Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa
File: 34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa (raw, json)
Hash identifier: kDjxK1HFVci49JjezuUeIeg2CGI+pZ7fxkHjXfF050E=
Subject key identifier: DC:A8:05:FA:96:16:6A:31:F3:BC:54:49:72:AD:2E:66:EC:48:5C:D1
Certificate issuer: /CN=0E89BA0F1B8976E93E5667B6247B76FED8354084
Certificate serial: 6BD88B5B1731E2F9575FC804CC642894DEEEEC70
Authority key identifier: 0E:89:BA:0F:1B:89:76:E9:3E:56:67:B6:24:7B:76:FE:D8:35:40:84
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E89BA0F1B8976E93E5667B6247B76FED8354084.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa
Signing time: Thu 06 Mar 2025 20:17:52 +0000
ROA not before: Thu 06 Mar 2025 20:12:52 +0000
ROA not after: Thu 05 Mar 2026 20:17:52 +0000
asID: 268216
IP address blocks: 45.235.248.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:d8:8b:5b:17:31:e2:f9:57:5f:c8:04:cc:64:28:94:de:ee:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E89BA0F1B8976E93E5667B6247B76FED8354084
Validity
Not Before: Mar 6 20:12:52 2025 GMT
Not After : Mar 5 20:17:52 2026 GMT
Subject: CN=DCA805FA96166A31F3BC544972AD2E66EC485CD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:28:e0:6c:39:ab:c0:4c:53:de:b9:99:40:
95:ef:84:d9:40:05:e9:ac:b8:70:bd:14:3b:cb:91:
5c:ac:fa:62:a6:15:d6:cd:31:7a:42:e1:49:c6:ff:
0a:fb:53:1d:9f:d2:3b:56:22:39:d6:9f:1f:44:7d:
fe:82:7a:6d:af:8c:1f:57:42:8a:02:87:73:4e:38:
28:ad:9b:1f:ab:f3:da:61:9a:71:09:69:c1:b3:d0:
70:19:bf:c6:20:ef:61:ec:0e:cb:45:bb:8e:1e:5e:
2e:f1:9e:2f:36:22:5e:81:7c:88:93:f8:fb:70:43:
7b:09:7c:57:b7:d6:78:7f:7e:ab:ac:f3:60:5c:d0:
7c:cc:35:b6:01:ef:f4:92:20:4f:0b:9e:04:a5:fd:
70:48:36:87:44:18:e2:61:3d:a0:fd:ec:d3:57:b8:
5b:e3:fc:6a:49:7b:44:98:27:3b:b0:c6:5b:03:9c:
07:0e:40:ca:0f:3a:02:0b:53:5d:5a:94:f0:72:84:
55:d1:fb:da:7d:54:60:52:84:3d:ff:6d:ee:e8:23:
2a:9f:12:1f:49:66:c3:dd:f0:86:2b:38:10:7c:10:
c5:40:ca:31:b3:15:cc:6a:5b:fc:66:80:1a:b1:84:
f3:db:b5:90:84:32:04:7d:7d:d3:c5:32:14:5e:91:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A8:05:FA:96:16:6A:31:F3:BC:54:49:72:AD:2E:66:EC:48:5C:D1
X509v3 Authority Key Identifier:
keyid:0E:89:BA:0F:1B:89:76:E9:3E:56:67:B6:24:7B:76:FE:D8:35:40:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/0E89BA0F1B8976E93E5667B6247B76FED8354084.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E89BA0F1B8976E93E5667B6247B76FED8354084.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6arn5RgCGYX3HA1VT6ctm616jh476pgirgnNS4mRrCiy/0/34352e3233352e3234382e302f32322d3332203d3e20323638323136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:20:2e:15:f4:e5:8c:0c:3e:55:08:4f:8a:25:ae:f3:ee:a5:
38:c3:7d:fa:a7:ce:0f:2e:bb:ad:14:0b:ad:d0:39:23:e7:01:
2d:87:bd:ec:58:60:fb:92:ca:09:0c:19:35:4b:46:e9:d5:d4:
87:07:29:92:80:51:e1:c7:6e:d2:5c:fb:ea:1f:45:b4:25:47:
ad:33:b0:1e:86:48:af:5f:e7:89:46:89:2f:1a:b6:91:79:22:
40:25:28:63:b5:c1:95:8a:f3:f1:a4:67:99:c9:44:2f:e9:b0:
bb:2a:9e:44:5f:9a:f1:9a:c5:ab:91:bc:a4:ef:05:58:fa:68:
67:14:1e:f4:27:b3:b6:82:88:22:09:e6:45:84:cc:2d:e2:7a:
74:1e:b6:ef:f5:f2:d1:15:e0:f6:65:2b:2c:4a:8f:ed:f1:77:
4a:30:1c:84:67:b6:7a:7d:fc:ab:14:29:36:2d:fe:99:61:14:
f9:11:56:f1:42:b8:20:63:8c:98:f8:e4:db:2f:6c:15:78:73:
9d:33:4d:4d:81:2d:7f:52:04:49:48:5a:be:0e:a6:9b:bb:05:
f5:41:c7:91:2a:d9:7e:c2:c2:67:58:ff:40:7c:b3:da:a1:d9:
8e:43:2b:2e:f6:2e:23:4c:e3:42:16:c3:5c:63:ce:d9:e8:ad:
ff:b1:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:34 2025 by rpki-client