Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/34352e3233342e37362e302f32322d3234203d3e20323637333434.roa
File: 34352e3233342e37362e302f32322d3234203d3e20323637333434.roa (raw, json)
Hash identifier: FlsoxZcullb0dTyJqEkUKH0T7vxKOklSzIA8uNBoZVg=
Subject key identifier: BB:1B:C2:7D:2B:07:A5:20:BF:EE:43:5D:96:D8:55:D6:C7:ED:95:05
Certificate issuer: /CN=C501FDCC1F74D6FC745690F08BEDA01EFBB035F0
Certificate serial: 210685E4DD1A206BC2D203C452D64C4F764357CF
Authority key identifier: C5:01:FD:CC:1F:74:D6:FC:74:56:90:F0:8B:ED:A0:1E:FB:B0:35:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/34352e3233342e37362e302f32322d3234203d3e20323637333434.roa
Signing time: Fri 14 Mar 2025 13:33:15 +0000
ROA not before: Fri 14 Mar 2025 13:28:15 +0000
ROA not after: Fri 13 Mar 2026 13:33:15 +0000
asID: 267344
IP address blocks: 45.234.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:06:85:e4:dd:1a:20:6b:c2:d2:03:c4:52:d6:4c:4f:76:43:57:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C501FDCC1F74D6FC745690F08BEDA01EFBB035F0
Validity
Not Before: Mar 14 13:28:15 2025 GMT
Not After : Mar 13 13:33:15 2026 GMT
Subject: CN=BB1BC27D2B07A520BFEE435D96D855D6C7ED9505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:43:af:d5:95:05:40:83:7e:83:d7:6f:bb:
a9:20:c6:47:15:1b:60:f9:43:a2:ba:2f:35:9e:66:
24:c3:c5:10:e8:34:2f:c7:fb:79:6f:8d:ed:44:cf:
db:42:12:02:d5:71:b6:e1:eb:0a:75:65:ef:be:87:
43:3c:40:66:24:9a:58:45:8d:fb:34:bb:c8:c6:37:
f2:e3:c5:fa:e0:b9:a0:f9:25:8a:81:b4:84:e4:2a:
ba:57:fa:11:ed:dc:90:bf:db:e3:cd:7a:73:50:d6:
e4:1a:08:72:ca:33:f2:39:a0:2a:36:63:13:bf:c5:
10:d0:88:2b:8b:a8:08:b5:10:1c:52:25:0b:9c:cb:
b7:7e:ee:46:b5:98:6c:28:65:4f:3b:38:c2:ed:71:
07:7d:a5:66:82:1f:59:67:f3:21:5c:61:b5:02:02:
45:ed:df:a3:16:02:38:0d:50:30:cb:2d:90:7c:a1:
4e:6f:d7:2d:ac:7d:f2:50:b2:e7:b6:b4:72:0e:4c:
c8:4a:c9:e8:0d:5b:0b:48:78:f7:69:33:30:b3:2f:
86:5d:f9:de:f9:44:28:1e:eb:86:35:38:da:76:3d:
25:5f:52:0a:98:7e:15:98:52:09:1c:4f:73:77:d1:
d7:f1:3e:e3:5c:4a:df:6b:31:bb:72:c5:4f:9d:5b:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1B:C2:7D:2B:07:A5:20:BF:EE:43:5D:96:D8:55:D6:C7:ED:95:05
X509v3 Authority Key Identifier:
keyid:C5:01:FD:CC:1F:74:D6:FC:74:56:90:F0:8B:ED:A0:1E:FB:B0:35:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/34352e3233342e37362e302f32322d3234203d3e20323637333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.76.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:2c:13:26:bb:22:2c:f1:dd:71:e5:10:40:3b:00:aa:78:c4:
b8:e2:77:0d:de:81:48:7b:f6:ca:77:84:46:16:6f:71:a4:03:
17:9f:15:9f:33:23:61:a9:05:d0:37:28:ac:08:fc:60:b3:19:
80:dc:da:7e:f4:a2:83:3b:ce:e2:93:77:1c:68:14:ff:1b:79:
71:ca:00:1c:bd:1b:a9:80:44:af:05:72:ea:53:aa:02:9a:45:
f0:9c:b2:75:21:22:eb:a9:ac:be:f9:b1:79:5c:9e:14:f2:23:
f3:85:c8:4a:7b:72:76:7c:3f:4c:60:66:1e:8f:d6:f7:9c:4c:
7e:fa:dc:3f:41:45:b5:62:2f:84:24:20:cf:ff:6d:c8:a2:8c:
f1:b0:bd:47:ec:ba:06:b0:d0:a3:a9:4a:6e:a7:79:e5:6c:15:
dc:1b:0c:d0:83:a1:89:ec:aa:8f:58:a6:46:9d:84:81:1d:74:
c3:63:55:1c:cd:16:8c:12:8a:71:82:79:7c:b9:d8:16:57:f2:
0c:3a:8f:40:09:b9:9a:77:82:79:60:18:64:ed:40:9d:c7:af:
36:f5:9f:30:16:57:79:61:47:59:08:34:26:b6:01:8f:df:fe:
aa:55:13:d3:f2:de:9b:65:d7:3e:3d:aa:26:c0:87:8e:57:3d:
79:bb:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:02:45 2025 by rpki-client