Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa
File: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (raw, json)
Hash identifier: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=
Subject key identifier: B7:7D:5D:EE:72:60:ED:60:5B:98:AA:C8:84:DA:3C:26:57:B5:C2:6F
Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053
Certificate serial: 0B5C1D9741DF7197E64D6BB8B49AABFA2C2C1187
Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer
Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa
Signing time: Thu 06 Mar 2025 02:52:43 +0000
ROA not before: Thu 06 Mar 2025 02:47:43 +0000
ROA not after: Thu 05 Mar 2026 02:52:43 +0000
asID: 268944
IP address blocks: 45.176.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5c:1d:97:41:df:71:97:e6:4d:6b:b8:b4:9a:ab:fa:2c:2c:11:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053
Validity
Not Before: Mar 6 02:47:43 2025 GMT
Not After : Mar 5 02:52:43 2026 GMT
Subject: CN=B77D5DEE7260ED605B98AAC884DA3C2657B5C26F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:10:d1:52:39:ff:92:62:8f:87:64:ad:84:
f0:fb:da:84:d7:bc:66:d8:ad:77:7e:3d:2e:6e:23:
88:fd:5e:ba:13:91:98:ee:9d:94:53:12:89:f5:16:
8e:12:33:0d:58:5a:ce:d7:19:f4:95:38:7b:97:98:
2d:f4:d5:60:2f:3f:0b:76:c4:80:9f:09:11:62:a4:
fd:c5:25:06:57:28:b7:bb:c5:e2:07:ac:49:df:9c:
ba:18:cf:db:d3:00:e3:fd:6c:66:9e:e4:9a:9b:fa:
bb:3d:b5:d2:a1:ff:07:7d:0b:fe:a6:a4:74:78:4e:
a4:ac:d0:65:77:51:23:8d:81:6d:9f:70:4c:e4:bd:
45:c0:4d:8c:2e:b0:ac:cc:ea:28:f5:0f:77:2e:72:
cd:6a:20:af:65:f4:bd:b2:a9:f3:9e:38:23:96:1f:
fe:13:aa:33:19:b1:b9:e1:8a:68:6d:e0:54:58:c2:
0a:57:fa:35:d5:f7:07:94:3a:1f:f2:e8:37:f9:ec:
6a:a4:fc:ce:0d:2e:ae:9c:2b:fa:ff:90:4c:83:a9:
14:5d:2d:ed:31:1b:47:a6:6f:69:61:61:20:70:29:
45:7c:2e:30:33:be:4b:7b:7f:d4:bb:6e:1a:f6:97:
85:f2:d6:60:a0:ec:82:90:a7:97:35:37:bb:64:27:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:5D:EE:72:60:ED:60:5B:98:AA:C8:84:DA:3C:26:57:B5:C2:6F
X509v3 Authority Key Identifier:
keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.140.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:9d:f0:33:ba:51:62:3c:a3:bf:6f:0c:47:99:d9:2c:19:ae:
a4:81:fe:00:9b:d0:83:99:aa:da:cd:5c:af:c7:83:39:85:88:
a1:f2:f7:0d:4d:4b:d4:2e:db:28:ac:0e:79:a2:59:fa:67:33:
00:37:12:68:df:7d:6f:33:89:7a:c9:49:38:95:37:66:1a:b8:
05:f5:ff:78:0f:2c:3f:42:07:db:07:07:19:ef:88:f9:d3:59:
9b:88:fc:10:67:fe:96:6e:21:da:bd:c7:40:d5:c9:f8:8c:4b:
5e:29:38:70:a1:68:59:58:5a:1f:b4:8c:43:5d:c6:73:04:3a:
3d:c4:f8:f1:e3:03:72:8f:49:98:c3:28:3d:3f:f7:e2:74:89:
82:2e:e4:67:82:6b:23:4f:33:a7:b3:a4:f1:bf:be:de:0f:8f:
2a:0d:7e:7a:28:bc:99:a9:81:3a:b7:de:ca:13:98:af:12:b0:
b5:d3:30:79:76:f7:39:1d:00:86:a9:49:97:1e:7a:10:6a:b4:
bb:33:d2:08:5d:c3:ef:f6:97:fc:84:db:66:32:ae:81:f5:de:
f2:e6:cb:32:d5:48:61:a7:f0:26:7a:c7:5d:cf:c8:23:2b:14:
28:65:dc:56:0c:4f:e3:98:5e:bd:65:48:fb:16:3a:28:3f:4f:
cd:53:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:41:58 2025 by rpki-client