Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa
File: 34352e3136352e39362e302f32322d3232203d3e20323638363734.roa (raw, json)
Hash identifier: F0iJJLK+qtzIFyRLpy0EyTtly0FRV+JWkpb8raqK7Ug=
Subject key identifier: 36:A9:7E:B2:66:32:7F:B8:F4:83:06:42:DF:53:88:47:E4:F1:7E:B4
Certificate issuer: /CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Certificate serial: 3B62BFF85E94DAE20F20A58E03DB286B8FB9374F
Authority key identifier: DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa
Signing time: Thu 06 Mar 2025 19:00:12 +0000
ROA not before: Thu 06 Mar 2025 18:55:12 +0000
ROA not after: Thu 05 Mar 2026 19:00:12 +0000
asID: 268674
IP address blocks: 45.165.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:62:bf:f8:5e:94:da:e2:0f:20:a5:8e:03:db:28:6b:8f:b9:37:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEA478CF34A11C2016DD7ED26FDC9421A6EE294D
Validity
Not Before: Mar 6 18:55:12 2025 GMT
Not After : Mar 5 19:00:12 2026 GMT
Subject: CN=36A97EB266327FB8F4830642DF538847E4F17EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:9e:bc:04:db:5b:df:55:16:88:9c:e3:ed:
ba:1d:7c:be:62:1f:0b:62:a5:0e:fd:a5:40:5b:b3:
32:eb:ea:4b:db:74:e0:76:2a:dc:21:51:0c:27:89:
eb:29:ec:c0:c2:43:48:c0:5e:f8:e1:2b:18:ee:6c:
16:04:46:ae:59:5e:e8:2d:22:88:d3:4d:fa:5e:b2:
be:47:90:b6:2a:30:97:db:df:e6:dc:24:b5:3d:86:
1e:ea:29:df:34:3a:d8:67:b5:60:81:4f:e5:85:b9:
d1:53:85:90:cb:90:0e:f5:c2:e1:f5:d1:d9:de:ea:
ae:6b:62:e5:5b:19:44:02:cf:dc:56:04:06:ff:76:
b6:b1:8e:e9:60:dc:5e:35:4b:bb:c5:3b:c7:15:91:
5a:07:0b:ab:45:61:d8:84:ca:30:53:1e:88:00:af:
fa:a4:96:71:6c:3b:d9:eb:8d:21:8c:0c:53:60:36:
63:5d:45:bc:64:6a:01:11:30:8b:c4:9c:bf:13:b1:
c6:29:da:fb:b0:43:5a:db:77:9b:e6:00:91:28:15:
2f:0b:80:0f:c9:da:dc:ca:0d:9d:3c:74:8d:cf:fc:
24:ae:65:9f:b8:ad:45:53:b7:7d:12:61:3d:8c:7f:
ca:34:49:86:ef:3a:73:1a:8f:6b:6e:35:c9:0e:38:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:7E:B2:66:32:7F:B8:F4:83:06:42:DF:53:88:47:E4:F1:7E:B4
X509v3 Authority Key Identifier:
keyid:DE:A4:78:CF:34:A1:1C:20:16:DD:7E:D2:6F:DC:94:21:A6:EE:29:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEA478CF34A11C2016DD7ED26FDC9421A6EE294D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/1/34352e3136352e39362e302f32322d3232203d3e20323638363734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:45:7c:eb:6a:1b:fe:66:c7:2f:7c:a8:cc:da:9d:07:08:71:
70:ce:51:6d:a7:52:8e:8e:c8:35:b7:2b:d4:d4:6c:6d:ac:c7:
24:00:11:d5:2c:b7:5e:cd:13:a7:de:de:45:c8:53:12:d5:0c:
82:fa:7f:11:83:d1:41:5c:42:64:3d:f0:db:1c:fb:7e:7b:f2:
8e:46:62:60:c7:ef:f0:6d:7e:56:fa:51:4c:06:45:c1:05:c5:
cc:ba:83:e0:c0:c9:a8:e8:44:30:e7:77:f1:a8:62:f5:16:6d:
c5:2a:9d:3c:5d:d2:63:78:d6:14:9b:b1:62:2a:f9:ef:2e:ed:
5a:f4:54:7c:96:31:e6:25:c8:a4:ce:b5:f2:5f:56:85:46:a8:
bb:10:e9:ea:b3:19:e4:74:3e:9f:5c:fe:ce:d2:cb:32:fe:8e:
b3:77:5a:fe:18:c6:b5:b2:7c:49:50:fd:4a:d2:f4:b1:64:e5:
de:ab:fe:ca:c8:9c:d0:15:9d:2e:77:19:23:4d:26:b5:d9:97:
92:bd:82:c4:d0:d6:fc:5f:53:0e:a4:57:e0:b5:12:68:52:60:
be:86:e5:fd:7c:91:d5:ab:96:c4:9d:96:42:49:bd:8f:2f:42:
27:05:12:d1:30:f8:5c:71:9b:b9:14:82:b7:f6:c1:d1:df:89:
7d:b6:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:02:26 2025 by rpki-client