Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/34352e3232392e3230382e302f32322d3332203d3e20323637313439.roa
File: 34352e3232392e3230382e302f32322d3332203d3e20323637313439.roa (raw, json)
Hash identifier: 5KmiMYIrMu1s7jQeaW+k/nEAjwqbM28LaZcswzWyICo=
Subject key identifier: D1:AE:5B:29:FA:CA:7B:26:0E:2B:06:B4:6B:96:0B:3E:27:5D:78:F1
Certificate issuer: /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial: 5D6945D301E9DD33C490A3F6DAEEF73E4F7A3702
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/34352e3232392e3230382e302f32322d3332203d3e20323637313439.roa
Signing time: Wed 04 Dec 2024 03:31:11 +0000
ROA not before: Wed 04 Dec 2024 03:26:11 +0000
ROA not after: Wed 03 Dec 2025 03:31:11 +0000
asID: 267149
IP address blocks: 45.229.208.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:69:45:d3:01:e9:dd:33:c4:90:a3:f6:da:ee:f7:3e:4f:7a:37:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Validity
Not Before: Dec 4 03:26:11 2024 GMT
Not After : Dec 3 03:31:11 2025 GMT
Subject: CN=D1AE5B29FACA7B260E2B06B46B960B3E275D78F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:11:b2:9a:b8:33:8d:fb:a6:11:bc:23:e5:
0f:19:fa:2a:72:87:5d:af:f9:7d:5b:c9:a2:9f:38:
ff:ff:8b:7e:15:d5:8e:72:59:06:15:4b:54:9b:0d:
13:c5:d4:d2:e0:7b:59:ce:6a:f1:ad:fb:18:56:5c:
28:1c:c0:44:f5:3f:6c:d2:b4:2d:38:6b:c5:60:7b:
a6:9b:f0:0f:1e:96:e9:8a:46:3a:85:0d:da:89:49:
59:2a:f5:ce:e0:89:03:c2:13:03:07:7e:9a:9f:05:
0d:b2:d8:a8:a6:85:c5:f3:63:fd:fb:82:32:2f:b0:
90:a3:87:0a:c6:e3:82:2e:f1:2d:d2:16:7f:1e:58:
02:bc:4b:58:bb:15:e1:cb:6c:06:d2:7b:4b:7a:52:
0c:3d:c1:0f:2a:10:68:7b:b8:81:6a:26:b7:83:5f:
7e:b1:24:bd:32:02:52:d5:d3:86:05:1d:cd:31:5f:
58:fd:a5:75:a9:91:e5:4e:e7:0a:40:c5:a4:03:86:
cd:91:c7:cf:95:91:40:fa:53:59:27:8b:4e:43:a3:
d4:6f:b8:c9:69:91:20:91:b8:02:5f:ed:07:e3:be:
94:cf:14:ad:7d:1e:19:e6:eb:4b:0a:77:ea:6b:73:
83:3a:e5:b2:a1:15:d3:0c:62:03:04:25:11:f4:6b:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AE:5B:29:FA:CA:7B:26:0E:2B:06:B4:6B:96:0B:3E:27:5D:78:F1
X509v3 Authority Key Identifier:
keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/34352e3232392e3230382e302f32322d3332203d3e20323637313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.208.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:a5:67:06:b6:76:15:2e:10:1f:f9:06:04:0c:f4:ff:f3:ab:
8c:0a:79:c2:b5:e4:64:0b:ba:3c:45:00:61:27:c8:c1:77:89:
e7:c4:ba:63:5b:75:d5:69:3e:14:6f:43:a1:a9:d6:cb:6e:d3:
7f:e2:f6:98:6e:7a:78:a6:0d:a5:bd:34:1a:b0:87:e6:f4:98:
1f:4f:f0:38:2f:4b:de:86:7d:6a:b8:be:73:de:52:9e:f0:22:
78:51:a2:74:50:c4:39:27:c5:77:9e:bf:6f:9b:0b:5e:5e:4d:
59:92:9d:47:cc:c6:a0:ab:e3:71:4c:37:3f:ea:12:9a:08:6e:
4b:a8:a2:3f:e2:39:4a:c2:19:a3:fc:b4:db:cf:61:36:bf:05:
87:ce:d5:d1:81:84:c6:8d:bc:7d:f9:c2:a4:f6:ba:46:fb:80:
2f:da:c2:4c:7e:15:90:93:cc:9b:10:fd:6a:10:7d:79:76:77:
12:b4:6c:26:cc:d8:db:8f:9a:52:44:cb:22:76:72:7c:61:b5:
5e:6c:8c:bc:94:e7:4e:63:e1:cc:7d:d4:6a:94:ac:fa:e9:3a:
3f:bc:5e:bd:8d:60:ef:ac:39:14:f4:42:49:f1:42:c7:45:5f:
76:30:fb:f1:30:38:3a:de:32:9a:0b:88:16:65:c7:0d:67:9f:
f3:c7:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:17:24 2025 by rpki-client