Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/34352e3137322e3230382e302f32342d3234203d3e20323634313030.roa
File: 34352e3137322e3230382e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier: nHGqdUAlAUPLOYfiPbt4Gn2k5WjhjQb36nBWclVICe0=
Subject key identifier: B8:40:64:DC:F1:D3:40:7D:B3:7D:2A:AD:01:24:8E:24:8A:8F:7F:75
Certificate issuer: /CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Certificate serial: 63EC39D959AA205F89BB316B8E668674C60CD5FA
Authority key identifier: 9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/34352e3137322e3230382e302f32342d3234203d3e20323634313030.roa
Signing time: Mon 02 Dec 2024 12:06:38 +0000
ROA not before: Mon 02 Dec 2024 12:01:38 +0000
ROA not after: Mon 01 Dec 2025 12:06:38 +0000
asID: 264100
IP address blocks: 45.172.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:ec:39:d9:59:aa:20:5f:89:bb:31:6b:8e:66:86:74:c6:0c:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C69433B8D6274966EFAB9F616C73F596D0026FA
Validity
Not Before: Dec 2 12:01:38 2024 GMT
Not After : Dec 1 12:06:38 2025 GMT
Subject: CN=B84064DCF1D3407DB37D2AAD01248E248A8F7F75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:43:36:83:da:7c:3a:df:4d:1a:40:93:ad:
2e:ce:0e:3d:a4:0d:61:e4:98:eb:51:46:a9:f2:b0:
07:62:28:16:d1:73:3b:5a:7d:b4:a5:6e:c9:e5:b9:
be:1c:37:8e:76:94:bd:1f:6d:86:89:13:18:96:84:
bc:6d:9a:e1:09:46:47:c0:27:90:88:19:1e:92:fb:
ce:e0:69:40:d1:bd:30:0e:d9:ad:34:17:d4:5f:68:
bd:68:f3:98:33:2f:1c:23:07:b2:23:69:69:d0:9f:
bc:11:28:a8:16:bd:ac:17:12:3f:e9:9e:72:b1:e7:
fd:d7:26:09:e7:0f:d2:07:96:fe:c0:b8:94:fe:36:
96:b0:73:9f:dd:ea:69:3d:e2:4b:8b:38:56:47:00:
39:4c:82:64:92:c3:dd:36:80:e1:f2:bb:64:2c:c5:
e9:68:ea:a1:d1:1d:cc:62:c7:a2:df:ae:c5:8e:08:
02:a0:6f:be:14:e8:ad:2d:71:5f:b2:6f:a1:40:4c:
01:d7:74:61:17:70:e3:3b:dc:51:7d:68:da:14:ab:
fb:82:47:4a:5f:2c:08:21:04:34:90:bf:16:6c:11:
a6:b5:79:78:d4:bb:ed:48:a9:74:f2:99:bd:16:c8:
a8:f6:1d:e3:86:85:d7:b6:97:bb:1a:9f:a8:e4:68:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:64:DC:F1:D3:40:7D:B3:7D:2A:AD:01:24:8E:24:8A:8F:7F:75
X509v3 Authority Key Identifier:
keyid:9C:69:43:3B:8D:62:74:96:6E:FA:B9:F6:16:C7:3F:59:6D:00:26:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/9C69433B8D6274966EFAB9F616C73F596D0026FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C69433B8D6274966EFAB9F616C73F596D0026FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6gQzrWBgd6XKxxsYda2xQdTjRD7wy12EmHzHcXtv7B9g/0/34352e3137322e3230382e302f32342d3234203d3e20323634313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.208.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5a:e7:f3:c3:ea:23:a9:f9:f1:f8:f9:09:10:cf:e1:3e:d6:
33:de:f8:42:8c:b7:b8:2f:2c:38:a9:f5:3e:72:7a:cf:12:89:
96:28:71:2d:cd:5c:6b:e4:b3:b6:f4:e0:82:60:11:ce:86:4d:
a0:1e:71:2f:04:22:54:48:64:06:77:ba:4d:38:5e:8a:4e:e4:
51:28:53:42:bf:e7:40:80:49:52:88:6d:4b:2e:1a:37:4b:8b:
e1:28:39:67:d7:3a:66:86:19:8c:9c:9a:5e:8d:21:f3:ac:79:
7a:de:4c:6a:64:94:ac:b5:2b:30:c2:f7:88:d2:45:f0:98:56:
50:c5:47:bd:cb:01:08:1d:24:63:22:08:46:b8:5f:0b:15:0c:
50:81:bd:1e:44:1e:0b:97:a1:88:e6:48:7d:06:0b:84:b3:d4:
8c:e0:c4:55:1f:d1:0e:7f:b5:9c:ad:1a:8d:de:ff:fc:da:2a:
61:ac:bf:94:f3:61:76:52:df:0c:56:01:a2:b6:9d:0f:93:42:
c2:ce:45:f6:93:0b:16:90:84:f4:7b:9f:6a:b1:99:8b:02:9f:
12:3d:12:20:eb:2c:fd:be:71:4a:f6:d6:31:cf:3a:33:6e:d2:
51:14:6c:a5:46:f7:e8:9c:78:28:77:61:dc:25:a8:b5:02:2c:
9c:21:12:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:30:06 2025 by rpki-client