Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa
File: 34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa (raw, json)
Hash identifier: S3e3Sfuz3MkiO0WiV6hXe47LEZv8Q1FsKjKqFcWq0og=
Subject key identifier: CD:6E:82:C3:0D:53:BB:80:52:51:7B:2B:6D:44:7C:8C:26:33:73:AF
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 4D039C81DE453BE527535403C95BBEAA1595C7C6
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:41 +0000
ROA not before: Tue 03 Dec 2024 17:43:41 +0000
ROA not after: Tue 02 Dec 2025 17:48:41 +0000
asID: 268131
IP address blocks: 45.169.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:03:9c:81:de:45:3b:e5:27:53:54:03:c9:5b:be:aa:15:95:c7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:41 2024 GMT
Not After : Dec 2 17:48:41 2025 GMT
Subject: CN=CD6E82C30D53BB8052517B2B6D447C8C263373AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:9f:eb:89:59:43:33:92:f4:0a:6a:e6:d4:
32:d7:d2:a3:34:0d:a2:c8:1a:f2:a5:67:53:09:f6:
39:60:b4:56:69:01:7e:63:0e:a9:62:b2:1e:33:29:
f5:a0:93:55:f6:93:8a:af:41:f7:2b:20:7a:32:4c:
37:9f:64:45:9b:56:69:4e:48:12:ce:f2:30:f8:83:
fa:a8:35:20:b7:db:84:5c:d8:8a:08:c0:b5:f4:1f:
5d:4b:f8:41:09:e0:05:04:46:73:e9:9c:2a:c6:94:
b2:c6:1d:b7:0b:a8:37:65:7a:86:f3:e7:13:1d:7a:
ff:fa:1c:68:61:8f:fa:65:6c:b6:b6:25:e1:f8:ad:
05:ca:5e:92:21:bc:1f:86:55:2e:ee:86:61:98:85:
04:bc:9f:c2:03:ec:f0:f9:b8:08:d4:9e:6a:09:e2:
29:d9:57:f7:21:2b:53:bc:a3:ef:42:37:db:8e:82:
43:7d:12:41:74:40:57:70:ec:28:e8:e9:35:e0:94:
33:f6:f5:28:19:b7:ac:1c:f3:af:93:44:7f:00:e1:
98:d3:9d:8a:2c:97:26:a7:92:09:c9:7f:0b:ed:6c:
69:bd:1a:c6:e2:36:93:4b:f9:7e:81:b5:23:ba:af:
2f:82:30:71:10:29:ed:27:5d:8b:63:c2:3a:5a:89:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:82:C3:0D:53:BB:80:52:51:7B:2B:6D:44:7C:8C:26:33:73:AF
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32322d3232203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.188.0/22
Signature Algorithm: sha256WithRSAEncryption
34:f9:19:1e:3e:ba:08:97:52:3a:dc:b5:05:18:f0:8f:60:34:
6b:f5:78:cc:b1:13:80:53:09:77:71:e1:ee:30:16:52:c4:0f:
82:5e:7f:c3:2e:b8:e3:53:14:ad:f0:09:8e:7b:04:9e:f7:12:
f0:b1:61:44:8d:d9:60:77:b8:0e:ab:03:25:a0:30:eb:a5:27:
91:b0:1e:8b:89:11:be:04:32:da:fa:d7:09:87:a1:d1:bd:2e:
42:13:ab:cf:67:99:db:e4:38:9f:3d:e2:91:31:a0:4d:ff:67:
1e:89:bb:bd:66:7d:99:38:77:9c:f8:5e:5f:19:59:39:3a:58:
f3:01:85:b0:09:02:db:ba:16:66:0b:3e:85:3b:c8:b9:98:0b:
ed:27:bf:3d:1a:73:36:f4:f7:a4:37:fc:f1:92:7c:8f:72:1f:
7c:5c:61:3c:c5:e5:48:8f:89:a8:27:d1:37:c3:97:7b:4d:ac:
a3:bf:9b:be:e4:6f:58:36:6a:f0:d0:8b:b0:87:a1:16:89:d5:
36:59:b8:ff:41:a4:33:8e:f1:3a:2c:4a:ea:6c:03:57:34:7a:
9e:c0:c4:36:3f:6c:8e:85:d6:aa:47:78:a6:79:5d:07:db:74:
24:8f:9e:a4:13:d7:a4:3c:f6:a3:c7:17:93:0d:9e:29:27:29:
f5:88:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:28:32 2025 by rpki-client