=569BF931593F4C319AE13FDDED528F2CBDC53798
Validity
Not Before: Feb 4 20:29:52 2025 GMT
Not After : Feb 3 20:34:52 2026 GMT
Subject: CN=157D3B869D05355CF8DF6B328AEAC37D14B600D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:04:e1:e6:ef:df:1f:a8:5a:0e:09:c6:f1:
0f:36:4c:83:ab:99:39:aa:5d:81:14:cb:e6:e7:38:
07:85:c7:e0:9c:53:40:d7:d1:f7:74:af:d7:79:9d:
98:9e:ec:7d:1d:13:41:38:10:38:ee:34:27:3f:b5:
1a:12:e6:33:7c:33:cf:84:eb:39:73:f6:17:6a:16:
f2:f6:88:99:e6:e1:22:23:21:78:33:10:99:e5:0d:
e1:dd:2b:c1:e5:b5:a0:79:f6:ef:a2:17:8d:d4:1a:
60:60:88:63:0f:b8:c0:59:f3:de:16:86:53:9f:a6:
4e:f3:06:0b:f3:91:31:2d:49:ff:df:51:38:13:ef:
22:1a:ec:01:09:80:6b:b5:35:12:b2:6c:bb:63:d6:
0c:d8:fb:4f:0a:ae:26:eb:3c:72:9b:5e:84:14:5c:
49:4e:ce:fa:67:dd:2a:72:1d:33:25:61:02:28:bb:
ec:98:6a:b4:47:1f:be:5a:ab:60:fb:ee:9f:6a:c7:
49:9c:02:94:aa:62:73:27:24:9c:e9:c6:a3:3e:78:
c9:d4:63:b8:4b:ae:4d:d1:2a:96:36:8d:04:1e:bf:
ca:e6:1d:b0:7e:22:aa:0d:04:9d:8c:15:0f:fa:12:
a2:3b:fe:7e:61:ed:59:66:de:76:f5:b9:60:cc:d3:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:3B:86:9D:05:35:5C:F8:DF:6B:32:8A:EA:C3:7D:14:B6:00:D7
X509v3 Authority Key Identifier:
keyid:56:9B:F9:31:59:3F:4C:31:9A:E1:3F:DD:ED:52:8F:2C:BD:C5:37:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/569BF931593F4C319AE13FDDED528F2CBDC53798.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/569BF931593F4C319AE13FDDED528F2CBDC53798.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/34352e3137322e3137342e302f32332d3332203d3e20323733343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.174.0/23
Signature Algorithm: sha256WithRSAEncryption
23:23:20:01:4f:37:ce:ae:f7:0e:98:52:d9:b3:c5:df:e1:d0:
59:70:e0:42:cb:5e:63:4f:d6:c3:0c:b8:3a:7e:1e:ad:ab:98:
9b:68:ab:7a:9c:38:c9:a1:f2:3e:29:b3:11:93:dc:e3:59:47:
54:7a:0d:f6:06:37:69:1d:3e:25:1f:41:d1:a2:f2:34:08:45:
6a:3a:15:c2:22:cb:fd:3b:53:e1:67:1b:29:ac:2d:a4:07:94:
1f:cc:65:07:5d:20:dc:68:12:02:b5:64:57:58:e9:94:80:92:
f5:65:3e:9e:10:f4:e9:f5:64:8d:b6:b1:d5:40:cc:66:28:dd:
44:db:85:26:d5:72:0c:3f:ae:f9:7a:f0:99:fb:5d:14:2f:de:
15:eb:62:3a:c8:1e:91:09:4a:dc:0a:95:a7:35:5b:a6:75:3e:
b5:6e:56:59:b2:eb:e9:bb:9d:21:84:04:6c:a2:1c:d7:60:b4:
04:bc:43:01:f8:b1:ce:a5:21:25:63:82:47:dd:e2:6b:89:d0:
d9:2a:94:a3:ae:32:5e:93:2c:c1:8a:ca:b3:09:5e:c6:17:bd:
ae:fa:1d:c0:5e:53:96:87:f3:4c:1b:86:2f:66:0a:a0:45:3d:
19:4d:b3:42:ae:de:47:42:02:ee:f3:32:6d:2f:ac:55:e1:8b:
eb:9a:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:47:58 2025 by rpki-client