Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135332e302f32342d3234203d3e20323638383135.roa
File: 34352e3137332e3135332e302f32342d3234203d3e20323638383135.roa (raw, json)
Hash identifier: oAORE0FuPf0978uyoF7pzWCRECTw67YtNBhSudme/bE=
Subject key identifier: 4A:F1:AD:42:FF:4C:6B:E0:C4:52:1F:AB:0A:7F:39:F1:3F:FA:86:23
Certificate issuer: /CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
Certificate serial: 4C7375A3AB5FE05A69FF0E63EADA7B584C6C9141
Authority key identifier: 14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135332e302f32342d3234203d3e20323638383135.roa
Signing time: Fri 13 Dec 2024 19:16:32 +0000
ROA not before: Fri 13 Dec 2024 19:11:32 +0000
ROA not after: Fri 12 Dec 2025 19:16:32 +0000
asID: 268815
IP address blocks: 45.173.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:73:75:a3:ab:5f:e0:5a:69:ff:0e:63:ea:da:7b:58:4c:6c:91:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=148870ED8BFB6BE8F6D0A9E969336D8D39D40081
Validity
Not Before: Dec 13 19:11:32 2024 GMT
Not After : Dec 12 19:16:32 2025 GMT
Subject: CN=4AF1AD42FF4C6BE0C4521FAB0A7F39F13FFA8623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:c5:b5:62:ea:39:b8:47:19:2f:c2:1d:4a:
9f:6a:ad:9f:f8:ce:0b:b8:37:74:67:84:3e:d9:cd:
c9:1c:9a:8e:10:4f:fc:4c:36:11:07:34:99:87:78:
d7:4a:f7:18:35:e1:f8:8c:2b:02:61:04:79:5f:0f:
c4:0c:e6:57:cf:32:7b:3c:dc:6f:98:3e:47:6d:2b:
53:c6:41:5b:d4:00:1a:cf:92:6d:f5:46:6d:5a:92:
3d:64:d4:f7:ec:c6:5d:45:9e:ca:3b:0f:60:af:7b:
f9:fc:69:d5:f9:da:3f:74:a9:66:d4:52:1d:67:2e:
45:59:45:ba:7f:76:8a:7f:b6:54:36:05:d5:64:1b:
78:09:ec:01:23:f2:b4:ff:3a:9c:67:50:54:3c:d7:
ac:62:48:a2:2a:10:1a:30:e7:ca:60:a3:62:e8:2a:
0f:ec:e9:47:c5:88:cc:60:92:d4:d9:d8:ea:9f:3c:
55:b3:76:02:3d:2e:48:97:d7:ba:15:d6:d4:a8:aa:
71:3d:49:b0:eb:02:f3:a3:e2:2d:5d:99:59:e2:96:
aa:32:48:8f:2f:2e:4b:5f:df:d1:07:6b:9e:87:9d:
f1:26:1a:91:6d:04:fd:84:2a:af:81:2b:54:aa:c1:
57:5f:bf:46:7c:82:ee:42:fc:39:b3:1b:87:2c:c3:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:AD:42:FF:4C:6B:E0:C4:52:1F:AB:0A:7F:39:F1:3F:FA:86:23
X509v3 Authority Key Identifier:
keyid:14:88:70:ED:8B:FB:6B:E8:F6:D0:A9:E9:69:33:6D:8D:39:D4:00:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/148870ED8BFB6BE8F6D0A9E969336D8D39D40081.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135332e302f32342d3234203d3e20323638383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:38:08:3f:b8:08:db:23:2c:00:ae:6f:c9:bd:d3:d8:f9:e6:
bd:d4:24:26:f3:e6:69:76:a6:ef:32:ba:8d:2b:fe:54:60:f3:
a4:de:46:69:f2:0a:31:9a:2b:1b:dc:bb:85:0b:90:17:06:57:
e1:75:77:d9:3b:8a:17:17:75:ce:ca:3c:ee:4b:49:b2:6f:63:
f4:33:69:9e:e4:9f:1e:24:0a:ca:ca:0d:7a:24:2a:ff:6e:0b:
5c:fd:75:c6:12:a8:11:65:15:38:a9:4e:37:bc:e7:97:39:17:
46:9e:68:f9:6f:9b:34:3b:0a:41:0b:0f:63:f1:f7:cb:d2:74:
22:a1:df:34:c6:2d:3a:8f:e4:70:d3:b6:95:a1:fb:09:30:ad:
3d:23:d3:48:e4:29:8f:e7:f4:a4:d6:61:ab:16:2d:4f:39:2b:
28:8f:84:48:b2:17:f8:60:cb:6d:02:40:3f:50:58:c6:dc:e1:
3a:00:e6:dd:53:c2:f9:c3:92:dd:d6:76:d0:f8:11:91:23:30:
24:ac:32:74:bf:4f:2e:07:c6:30:87:72:04:4d:d9:87:08:e4:
da:83:c9:ff:47:bd:62:10:47:09:28:7d:df:73:31:3d:63:83:
e8:a0:2b:2b:34:1d:c2:d7:ac:26:de:c7:c0:b0:79:3f:0d:a3:
7d:9b:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:12:37 2025 by rpki-client