Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa
File: 34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa (raw, json)
Hash identifier: B5o9dB44qMbiyp3oQtuvRZBDL9LUKKyFoicgFdGOx8c=
Subject key identifier: C9:36:21:EF:0A:E1:9E:F3:9F:2C:E6:05:81:62:FE:0D:6D:C7:D0:98
Certificate issuer: /CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Certificate serial: 3FC9D530639F70333EF8C3A4B64AED8F22BFDD8D
Authority key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa
Signing time: Mon 13 Jan 2025 12:55:02 +0000
ROA not before: Mon 13 Jan 2025 12:50:02 +0000
ROA not after: Mon 12 Jan 2026 12:55:02 +0000
asID: 268568
IP address blocks: 45.163.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c9:d5:30:63:9f:70:33:3e:f8:c3:a4:b6:4a:ed:8f:22:bf:dd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C
Validity
Not Before: Jan 13 12:50:02 2025 GMT
Not After : Jan 12 12:55:02 2026 GMT
Subject: CN=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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:00:5d:fd:db:42:e7:ff:ea:87:d9:31:db:
69:00:84:d8:85:e6:3d:3c:29:90:fe:10:e9:79:f3:
01:3f:4c:89:6b:aa:90:f9:51:3c:77:65:60:e7:26:
19:05:36:31:ee:a6:7d:00:08:65:e7:34:a8:2e:d6:
5d:74:b8:d0:e4:2a:c5:79:e2:71:96:9a:4a:2b:0b:
0f:a2:bb:49:7c:f7:11:5c:7e:f0:6a:94:af:83:b5:
ca:81:08:62:2d:58:0f:40:cb:bb:dd:95:d4:45:30:
20:61:dc:a3:ea:16:b8:34:ab:a4:26:c2:a0:6e:83:
5c:59:e0:54:ac:34:ec:af:a5:46:8a:ff:9f:1e:9a:
c5:6f:c5:be:a4:e1:d6:20:e0:ca:f9:33:05:c4:00:
22:25:05:a7:86:ca:d7:a0:ad:10:ae:c5:4d:a2:42:
b8:fc:e9:8e:70:db:13:57:43:8d:ec:5c:b6:1a:19:
5c:bc:33:8e:99:f1:9b:f5:0d:e6:a8:4f:80:1d:59:
d4:f8:78:0b:e6:92:ae:d7:c4:b6:0b:a9:ad:c0:0b:
bc:0a:3a:c4:16:ed:e3:7f:a1:39:2c:a4:f9:12:ae:
41:89:98:a1:98:52:c2:4f:6d:33:0f:d6:01:49:d1:
71:29:8d:6c:3c:c8:2b:cc:d1:b2:46:9a:bc:1f:98:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:21:EF:0A:E1:9E:F3:9F:2C:E6:05:81:62:FE:0D:6D:C7:D0:98
X509v3 Authority Key Identifier:
keyid:FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/34352e3136332e3134362e302f32342d3234203d3e20323638353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ca:e8:3b:d0:af:50:16:e7:e3:2d:16:48:77:5e:e8:15:f5:
2f:10:e2:56:09:4f:72:bd:f3:d4:fa:fc:ae:6a:87:58:0d:8a:
95:4a:9b:b3:7f:fe:30:f4:41:be:06:9a:c0:13:c2:b6:87:77:
fa:8f:72:c1:c1:d8:dd:bd:b9:d1:39:17:bc:a7:0e:00:77:ee:
d8:c6:b6:16:cb:58:80:66:f9:94:6f:49:47:7f:47:b6:bc:f8:
56:18:d6:0a:fb:b3:0f:aa:f6:18:cd:1f:ea:aa:f0:79:13:50:
73:cc:2e:d7:15:ef:4f:6d:f8:ee:07:f5:ce:6f:e5:77:09:38:
af:18:68:27:cf:62:53:bc:67:fb:0a:d9:da:2c:18:ac:67:eb:
e1:68:7a:be:90:2b:d4:d7:56:23:80:3e:36:f0:54:fc:16:a7:
31:60:ca:ab:c8:40:bb:6b:29:26:e8:35:74:a5:80:ea:23:26:
3b:4d:60:83:5d:a6:1a:f7:49:31:00:2f:22:54:4d:c9:7f:fb:
b6:92:db:8d:f9:f1:d1:e6:2b:f9:da:72:61:55:1b:b8:bc:13:
f3:bb:ef:e4:00:12:b8:0f:16:43:87:6b:3b:6d:17:28:c6:4a:
0f:3c:2c:12:52:40:82:05:6d:40:04:b2:f1:30:10:7f:06:4d:
04:69:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:50 2025 by rpki-client