Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32342d3234203d3e20323639363637.roa
File: 34352e3139312e36302e302f32342d3234203d3e20323639363637.roa (raw, json)
Hash identifier: 7nfs0mZqQRlBIgoqIpHxm7jYDUt+CIl/Tm0zwdOTD80=
Subject key identifier: 71:DB:74:57:59:0E:DB:46:AA:0C:C6:51:AA:B7:3E:AC:F2:75:0F:95
Certificate issuer: /CN=FB5EF042BD78A22553B5ED9830EF05043520648D
Certificate serial: 436132478DC4B20D64647DAA7C5517D61FA35553
Authority key identifier: FB:5E:F0:42:BD:78:A2:25:53:B5:ED:98:30:EF:05:04:35:20:64:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5EF042BD78A22553B5ED9830EF05043520648D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32342d3234203d3e20323639363637.roa
Signing time: Thu 13 Mar 2025 19:12:10 +0000
ROA not before: Thu 13 Mar 2025 19:07:10 +0000
ROA not after: Thu 12 Mar 2026 19:12:10 +0000
asID: 269667
IP address blocks: 45.191.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:61:32:47:8d:c4:b2:0d:64:64:7d:aa:7c:55:17:d6:1f:a3:55:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB5EF042BD78A22553B5ED9830EF05043520648D
Validity
Not Before: Mar 13 19:07:10 2025 GMT
Not After : Mar 12 19:12:10 2026 GMT
Subject: CN=71DB7457590EDB46AA0CC651AAB73EACF2750F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:96:03:ae:f7:69:72:6c:51:25:89:8b:1f:
26:00:63:4e:1e:53:9e:8e:71:75:11:22:d0:ff:6b:
3b:f6:3a:65:4d:68:26:09:6d:0a:b6:43:59:2e:25:
ec:e1:96:1d:79:6c:87:44:63:db:38:b3:93:fd:aa:
0f:a9:62:21:35:c9:1c:b2:79:40:c3:a4:c1:55:e0:
d6:9c:c4:24:c5:5c:7f:51:ed:80:6c:de:25:3c:c1:
db:52:b1:52:be:99:1e:c6:de:f8:92:da:6b:bb:7c:
94:b5:b4:88:12:b8:32:10:e5:2b:76:49:ef:6c:e5:
1b:8a:e9:02:d6:42:34:c8:34:07:a3:42:b1:76:a1:
ab:8f:a4:e0:9e:18:c5:da:cb:de:3c:e4:73:eb:dd:
f0:33:35:77:7d:eb:23:3d:09:49:15:8f:12:12:4b:
35:20:ff:e1:b9:22:86:e7:1c:32:9d:eb:0d:01:7d:
06:69:54:bb:7e:d4:94:e8:56:ba:5a:3b:80:bd:a9:
5a:0e:0c:ce:58:59:f8:4c:83:e6:57:95:ee:df:20:
97:89:5f:9f:5b:34:52:2f:09:4a:29:96:88:0d:7d:
9a:d0:99:af:08:b1:15:4c:a5:27:d2:7c:1a:10:11:
ec:4d:fd:40:86:99:2d:2f:07:56:51:7a:c9:78:ca:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:74:57:59:0E:DB:46:AA:0C:C6:51:AA:B7:3E:AC:F2:75:0F:95
X509v3 Authority Key Identifier:
keyid:FB:5E:F0:42:BD:78:A2:25:53:B5:ED:98:30:EF:05:04:35:20:64:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/FB5EF042BD78A22553B5ED9830EF05043520648D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5EF042BD78A22553B5ED9830EF05043520648D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32342d3234203d3e20323639363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:69:27:95:2f:0b:fb:41:68:53:1f:81:f2:6f:66:51:1f:78:
08:5e:ed:2c:ad:89:7c:70:8c:72:14:28:4b:a7:46:6b:78:65:
2c:0a:68:90:87:1e:92:6f:b1:65:13:d3:55:fe:de:3d:06:16:
8d:fc:db:12:cb:e4:85:9c:53:ce:65:fd:ce:d8:09:df:a1:b5:
ba:78:f4:21:ee:ce:54:de:65:e1:c0:42:e7:d0:b2:46:ec:ba:
4e:15:33:c8:da:42:45:24:1f:f7:c4:b5:b1:f0:bc:fd:43:f5:
eb:bd:4d:bc:9c:13:60:11:44:20:36:86:10:33:87:de:06:f0:
62:c7:f4:d4:bb:2a:ae:0a:67:b9:8b:d9:04:4d:08:be:d9:b6:
ec:23:10:1f:f4:b2:40:8b:b2:43:ff:82:0d:ee:64:4d:4b:b7:
89:7c:4d:e1:a8:ff:b1:96:57:71:d0:ea:ed:b1:32:8a:c0:a5:
33:65:b8:9f:04:63:f2:c6:2a:23:e5:3e:90:fa:f4:39:41:cd:
4f:32:47:be:52:9c:19:3d:95:23:b5:bd:67:cd:98:01:0a:38:
04:22:ad:91:5e:fa:30:0c:b1:26:c9:67:69:e7:b8:77:b3:6c:
40:50:e2:cf:3f:6b:b5:62:7d:bb:e0:dc:c5:18:1b:d1:13:6e:
bd:3e:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:50:06 2025 by rpki-client