Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33322e302f32322d3232203d3e20323638303438.roa
File: 34352e3136382e33322e302f32322d3232203d3e20323638303438.roa (raw, json)
Hash identifier: 0HTvtC9s5t0MWZ6jFplkF+ksVH0fgSxAICf4V/QPw8w=
Subject key identifier: 40:4B:1C:BF:94:36:0A:F5:33:3E:ED:52:70:55:AD:04:4E:6F:77:7B
Certificate issuer: /CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Certificate serial: 4FB09B2AB75E9F481A97D62390BE87777A68DB58
Authority key identifier: 31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33322e302f32322d3232203d3e20323638303438.roa
Signing time: Mon 24 Apr 2023 23:57:32 +0000
ROA not before: Mon 24 Apr 2023 23:52:32 +0000
ROA not after: Mon 22 Apr 2024 23:57:32 +0000
asID: 268048
IP address blocks: 45.168.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b0:9b:2a:b7:5e:9f:48:1a:97:d6:23:90:be:87:77:7a:68:db:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Validity
Not Before: Apr 24 23:52:32 2023 GMT
Not After : Apr 22 23:57:32 2024 GMT
Subject: CN=404B1CBF94360AF5333EED527055AD044E6F777B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:b2:00:db:c4:fd:a6:31:67:6d:ed:6d:2f:
2b:70:e4:9d:9b:f4:26:fe:54:05:22:15:a3:f0:b6:
8c:16:c7:ea:d6:5b:8e:2e:78:37:84:16:a2:f0:d9:
6e:31:da:91:25:77:26:45:73:e7:27:4e:4e:4d:1a:
e9:d0:41:23:c5:02:3d:c2:c7:fb:e7:87:42:7f:de:
3a:6d:2b:0c:36:eb:49:cf:8f:00:8a:e3:4f:f4:6f:
6b:67:74:9b:99:07:18:6a:9a:32:88:af:37:2e:a1:
7c:a2:58:aa:ae:4b:87:2a:f5:60:1c:d8:ea:9c:27:
00:75:43:23:df:84:e3:5b:26:46:59:99:dd:ed:e1:
ce:44:8b:40:63:d8:21:74:2b:b0:95:ef:c2:70:f6:
dd:c0:7a:e7:27:7e:b9:90:b2:f7:b2:c0:fd:68:7f:
50:06:7c:fa:f7:86:95:e8:4a:c5:02:f2:67:4f:ea:
4c:8e:ff:1f:90:fe:dd:4c:f4:dd:a4:0e:89:be:9f:
f0:cc:5a:73:5c:e3:c9:ad:02:bc:26:94:a0:60:7c:
93:7d:b9:7e:38:aa:dc:5a:db:32:c1:78:8c:e8:b3:
08:c4:53:b6:a9:f3:9e:2f:9d:dd:fd:d7:d5:e2:31:
13:25:58:b2:77:f8:3a:33:48:41:87:eb:fa:f1:5a:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4B:1C:BF:94:36:0A:F5:33:3E:ED:52:70:55:AD:04:4E:6F:77:7B
X509v3 Authority Key Identifier:
keyid:31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33322e302f32322d3232203d3e20323638303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.32.0/22
Signature Algorithm: sha256WithRSAEncryption
15:d5:51:a2:3e:e4:db:8f:65:b6:79:69:25:bc:f5:fc:06:dc:
38:a3:b8:e3:4f:fa:24:2e:7a:c9:17:f2:ec:f4:60:10:1e:de:
8b:7f:4a:d2:f4:64:e3:a5:16:80:87:d4:aa:bc:05:53:ac:a2:
85:0b:c7:15:f7:88:57:90:49:cc:ce:47:29:d0:6a:8a:3d:da:
d1:28:6c:be:3a:c0:a9:ad:74:17:1e:0e:88:2c:97:b9:51:0e:
e5:8a:a5:9b:39:e6:a1:58:cc:8b:6b:60:8e:d9:dc:05:ca:72:
e6:2c:a9:98:67:8d:29:08:7b:bb:3f:96:73:e2:f2:4d:5d:f2:
69:14:00:b7:3c:3a:33:1c:6f:32:79:1e:7a:cc:29:20:3a:c4:
ca:ee:d3:21:4f:ac:50:b5:30:46:8f:24:83:e8:14:12:f9:ed:
f9:50:37:f6:5b:0a:f1:d0:63:84:21:2b:04:7e:5e:60:fb:4f:
43:c2:22:c4:04:19:96:72:35:d3:99:76:03:8e:e2:f4:6e:39:
09:6f:3d:d3:5f:28:bb:d0:40:f3:8b:e0:0d:86:d0:d1:54:e3:
d0:f9:a4:1e:3a:7b:0c:ef:be:c3:40:a4:4c:ad:44:09:90:89:
ca:5d:6f:e6:94:08:63:53:ab:66:d1:0f:86:9a:78:29:85:96:
d1:d5:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:24 2025 by rpki-client