Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/34352e362e36342e302f32322d3234203d3e20323636313333.roa
File: 34352e362e36342e302f32322d3234203d3e20323636313333.roa (raw, json)
Hash identifier: 70c8ilAtNsx6ZRR4B18J5vKk7EFvQdc6PpjKXv8Tuns=
Subject key identifier: E9:A2:A4:0D:C1:87:41:74:64:32:01:C3:B3:68:76:F4:E1:08:03:D1
Certificate issuer: /CN=E2DD7F71F2616B50D18488FA622A57D4C8428DF8
Certificate serial: 60E88CE2EFC8E4ED686981B325DF262F41FC7586
Authority key identifier: E2:DD:7F:71:F2:61:6B:50:D1:84:88:FA:62:2A:57:D4:C8:42:8D:F8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/34352e362e36342e302f32322d3234203d3e20323636313333.roa
Signing time: Thu 06 Mar 2025 00:39:05 +0000
ROA not before: Thu 06 Mar 2025 00:34:05 +0000
ROA not after: Thu 05 Mar 2026 00:39:05 +0000
asID: 266133
IP address blocks: 45.6.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e8:8c:e2:ef:c8:e4:ed:68:69:81:b3:25:df:26:2f:41:fc:75:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2DD7F71F2616B50D18488FA622A57D4C8428DF8
Validity
Not Before: Mar 6 00:34:05 2025 GMT
Not After : Mar 5 00:39:05 2026 GMT
Subject: CN=E9A2A40DC1874174643201C3B36876F4E10803D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:7a:36:05:fc:34:20:a7:e4:fb:6f:68:dd:
82:05:77:4a:f2:03:64:d4:30:75:72:b5:41:54:6a:
71:b2:e3:57:76:cc:7a:26:e1:eb:3d:3b:63:c9:4c:
ec:c1:31:42:76:f8:ec:2e:93:2e:c6:6b:19:81:af:
b3:dc:9a:f7:cb:cd:74:24:93:67:c8:0d:7a:1b:36:
90:8f:eb:5a:2e:4e:15:4b:2c:e9:cf:7c:eb:81:d4:
7d:51:af:67:8d:35:8f:82:e7:84:9e:80:47:54:21:
cd:c3:ce:04:b4:7a:2d:7f:60:b0:19:f6:c5:21:53:
07:5d:7c:54:7a:31:c8:d2:80:de:1e:3a:dc:29:44:
29:eb:e5:6a:90:48:a7:14:a4:70:c0:c1:fe:32:39:
e2:36:55:99:01:22:d9:1e:8e:05:7e:f3:97:70:55:
be:1c:29:dd:cf:8c:63:25:dc:a3:97:63:2e:3b:db:
66:97:42:f9:93:97:f2:57:8d:9d:ae:3b:8f:9a:f4:
52:06:61:f6:c8:fa:95:5a:d6:0d:ab:5e:cb:0f:9c:
f5:9b:eb:8a:b6:11:ae:4f:e7:b2:5c:09:d4:06:19:
d4:6f:de:ea:1b:ff:a8:95:92:40:21:95:d0:74:08:
dc:fb:94:5d:da:36:85:3a:ee:ee:7a:3e:23:d3:71:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A2:A4:0D:C1:87:41:74:64:32:01:C3:B3:68:76:F4:E1:08:03:D1
X509v3 Authority Key Identifier:
keyid:E2:DD:7F:71:F2:61:6B:50:D1:84:88:FA:62:2A:57:D4:C8:42:8D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/34352e362e36342e302f32322d3234203d3e20323636313333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.64.0/22
Signature Algorithm: sha256WithRSAEncryption
15:32:e3:0a:ad:2e:63:5b:11:5f:5f:1a:ac:6c:82:5d:af:0d:
33:90:8d:d0:69:00:74:a9:35:b3:b0:da:72:bc:b0:c2:f1:a3:
13:dc:45:e4:ed:d2:fa:10:2a:c8:c1:a7:4c:23:83:8a:e5:a4:
03:ab:a9:6a:b6:05:ca:fc:a8:e4:02:db:00:17:18:5f:52:3b:
71:77:4e:e9:36:6a:b3:2e:bb:e9:fd:56:17:ce:6e:23:f9:ee:
b6:7a:66:e6:be:08:5c:54:eb:50:1c:fb:89:76:7c:04:3d:4b:
d6:30:cb:51:52:e6:1e:d5:6f:a1:f8:0a:fa:a9:b1:07:00:45:
88:ab:12:d5:c2:6b:85:53:a5:6c:ee:07:2e:8b:69:9f:58:01:
6f:7d:73:e0:81:09:d4:8f:97:b6:9e:3b:b6:61:2c:85:1d:55:
cf:ca:6e:be:ec:86:d9:ed:c6:6b:c6:be:7a:00:12:93:80:cc:
c3:59:cc:1c:83:9f:c3:4c:fa:0b:04:ec:b1:bf:e2:c2:44:f7:
87:4b:b0:08:b2:d9:bc:0b:04:40:62:e9:17:c1:45:24:a5:45:
bb:f5:58:67:fe:52:f8:00:c3:e1:12:e8:e3:a5:4d:dd:7a:6e:
a5:3f:3e:a2:81:5b:fd:c2:cf:53:f7:36:8d:54:d2:b1:d0:44:
32:33:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:22:07 2025 by rpki-client