Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa
File: 34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa (raw, json)
Hash identifier: HBWwbMjP9DPJ/Q/275+yxzQUtef0AU8vPjBlB3U9Dk8=
Subject key identifier: E8:12:31:EF:49:90:DF:84:A2:C1:B9:2A:97:22:4E:4D:35:C0:ED:37
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 7528A64FDD4E582E7DC516B747E21A440212BBBA
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:44 +0000
ROA not before: Tue 03 Dec 2024 17:43:44 +0000
ROA not after: Tue 02 Dec 2025 17:48:44 +0000
asID: 268131
IP address blocks: 45.169.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:28:a6:4f:dd:4e:58:2e:7d:c5:16:b7:47:e2:1a:44:02:12:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:44 2024 GMT
Not After : Dec 2 17:48:44 2025 GMT
Subject: CN=E81231EF4990DF84A2C1B92A97224E4D35C0ED37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:53:91:48:fb:4e:20:78:07:da:67:6f:1f:e3:
62:57:87:b0:2c:1c:88:05:f3:c8:bb:96:97:2d:f5:
1c:f0:a5:76:28:5b:0e:f2:7d:57:9f:7a:76:12:b5:
58:37:53:9f:fa:c2:4c:4d:f0:3f:e4:84:ee:d6:04:
d7:77:80:4c:85:59:14:e0:53:06:ef:8c:fc:c1:ea:
46:66:09:b5:db:78:2e:d4:54:9b:c2:33:fe:8a:a4:
4f:f2:31:40:91:e4:98:6a:d7:2e:20:d0:f9:81:6a:
9a:f5:2e:1e:6e:87:d3:29:6d:61:08:70:4f:cb:d7:
98:e5:dd:d2:1a:bd:33:7c:3e:e1:6e:64:a9:94:64:
cc:8c:de:f8:96:c4:6c:b5:20:4c:c9:b4:8a:ca:e0:
90:f7:2b:97:8e:bc:aa:8b:08:f1:d1:5b:fd:e5:85:
af:86:b6:af:21:86:c4:78:82:d3:5f:52:0f:f7:eb:
02:b4:b7:e9:cf:39:63:be:09:5c:85:f8:7b:28:1a:
1b:85:7f:63:f4:ec:8c:e1:cc:8a:1a:b5:33:48:9d:
15:fc:24:e9:bc:5e:be:94:69:98:2c:d9:dc:c1:a5:
88:44:53:c6:9b:84:0d:2c:7d:ba:52:ae:86:ce:94:
14:27:2b:65:b2:24:78:f4:d4:82:6c:f4:58:35:89:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:31:EF:49:90:DF:84:A2:C1:B9:2A:97:22:4E:4D:35:C0:ED:37
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32342d3234203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.188.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5f:d0:b9:73:70:41:43:23:a4:66:82:2d:25:5f:3e:94:0d:
5f:01:0d:8b:a1:7c:14:e2:ed:65:3c:22:58:83:21:82:06:5a:
e1:5f:3b:3a:a3:fa:cb:c4:d4:85:4f:75:98:fa:86:d3:9e:f0:
ab:e9:81:de:b0:0a:86:86:25:a4:1f:ea:04:9a:f8:09:4b:1b:
81:23:56:d9:ab:ca:87:ba:a3:b9:9f:30:b5:a4:50:2b:94:52:
bc:7d:21:1b:62:2b:65:22:b7:50:c8:c7:ad:e9:cc:e0:48:40:
26:fa:f3:96:d6:5e:c4:a0:f0:ef:ef:ac:20:f7:cb:60:4f:c3:
d8:37:6a:85:f9:f3:c3:4e:ee:34:9a:52:75:64:a6:5b:32:8b:
46:48:f1:37:02:f3:2d:58:72:16:d3:1c:77:e1:7a:c5:8b:d8:
b9:b0:f7:6f:8a:66:c3:0e:d5:cd:89:89:e5:8c:aa:72:96:56:
19:f4:51:8a:80:58:07:55:0e:b0:5b:33:da:16:23:1d:94:43:
d3:59:4e:f3:d6:65:23:98:a6:d2:05:23:b4:82:8b:c0:ab:72:
73:e2:d7:ac:9e:23:e9:d5:9a:21:3c:03:0a:a2:3a:b2:ea:0d:
85:8a:6d:19:29:9f:c6:69:59:09:8b:ef:da:b6:d9:f6:4e:5b:
e7:1a:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:55 2025 by rpki-client