Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e37302e302f32342d3234203d3e20323637323232.roa
File: 34352e3232392e37302e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier: 2CIXDHlG3wiwLu0oPaWa0tJIZ6+F0sTe9D4EQaQ59wc=
Subject key identifier: 99:35:0C:2B:E5:C2:76:4A:E9:85:8D:EF:E0:E6:3F:C8:1D:A5:FB:CC
Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial: 09B4B51BA3ECECD29603DD689243D162EBF82F0A
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e37302e302f32342d3234203d3e20323637323232.roa
Signing time: Thu 06 Mar 2025 09:21:53 +0000
ROA not before: Thu 06 Mar 2025 09:16:53 +0000
ROA not after: Thu 05 Mar 2026 09:21:53 +0000
asID: 267222
IP address blocks: 45.229.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b4:b5:1b:a3:ec:ec:d2:96:03:dd:68:92:43:d1:62:eb:f8:2f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Validity
Not Before: Mar 6 09:16:53 2025 GMT
Not After : Mar 5 09:21:53 2026 GMT
Subject: CN=99350C2BE5C2764AE9858DEFE0E63FC81DA5FBCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:bf:50:66:1d:d0:9f:1e:44:89:1c:05:7f:
38:0e:a3:81:90:2a:05:4d:9d:a8:00:00:fd:3f:2f:
35:2b:5c:89:d9:a4:27:c4:b6:e0:28:e7:52:2c:48:
7e:6c:d9:78:1f:a8:a4:93:81:c9:da:c5:d4:2f:7a:
ea:b1:0c:3c:86:73:e1:c2:a4:13:9a:0d:62:9f:e9:
3c:e6:8c:88:33:0a:bc:91:2a:d9:ed:c4:6b:b8:d4:
88:14:88:17:e5:32:cd:49:5a:21:69:1a:22:b4:fc:
e2:95:11:75:34:f9:64:11:50:32:7e:f3:34:5c:de:
f8:07:aa:57:a6:8d:21:ca:a6:4c:86:96:3f:c2:44:
3e:72:81:5e:68:75:e0:2e:16:96:a7:67:d4:3b:58:
2e:f3:9f:f6:1e:f1:50:2c:2a:9a:8e:90:29:13:27:
bd:10:04:ef:8b:89:83:df:7d:f2:7b:18:29:cf:e0:
49:5d:a1:7e:f0:92:35:8f:38:56:ef:64:5d:6f:67:
1e:fc:63:4f:62:e1:77:36:5a:7b:10:f4:7a:70:07:
d9:d5:53:70:cf:55:32:88:24:6a:0c:7c:f3:6e:34:
4e:53:15:21:72:66:12:11:a7:7c:ef:c4:0d:f1:0e:
17:1f:67:85:80:11:03:70:e3:7c:58:fa:7b:fa:e3:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:0C:2B:E5:C2:76:4A:E9:85:8D:EF:E0:E6:3F:C8:1D:A5:FB:CC
X509v3 Authority Key Identifier:
keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e37302e302f32342d3234203d3e20323637323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:33:37:25:94:e4:eb:dc:cc:43:c5:44:02:e4:d1:23:1a:1a:
6a:5d:4d:9e:81:79:e0:52:ec:0f:0f:db:84:82:27:d4:40:23:
47:7e:ab:45:e5:fb:0e:ee:59:60:cb:9a:bd:20:d0:9e:b9:b5:
e4:74:41:07:29:5d:06:cc:a6:86:2b:50:fa:cb:1a:47:45:13:
b3:9b:95:88:7c:c9:47:76:62:64:d4:e1:2a:fd:01:2c:19:dd:
14:7d:8b:46:37:ac:44:85:93:1d:5f:04:9f:70:d1:80:d5:b8:
b2:66:02:40:12:40:c9:7d:53:0a:56:7e:e9:40:78:b0:eb:f9:
89:84:93:74:98:a6:01:38:67:b0:a7:c7:25:b3:37:ea:f2:82:
b6:11:9b:36:e6:8c:ca:74:4d:d7:26:f1:d1:3c:a8:8e:70:f5:
18:1d:e1:09:b5:c1:c2:69:7c:07:5f:1d:2b:34:28:54:5b:1e:
9b:56:87:b2:fc:09:cc:f2:cf:46:f7:81:80:ba:14:e9:95:c6:
9e:c1:52:73:88:81:33:83:fd:07:45:c4:0a:71:a7:cc:31:c7:
ea:ee:05:ab:59:0c:c5:ab:d7:e3:96:c4:27:b2:a7:d3:af:6e:
1d:c6:88:49:c8:2a:5d:f6:03:d6:aa:e5:ae:2f:bc:94:16:e0:
9b:b6:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:02:45 2025 by rpki-client