Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa
File: 34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa (raw, json)
Hash identifier: xVHQDQMPvfPYwwXe4rhYLqOeyl129sW7D+tLhnwriVQ=
Subject key identifier: C3:E3:31:FD:0E:11:0E:56:12:14:9C:34:6F:A6:B6:68:E4:DA:9F:2B
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 396B74339B8BE56D5A530B98CC96195AB5FFFECE
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:39 +0000
ROA not before: Tue 03 Dec 2024 17:43:39 +0000
ROA not after: Tue 02 Dec 2025 17:48:39 +0000
asID: 268131
IP address blocks: 45.169.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6b:74:33:9b:8b:e5:6d:5a:53:0b:98:cc:96:19:5a:b5:ff:fe:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:39 2024 GMT
Not After : Dec 2 17:48:39 2025 GMT
Subject: CN=C3E331FD0E110E5612149C346FA6B668E4DA9F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:3f:f5:54:9f:f7:a8:71:da:3b:5a:b9:e6:
f9:db:93:1a:b8:a6:5f:5f:dc:43:d3:b4:b9:d1:62:
f1:33:0b:bc:33:fe:ad:43:97:34:9a:20:6a:f3:48:
d2:46:85:f5:45:c4:a7:6a:5f:04:38:9d:7f:1b:17:
86:90:05:8a:c9:41:59:62:71:38:ab:82:f4:b1:57:
7e:89:f5:f5:c7:6c:ba:3d:75:3b:28:ec:bc:8c:07:
e3:84:9b:bc:8d:d7:99:5c:8b:a3:bb:24:92:a5:d1:
3c:11:7e:2c:c1:56:73:ba:2d:91:66:df:25:a6:38:
18:12:06:7c:08:36:83:bb:16:1d:5a:50:8e:d0:a1:
73:23:94:c0:8e:a3:a4:2c:0e:e4:4a:31:61:51:b7:
be:d4:19:0d:75:bc:09:17:9c:6b:0b:58:e5:46:0a:
e7:50:48:3f:73:66:cd:4f:62:51:d6:56:ff:82:16:
7d:a7:c3:1e:8c:ca:76:b8:ec:8c:c6:56:80:29:7a:
7a:bf:51:20:f5:4d:d5:f7:f0:18:f4:d2:e1:d5:6d:
af:bc:3b:6b:20:f9:55:42:59:93:c9:fa:21:f2:17:
1a:6d:92:13:74:8f:48:c3:93:72:d3:bb:a7:6f:8e:
12:83:eb:d7:d3:1f:b3:fd:8d:e5:e1:e5:7e:41:92:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:31:FD:0E:11:0E:56:12:14:9C:34:6F:A6:B6:68:E4:DA:9F:2B
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139302e302f32332d3233203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.190.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:b5:ae:ec:b9:8b:1f:b6:cc:99:0f:0b:74:7e:67:06:a4:c7:
af:f9:85:ee:48:75:ca:74:e2:34:5d:67:ce:11:87:d2:46:7a:
a0:8f:76:50:47:cc:28:97:c5:e2:fb:62:ae:47:f2:7e:5f:e8:
a7:81:46:9d:d4:59:21:3a:1e:7a:ee:c0:30:74:4c:59:08:c4:
03:b0:c4:51:7d:e9:80:8d:45:c8:25:e7:3f:ca:ce:38:51:f5:
3c:06:94:b7:f4:ca:0e:fa:32:10:bf:43:1c:cb:6d:02:75:02:
ce:3b:a6:62:05:a8:45:c6:a6:fe:eb:e6:6a:9e:7f:f1:55:e6:
4f:2e:09:f5:4b:5d:d1:98:1f:3c:20:5a:3c:ab:8a:e7:84:e3:
47:95:72:02:61:57:22:ab:58:66:8e:b9:42:14:94:fa:b1:4d:
da:82:fa:05:a0:3a:ad:b4:9a:43:b1:cc:c3:4b:1c:25:98:1a:
7c:92:ee:a6:f5:d8:f5:2c:e6:40:5e:3c:8a:31:62:62:5b:4b:
b3:c4:41:d3:e5:67:4e:45:be:ab:f2:2a:be:db:5f:8c:21:f7:
86:b4:ed:e5:b1:1c:92:11:24:f9:a4:07:13:83:a4:6d:04:05:
30:dc:4b:6f:13:84:17:92:17:0d:7e:90:c3:fa:52:92:f4:b7:
20:e1:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:55:12 2025 by rpki-client