Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
File: 34352e3233382e372e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier: c+k1+d/sjZSUaBNrDI1l+qsy27u6DbUZYnYp4jPfeO8=
Subject key identifier: C1:B6:A2:2E:C6:FE:2F:91:43:75:79:AC:5B:B0:F0:1B:E7:05:DB:95
Certificate issuer: /CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Certificate serial: 4117E2B8890A3A44EA9DE027C3BB580B682F3877
Authority key identifier: 92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
Signing time: Thu 04 Apr 2024 19:57:47 +0000
ROA not before: Thu 04 Apr 2024 19:52:47 +0000
ROA not after: Thu 03 Apr 2025 19:57:47 +0000
asID: 268308
IP address blocks: 45.238.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:17:e2:b8:89:0a:3a:44:ea:9d:e0:27:c3:bb:58:0b:68:2f:38:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Validity
Not Before: Apr 4 19:52:47 2024 GMT
Not After : Apr 3 19:57:47 2025 GMT
Subject: CN=C1B6A22EC6FE2F91437579AC5BB0F01BE705DB95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:ca:10:73:5e:17:a7:b9:8f:50:d1:d3:b7:
5a:30:82:ca:8d:81:f0:69:78:2c:db:4e:6b:e6:60:
dd:7d:14:76:e3:37:cf:a4:04:ad:9c:23:de:8d:e1:
07:0e:97:b2:d9:a9:ae:ad:10:eb:f8:cf:c5:ed:d4:
99:6e:2a:33:c1:60:e4:63:4d:7d:e1:c4:f8:b2:c8:
97:f6:9d:8b:45:27:22:fb:c0:e4:fb:20:fa:85:d2:
34:f9:b2:0d:38:8a:20:e5:da:b9:9f:9f:4c:37:c4:
8c:d3:ca:53:f6:5e:7d:44:8b:a9:7e:43:10:0d:5e:
83:96:e0:a2:13:f6:48:b2:4a:73:fd:25:8c:26:e1:
0c:fa:1b:66:91:41:9f:36:3d:87:00:60:b8:8c:52:
82:7f:24:72:75:5e:d9:f8:b1:97:c0:cc:98:1c:bc:
a4:61:21:c4:f1:19:90:5e:86:99:f0:ad:39:6e:62:
70:6b:aa:0c:76:4a:87:6c:48:b9:5f:c1:9b:5c:7d:
a7:85:ae:4c:54:78:d7:42:9d:33:71:55:76:08:1e:
74:49:8d:4f:e1:9b:48:bc:d4:09:c4:f3:44:68:aa:
0b:f4:89:c6:87:a6:3a:1f:d7:00:4e:bc:f2:97:47:
fa:d2:62:84:59:1b:5b:9e:dd:c6:b4:f3:f5:62:ba:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:A2:2E:C6:FE:2F:91:43:75:79:AC:5B:B0:F0:1B:E7:05:DB:95
X509v3 Authority Key Identifier:
keyid:92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.7.0/24
Signature Algorithm: sha256WithRSAEncryption
62:67:39:a5:4e:91:e8:8f:37:cb:01:24:82:96:66:01:5c:10:
c9:54:62:b4:34:77:d6:fc:8f:c5:8e:b1:ff:db:31:9a:28:b6:
00:40:b9:93:03:28:36:42:c6:bc:6d:9b:3a:c7:92:32:88:a7:
f9:fb:c6:f7:ac:00:ac:4e:42:50:8d:05:3e:bf:6e:6d:ba:79:
28:d7:66:87:59:c6:77:26:78:63:65:f9:9d:16:c8:06:0c:4a:
77:ac:3d:fc:5a:eb:58:fb:87:2b:d3:3b:91:92:b3:9d:1d:af:
8b:7e:16:92:d5:26:5f:ad:b1:c2:f5:c5:ca:48:46:31:29:10:
ad:8a:0e:0b:c2:35:42:15:25:20:15:74:de:8c:09:b3:52:cf:
17:87:a6:8f:e8:3d:71:5f:02:48:21:7b:50:97:78:52:8f:7c:
2c:e8:4f:c9:0a:d2:69:3a:6d:17:a8:ae:a2:a9:8c:e9:0b:41:
d7:da:96:7c:d5:50:4e:26:ca:b8:ee:64:e3:f3:80:07:cd:ec:
4f:0a:cd:69:3c:40:5c:22:1a:17:54:57:9c:e5:61:f7:e3:66:
0e:32:a2:0c:b7:5e:03:88:ca:97:65:82:bf:18:a9:7c:25:e5:
7d:9c:fd:8b:18:25:18:0c:8b:c7:ed:58:ea:3f:a2:ba:b7:d9:
20:3e:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:43:42 2025 by rpki-client