Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33342e302f32342d3234203d3e20323638303438.roa
File: 34352e3136382e33342e302f32342d3234203d3e20323638303438.roa (raw, json)
Hash identifier: 4c3vQo3VmRn6EcWl/eVXr1tM+q1cW52nj8aobNNaXXw=
Subject key identifier: 49:25:2F:09:FD:58:7B:EA:D6:4B:19:C7:C9:21:4C:63:E4:F7:2A:68
Certificate issuer: /CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Certificate serial: 3D2951D3BD8D9AB2B305AC3AB1E6622283B11A19
Authority key identifier: 31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33342e302f32342d3234203d3e20323638303438.roa
Signing time: Mon 24 Apr 2023 23:55:32 +0000
ROA not before: Mon 24 Apr 2023 23:50:32 +0000
ROA not after: Mon 22 Apr 2024 23:55:32 +0000
asID: 268048
IP address blocks: 45.168.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:29:51:d3:bd:8d:9a:b2:b3:05:ac:3a:b1:e6:62:22:83:b1:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Validity
Not Before: Apr 24 23:50:32 2023 GMT
Not After : Apr 22 23:55:32 2024 GMT
Subject: CN=49252F09FD587BEAD64B19C7C9214C63E4F72A68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:b6:5a:53:3c:7a:db:c2:bf:51:4b:1f:b1:
52:90:85:64:60:05:4c:5d:7e:d9:76:4e:cf:86:ae:
09:33:69:55:68:fb:cf:6d:33:30:15:a4:cd:2b:5a:
25:87:3d:05:cc:1a:19:9f:73:c1:84:08:f7:02:09:
cb:39:0e:0d:6c:53:7e:f2:90:28:e4:76:8c:7d:cd:
55:dc:3e:51:9d:50:c6:da:d2:9e:94:82:58:bc:b7:
6f:f4:a3:6d:b8:10:e1:51:21:30:38:6a:1f:5d:4b:
94:64:9a:cc:c5:cd:39:5e:5b:1e:47:04:21:7e:5c:
ae:ce:a7:d9:79:da:7c:ff:76:20:a8:19:5a:3e:4a:
13:42:22:d4:90:da:0c:b0:a9:65:b0:0a:73:3e:b4:
0e:d4:fd:45:b8:c3:2d:c0:9b:1f:9e:2d:0c:26:0d:
d7:f9:9a:6e:85:1b:e1:16:18:a1:72:9c:e0:15:38:
fa:8c:2a:48:0b:b8:dd:16:21:d3:27:2f:cb:e3:38:
9c:da:11:b3:6d:21:55:35:c6:04:b6:14:82:59:b6:
2f:4a:10:17:26:de:65:c2:97:d0:7e:9c:03:26:e6:
85:cd:84:b7:ed:d3:19:a9:4f:ad:05:f3:8a:aa:a5:
67:cf:7c:bc:17:ec:28:3c:1f:7a:ee:c8:4a:a0:74:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:25:2F:09:FD:58:7B:EA:D6:4B:19:C7:C9:21:4C:63:E4:F7:2A:68
X509v3 Authority Key Identifier:
keyid:31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33342e302f32342d3234203d3e20323638303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.34.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c9:d7:38:5a:fd:42:3c:4b:33:bc:1d:70:e0:95:0a:e3:c7:
dc:7a:69:27:57:15:92:7c:3b:38:03:86:b6:e3:ca:80:47:05:
dc:70:3b:60:39:d3:04:71:49:25:e0:07:db:9a:7a:6e:c8:e6:
86:c2:f2:ff:38:8d:7c:01:9a:54:7b:7b:4c:d3:e2:00:bc:59:
8c:42:42:47:cd:aa:45:3c:b1:72:5f:20:37:5c:fc:fc:90:c2:
8b:ba:48:55:36:35:6c:42:ff:6a:3b:4d:60:f7:1e:39:8d:a1:
86:6b:b0:91:89:98:f6:a8:9b:04:7c:3f:f4:56:b3:97:e7:99:
81:3f:10:ef:74:7e:7e:ca:35:27:83:de:b6:19:13:fc:ca:77:
f9:23:2c:17:ca:20:41:72:5c:85:26:84:4a:fa:fe:9e:51:e3:
9f:1e:d9:6d:6f:6c:90:76:29:81:a4:67:bb:02:6e:c4:5a:2e:
d5:15:39:d6:83:78:f4:cb:e2:79:18:8c:56:25:aa:76:95:b9:
f9:3b:9d:7d:c6:7e:8d:2e:77:1f:d9:f1:a2:4c:77:2a:db:74:
b5:06:f0:25:97:1f:86:a5:fc:a3:f8:ef:1e:23:8c:3b:1c:82:
d3:93:8c:2d:fd:f2:b9:c0:09:33:57:7d:83:5a:a3:e0:75:18:
5c:91:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:25 2025 by rpki-client