Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33392e302f32342d3234203d3e20323731363939.roa
File: 34352e3232382e33392e302f32342d3234203d3e20323731363939.roa (raw, json)
Hash identifier: 7/I34wSq3R4Zqt9xmqrBFu1AbXwO7F87fvPj2i9ozcM=
Subject key identifier: 6D:67:A5:B1:82:3A:B3:C2:0F:22:D1:BA:DC:DA:22:62:6A:36:A5:06
Certificate issuer: /CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F
Certificate serial: 650742C203B9CFEE28DD8A4A1E5FC1D401A667F6
Authority key identifier: 22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33392e302f32342d3234203d3e20323731363939.roa
Signing time: Mon 17 Mar 2025 17:41:20 +0000
ROA not before: Mon 17 Mar 2025 17:36:20 +0000
ROA not after: Mon 16 Mar 2026 17:41:20 +0000
asID: 271699
IP address blocks: 45.228.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:07:42:c2:03:b9:cf:ee:28:dd:8a:4a:1e:5f:c1:d4:01:a6:67:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F
Validity
Not Before: Mar 17 17:36:20 2025 GMT
Not After : Mar 16 17:41:20 2026 GMT
Subject: CN=6D67A5B1823AB3C20F22D1BADCDA22626A36A506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:4a:14:a9:d2:84:d9:e5:86:f2:88:4d:df:
16:79:b2:e9:c7:89:d6:31:b4:2f:ff:e7:f3:48:df:
f5:88:6a:c1:aa:42:67:fb:08:6e:45:6c:ac:a5:ff:
18:d9:80:ef:64:6c:0e:f0:7a:03:ff:ca:d3:46:5d:
42:76:2f:0c:22:9d:82:27:04:fe:95:64:4e:2a:14:
9f:50:35:c0:b0:61:21:b7:18:31:0c:d0:d0:96:2a:
c6:d2:1a:7e:60:6b:a6:3d:08:44:bd:cb:7e:65:00:
02:a7:da:fe:ad:b5:81:63:82:f7:9a:6b:32:81:32:
b0:3c:56:13:26:64:9f:d6:93:3d:16:4a:f1:82:8e:
7b:86:04:24:fc:fa:37:e7:89:0b:07:49:4d:98:49:
f0:6e:b6:cd:d5:6f:1f:70:e6:3f:77:51:4c:41:a0:
16:84:ed:49:13:ec:f0:50:24:31:cd:c6:be:0a:e5:
98:93:a6:ae:c2:3e:65:83:f6:0e:c3:a1:b2:bc:d9:
00:98:85:74:d7:c1:86:c7:dd:17:7b:b8:53:b2:42:
cd:79:33:88:83:d2:bd:5d:39:63:e8:24:e3:31:3c:
61:4e:03:c5:f4:ec:be:fe:f1:e4:a7:69:7c:d2:f6:
a0:9c:c7:e4:4a:6b:04:e9:65:0c:10:3a:c2:2f:2d:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:A5:B1:82:3A:B3:C2:0F:22:D1:BA:DC:DA:22:62:6A:36:A5:06
X509v3 Authority Key Identifier:
keyid:22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/34352e3232382e33392e302f32342d3234203d3e20323731363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:36:4b:f0:0d:93:ec:fe:79:fc:f1:ca:68:ac:a8:ea:4d:19:
c1:9a:d1:29:40:df:88:dc:e1:2e:c6:c4:fa:57:d9:12:02:e8:
d1:2c:0f:78:56:f4:5d:3b:10:7e:b9:ac:8c:b0:b8:be:e3:ce:
e8:18:43:5d:4c:b7:cd:9d:5d:7a:1a:2a:1d:a6:c4:ad:b1:02:
ac:ed:d1:43:d7:35:1f:05:2f:22:93:73:6a:97:54:54:bf:32:
aa:76:9a:9f:bd:d5:2a:fa:0c:6e:56:b8:b8:75:94:02:96:93:
1c:5c:67:aa:07:d1:f6:5f:3a:35:52:21:2d:82:19:b3:e0:3b:
b6:27:b2:cb:5a:e3:bd:8a:c2:b9:58:11:77:8e:91:72:3a:e6:
10:0b:2f:cf:58:93:19:ae:55:bc:0c:56:a7:6c:c6:a4:ca:5b:
f2:76:0b:ea:45:10:15:d8:1a:e4:bb:dc:7d:b1:de:e9:fd:f1:
aa:26:74:63:6a:ee:d0:d0:ea:9b:f2:d6:19:2a:af:ec:4c:4f:
a5:9c:fa:f5:27:b0:23:61:73:47:ff:b5:6a:9f:a5:91:a9:8c:
7d:36:38:29:a6:7b:0e:95:88:5e:45:01:db:ed:d0:61:62:31:
f5:92:ee:41:65:0e:25:30:8f:0a:1e:5d:e1:b5:c0:50:f9:c6:
e3:bc:e8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:59:34 2025 by rpki-client