Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/34352e3232382e382e302f32322d3332203d3e20323637303632.roa
File: 34352e3232382e382e302f32322d3332203d3e20323637303632.roa (raw, json)
Hash identifier: 3wQMCL0S9Yf+qCsjXnp4wgGhdiGDNEZSTWCI/5Vh3C4=
Subject key identifier: B0:2B:81:91:2F:E4:12:38:9F:39:73:9D:FB:3D:40:41:B2:D5:BB:46
Certificate issuer: /CN=8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5
Certificate serial: 2A7F2BEC052764EB3D735221DCF4E90BB17662EB
Authority key identifier: 8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/34352e3232382e382e302f32322d3332203d3e20323637303632.roa
Signing time: Thu 06 Mar 2025 10:47:54 +0000
ROA not before: Thu 06 Mar 2025 10:42:54 +0000
ROA not after: Thu 05 Mar 2026 10:47:54 +0000
asID: 267062
IP address blocks: 45.228.8.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7f:2b:ec:05:27:64:eb:3d:73:52:21:dc:f4:e9:0b:b1:76:62:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5
Validity
Not Before: Mar 6 10:42:54 2025 GMT
Not After : Mar 5 10:47:54 2026 GMT
Subject: CN=B02B81912FE412389F39739DFB3D4041B2D5BB46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:ff:53:95:5d:01:d6:d4:b3:56:f6:12:1e:
c5:cf:58:38:cf:8a:f3:41:cb:4a:e3:e1:21:4e:f1:
c1:2d:91:63:87:35:d4:26:b8:59:a1:2a:7f:63:1e:
39:1a:3b:12:77:46:23:24:7e:02:a3:12:44:5c:61:
47:87:96:93:8d:1d:9b:40:f9:00:93:fd:44:81:98:
2a:ad:2f:da:64:25:3e:72:69:15:a4:73:74:b2:21:
10:32:5b:d3:54:ae:88:98:d8:28:18:18:c5:ae:f2:
f1:84:ff:3c:ee:2f:16:d4:9c:98:50:c5:ce:66:c0:
bf:ad:32:13:37:86:42:d4:84:53:79:d2:36:0f:d1:
53:12:0f:2b:6f:4e:c6:df:04:72:f8:99:4d:d7:1f:
9e:0a:37:00:61:87:87:2d:38:4c:4c:ea:f0:7d:16:
b3:08:ff:55:e0:85:fd:23:13:78:c0:32:be:68:bf:
88:4f:8a:3f:1a:32:e8:45:5c:24:73:f6:4a:d4:22:
03:d9:d5:8a:c6:37:44:e3:6c:40:9e:bf:13:5a:22:
09:db:e6:20:2a:76:bd:55:9a:d3:16:43:f8:5e:e5:
e0:98:f2:95:3a:7a:c0:ef:09:48:b0:56:bf:6f:9d:
6e:6c:21:b3:e6:46:19:11:45:ee:39:05:e3:c9:a1:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2B:81:91:2F:E4:12:38:9F:39:73:9D:FB:3D:40:41:B2:D5:BB:46
X509v3 Authority Key Identifier:
keyid:8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/34352e3232382e382e302f32322d3332203d3e20323637303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.8.0/22
Signature Algorithm: sha256WithRSAEncryption
44:35:45:81:9c:62:01:23:1b:0f:f5:7a:ff:42:c0:a7:69:03:
85:dd:29:8b:e7:b1:dc:6c:f9:0b:a5:b1:2c:c5:b4:8c:5a:9b:
61:89:3c:50:cf:75:ea:25:0d:58:61:b2:ca:15:f1:84:f7:b4:
de:7e:38:af:ee:60:ac:2c:f6:ad:1c:1d:7a:23:e8:76:b4:54:
6f:2e:1e:ea:96:b8:21:9c:34:fa:91:9d:03:8c:12:ff:06:a4:
ae:d6:00:18:c8:89:28:2a:b9:3b:c5:06:9c:94:43:4f:ff:3e:
cb:ed:1d:9e:a5:1b:80:56:33:a8:61:dc:f3:e8:61:d2:99:f3:
da:a6:57:96:a1:76:08:6f:2a:40:fb:42:ca:95:0b:98:09:14:
23:b4:61:7c:19:e4:8e:ab:a5:19:48:93:09:6e:09:e1:ef:e6:
1d:82:93:00:c3:6b:be:0c:5a:b7:7d:e1:48:0c:dc:11:7a:66:
5f:8f:87:38:40:c4:29:36:d1:2b:a6:a2:90:32:7e:88:df:d9:
b7:29:12:fa:29:9e:bd:cf:d8:16:9c:cf:05:96:80:7f:42:e5:
d1:e0:97:d6:c9:74:a1:c6:ce:58:16:f0:b9:38:fd:26:2c:26:
d3:12:a5:c1:82:d2:9a:d4:82:49:19:8c:70:fe:41:b0:01:90:
e6:1f:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:06:33 2025 by rpki-client