Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e342e302f32322d3234203d3e20323638393235.roa
File: 34352e3137362e342e302f32322d3234203d3e20323638393235.roa (raw, json)
Hash identifier: lTMFOvcm3PqeMFA2Yy8Sp/IjARUjjKFFHgo/M2i9Y2s=
Subject key identifier: 03:3F:50:F8:6A:C0:4A:6A:7B:E9:B2:27:DD:5D:3C:A7:01:0F:3E:9C
Certificate issuer: /CN=39B45C4B950BA846649D6FB0A3CB544BA12A9D95
Certificate serial: 0A6BEA2D97B5315ABC750849BE1DB62D9F0857BF
Authority key identifier: 39:B4:5C:4B:95:0B:A8:46:64:9D:6F:B0:A3:CB:54:4B:A1:2A:9D:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e342e302f32322d3234203d3e20323638393235.roa
Signing time: Thu 13 Mar 2025 18:28:04 +0000
ROA not before: Thu 13 Mar 2025 18:23:04 +0000
ROA not after: Thu 12 Mar 2026 18:28:04 +0000
asID: 268925
IP address blocks: 45.176.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6b:ea:2d:97:b5:31:5a:bc:75:08:49:be:1d:b6:2d:9f:08:57:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39B45C4B950BA846649D6FB0A3CB544BA12A9D95
Validity
Not Before: Mar 13 18:23:04 2025 GMT
Not After : Mar 12 18:28:04 2026 GMT
Subject: CN=033F50F86AC04A6A7BE9B227DD5D3CA7010F3E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:32:04:c0:36:91:bc:45:a9:3e:f4:d1:fe:
df:65:e1:a4:d8:89:c9:12:15:6e:eb:45:1e:4f:f7:
f7:22:f4:de:66:c5:71:fd:9f:39:84:9b:d9:5e:47:
53:4a:db:f1:30:9e:4e:4a:f4:51:b0:7c:27:36:1f:
a3:41:6e:96:41:0e:33:79:ef:19:9f:bb:97:5e:3e:
ff:67:08:0b:d3:3a:6b:cb:fe:43:aa:23:61:b6:0e:
aa:a6:03:33:71:9a:dd:fe:80:42:47:f7:53:1a:21:
68:00:f5:8b:9c:4c:0c:f6:c5:f0:c4:aa:16:35:90:
aa:40:57:d0:06:d1:e7:6a:ae:43:35:28:49:2c:b3:
6f:d1:70:da:9e:dd:91:33:58:cb:ad:d9:12:eb:4e:
4f:9e:39:56:ca:e6:d4:e6:9e:3b:c4:8c:3c:00:17:
b8:c2:a2:bd:2f:aa:03:c5:4c:20:8b:40:56:3c:b7:
46:e8:e0:02:d1:d0:87:0a:a5:aa:c4:71:49:bf:81:
c3:bf:ff:23:8f:4a:22:f1:a0:d2:c6:f4:53:8b:40:
43:73:65:1f:16:d2:df:b0:eb:1f:46:19:69:50:f4:
15:19:0c:2b:28:c1:09:10:e1:aa:a9:af:cf:ba:ce:
ab:a2:b9:14:06:af:ce:91:a7:a6:3e:c4:a7:13:b0:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:50:F8:6A:C0:4A:6A:7B:E9:B2:27:DD:5D:3C:A7:01:0F:3E:9C
X509v3 Authority Key Identifier:
keyid:39:B4:5C:4B:95:0B:A8:46:64:9D:6F:B0:A3:CB:54:4B:A1:2A:9D:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B45C4B950BA846649D6FB0A3CB544BA12A9D95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/0/34352e3137362e342e302f32322d3234203d3e20323638393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.4.0/22
Signature Algorithm: sha256WithRSAEncryption
17:aa:3a:37:f1:29:97:34:da:c6:2f:8c:73:c9:f7:3b:87:ee:
ce:0b:1c:5f:8b:3a:78:67:f6:d2:9c:ed:25:7e:c5:f2:89:46:
cb:1f:7b:64:5e:40:dd:9a:29:be:e0:24:c5:16:25:ad:d9:79:
f7:2a:0a:86:8f:21:de:ae:46:77:92:b1:7a:19:58:a0:2f:87:
f4:b2:e9:0d:2e:e8:51:f8:c7:d5:8f:d2:6a:82:3b:86:8d:2d:
82:09:08:5b:d9:12:a0:e5:20:67:14:69:07:12:50:aa:14:0b:
33:e5:8e:59:ae:81:06:09:46:1c:79:97:10:5c:b9:0d:14:fc:
13:09:36:76:03:c8:32:50:95:a5:7e:a4:bf:47:ae:38:cc:8a:
7f:6f:10:bd:5a:de:44:a4:1b:ea:b2:7a:78:db:6f:08:42:9a:
0d:ed:75:81:4d:55:b2:f9:53:a5:13:12:33:cf:cb:bb:ee:3b:
ea:b3:5c:4c:4e:bd:98:e2:41:87:f6:00:25:10:c1:e8:31:cf:
46:78:9e:37:9c:e0:2d:a0:13:08:27:c4:8a:3c:46:24:de:61:
c7:90:50:06:e9:77:21:ec:71:90:ba:c1:a9:f2:6d:1e:29:2d:
40:a5:31:ac:74:7c:08:12:ee:b6:ca:b4:ea:e1:70:56:2c:f6:
81:84:0f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:29:15 2025 by rpki-client