Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
File: 34352e3233382e342e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier: JqzxExFHfbZ7ivzV67MRZuU1Kk4qmkubiQqqt4+LJEc=
Subject key identifier: 94:BD:EE:48:9E:EC:2C:EA:EF:BD:02:F7:2B:54:6D:2A:8F:C1:FF:D1
Certificate issuer: /CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Certificate serial: 6C16939F21F3C9A3F56A16C6B3B74D378AA3020A
Authority key identifier: 92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
Signing time: Thu 04 Apr 2024 19:57:47 +0000
ROA not before: Thu 04 Apr 2024 19:52:47 +0000
ROA not after: Thu 03 Apr 2025 19:57:47 +0000
asID: 268308
IP address blocks: 45.238.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:16:93:9f:21:f3:c9:a3:f5:6a:16:c6:b3:b7:4d:37:8a:a3:02:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Validity
Not Before: Apr 4 19:52:47 2024 GMT
Not After : Apr 3 19:57:47 2025 GMT
Subject: CN=94BDEE489EEC2CEAEFBD02F72B546D2A8FC1FFD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:4a:9a:9c:6c:c2:94:34:98:a9:ad:b2:d1:
a0:42:8a:3a:bf:d1:e9:3a:30:6a:ef:c1:0a:92:f9:
4e:49:80:8e:14:61:44:ee:2b:39:70:3a:d6:94:8d:
71:8e:66:7e:14:77:ef:4c:f8:87:eb:53:8e:45:27:
1a:62:d2:c5:4b:6b:2e:45:79:17:d7:72:0e:dd:40:
89:49:7e:e2:b1:bd:0c:25:04:9e:d0:b7:fd:5b:6a:
95:f6:53:d1:ae:77:e9:da:be:31:ca:5c:fa:14:99:
64:e5:d1:23:81:08:fe:ee:47:d2:32:bc:05:26:9a:
d0:a5:a1:6f:1d:5a:6f:3b:38:d2:d3:18:33:ad:a2:
eb:3a:4f:30:9f:a0:6e:e3:13:56:6c:1a:a0:5e:f8:
49:0e:08:de:00:2a:7c:24:49:f5:ff:aa:07:c8:11:
b1:20:26:e1:b7:80:db:0a:fc:38:74:4a:7d:1d:1e:
93:af:c2:ce:49:08:55:0e:61:bc:4c:a9:e8:b1:51:
f7:d9:98:f4:25:66:ed:89:2a:1b:da:e3:f9:3d:96:
9e:5d:2e:a0:f8:f2:ec:3e:96:d7:38:9a:61:b8:5d:
32:26:17:46:d3:bf:7e:a5:8d:72:95:19:44:1c:bf:
2b:26:d5:3b:df:2d:9e:f5:f0:b9:d6:e9:8c:5f:00:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BD:EE:48:9E:EC:2C:EA:EF:BD:02:F7:2B:54:6D:2A:8F:C1:FF:D1
X509v3 Authority Key Identifier:
keyid:92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e342e302f32342d3234203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.4.0/24
Signature Algorithm: sha256WithRSAEncryption
57:09:b6:6d:84:18:2c:cf:de:77:36:60:06:e1:c8:01:42:35:
84:7e:31:53:de:e2:24:26:51:97:8e:8a:02:23:40:4e:4a:27:
aa:a7:9f:8d:ec:fe:4a:e9:ba:54:a4:49:99:be:57:bd:f5:11:
cb:3a:a1:0f:f3:83:a5:9f:8c:c7:e7:1a:7f:60:e9:f0:20:b1:
28:6a:67:e8:ab:4b:38:28:0c:27:f6:06:fb:62:de:c0:89:ff:
ec:97:6b:61:da:82:98:3c:8a:e0:d2:20:3d:f4:0f:8c:a0:19:
3a:5b:f3:51:7d:3a:0f:20:f7:b7:e2:3b:1a:5f:d0:8f:8f:88:
4e:57:8f:26:2f:89:68:52:38:b4:b1:e2:b3:71:78:9e:4c:a8:
30:43:47:1f:2c:40:2a:f0:89:20:5f:b4:de:3a:1e:18:f1:32:
6a:d6:43:d0:4f:66:a8:37:c5:82:63:82:a8:d5:6b:2e:6f:45:
cd:5b:4f:a9:a3:3d:0c:29:d9:8b:4d:37:b4:bf:a1:54:d0:32:
c4:cb:6c:95:d6:4a:fb:ba:1c:b6:88:1e:e4:88:c4:77:2c:0b:
6c:53:0b:7c:8e:c7:1e:c0:2a:a5:1a:80:d7:a2:8f:2a:60:06:
07:13:eb:3f:77:02:5c:96:1b:60:6c:98:c0:64:57:be:77:b6:
ed:d4:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:43:40 2025 by rpki-client