Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32332d3234203d3e20323638373037.roa
File: 34352e3136392e3136302e302f32332d3234203d3e20323638373037.roa (raw, json)
Hash identifier: r88dCXpThBegIv3Qyg4g0BFOUSm6chElyqHDekAknC8=
Subject key identifier: AD:9F:31:54:8C:CC:D8:5F:B1:C3:3E:B5:AB:41:71:F1:45:ED:70:37
Certificate issuer: /CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Certificate serial: 49FABA068149EB77D2115D203766BD1BC525262E
Authority key identifier: 3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32332d3234203d3e20323638373037.roa
Signing time: Sun 19 Jan 2025 00:40:17 +0000
ROA not before: Sun 19 Jan 2025 00:35:17 +0000
ROA not after: Sun 18 Jan 2026 00:40:17 +0000
asID: 268707
IP address blocks: 45.169.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:fa:ba:06:81:49:eb:77:d2:11:5d:20:37:66:bd:1b:c5:25:26:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Validity
Not Before: Jan 19 00:35:17 2025 GMT
Not After : Jan 18 00:40:17 2026 GMT
Subject: CN=AD9F31548CCCD85FB1C33EB5AB4171F145ED7037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:28:16:99:66:9a:b1:6a:e6:69:ea:c4:07:
fe:b9:5d:6d:2e:ba:22:13:cf:c5:f1:aa:fa:4e:95:
6c:6f:7c:1e:c2:b8:f3:50:7c:01:40:77:aa:4b:55:
7d:a0:89:d7:82:fa:4c:84:90:bf:62:3a:e5:03:67:
eb:3b:04:8a:a7:a3:34:bb:2e:31:14:90:ba:74:8d:
0c:42:b0:df:7b:23:50:4d:ec:54:90:0f:f6:16:7d:
a5:ae:25:0f:82:38:26:81:59:00:61:16:80:a6:22:
76:21:2c:8a:db:86:8c:6b:b4:ec:ae:60:96:8e:38:
36:ab:03:69:c4:6d:5f:c6:6a:82:ab:b8:f3:0e:2c:
65:ec:e5:1c:c2:7b:cc:2f:fb:a3:f6:75:6a:0d:bb:
6c:7f:e8:86:92:23:81:6e:e0:96:78:4a:34:a1:d6:
78:4b:7b:e3:e9:4a:bf:9a:dc:a2:78:b9:1a:1f:0d:
02:bc:6f:59:95:55:21:85:33:80:2e:4c:b3:8e:e4:
1d:fb:82:73:f4:5f:c2:1b:3a:f7:26:b2:ba:9b:24:
4d:10:3a:d3:7e:80:1e:46:fd:6f:fb:1a:4d:d5:98:
cf:b1:7c:4c:22:3f:d3:53:6c:57:e6:51:96:be:87:
b0:0d:ce:93:51:eb:0c:2f:0f:ac:fc:b3:07:de:97:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:31:54:8C:CC:D8:5F:B1:C3:3E:B5:AB:41:71:F1:45:ED:70:37
X509v3 Authority Key Identifier:
keyid:3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32332d3234203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:eb:a1:b9:42:3d:66:d8:07:f8:1c:f5:ad:5a:57:3b:2f:c8:
24:02:ed:66:dd:a2:00:7a:66:9b:cb:c6:2b:cb:0d:09:ed:7d:
d2:a9:62:06:14:fa:54:66:79:4a:13:d7:27:fb:18:d5:1d:fa:
cb:0d:93:57:8a:c1:63:cb:98:03:d2:d1:56:d5:c3:97:68:87:
ef:6f:cc:66:66:7d:3e:4c:cc:b7:67:61:56:e5:f2:55:c9:4d:
e3:6d:94:ea:58:4f:ab:f1:92:72:c1:f8:51:d8:30:e6:01:93:
0c:e6:de:b3:32:d0:6e:a1:90:eb:e2:bd:b5:df:26:fc:74:43:
6c:ba:ea:41:be:d1:5b:da:bc:6c:50:30:45:97:56:b4:a9:1b:
c8:74:18:3a:6e:02:85:1f:65:30:ba:5c:e8:11:4e:30:66:a1:
99:d4:20:5d:78:5c:a4:19:8d:e9:ce:33:39:d1:d8:81:ac:4b:
81:d6:33:5f:e0:d0:50:a3:57:3b:65:97:9a:15:dc:de:9e:47:
51:9d:2f:71:13:06:e6:82:97:bd:c4:df:80:87:c8:80:49:65:
ac:3f:1e:8a:8a:3c:c8:b7:f6:9d:37:e6:46:f7:f6:c9:ef:9b:
a9:22:81:ac:6c:7c:da:9e:67:b1:25:38:ad:2b:dd:70:e2:b1:
1f:da:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:18:34 2025 by rpki-client