Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa
File: 34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa (raw, json)
Hash identifier: c+DRVurBNh+Ax/OEhBvMzfVlvJSUNK3t9KjoUTvNuW0=
Subject key identifier: B1:D9:C8:AA:01:E1:DB:00:FD:8F:EE:70:69:5B:C6:15:F8:74:8F:08
Certificate issuer: /CN=D706703A52B31DDA5188756CCD2DCC18305F3F93
Certificate serial: 1847DC3673083D6537CA72097B42433FEEB5D8E0
Authority key identifier: D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa
Signing time: Thu 06 Mar 2025 23:19:35 +0000
ROA not before: Thu 06 Mar 2025 23:14:35 +0000
ROA not after: Thu 05 Mar 2026 23:19:35 +0000
asID: 268479
IP address blocks: 45.161.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:47:dc:36:73:08:3d:65:37:ca:72:09:7b:42:43:3f:ee:b5:d8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D706703A52B31DDA5188756CCD2DCC18305F3F93
Validity
Not Before: Mar 6 23:14:35 2025 GMT
Not After : Mar 5 23:19:35 2026 GMT
Subject: CN=B1D9C8AA01E1DB00FD8FEE70695BC615F8748F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:00:7b:fb:83:37:d4:77:bd:1e:fb:db:59:
15:5f:7d:1b:ee:7b:a6:64:da:f1:31:3e:2a:74:ac:
e8:75:45:93:fd:d2:af:cf:64:3a:dd:86:1b:ba:a4:
48:73:49:eb:e1:6b:99:68:ae:5e:e4:8a:31:39:48:
a9:1c:3d:16:33:82:3d:c8:4c:0a:7f:ec:d8:2d:42:
c4:f3:ec:63:da:8d:14:83:e7:2f:5e:37:e9:31:4f:
c7:dc:5f:8a:25:9d:3a:68:0a:85:d3:06:ab:6b:73:
7c:2f:94:50:62:47:d0:66:c4:5b:49:59:61:c7:88:
d3:db:b4:5f:48:ca:fe:af:ad:b0:dc:bd:3a:2d:3d:
47:ba:82:42:e3:83:2c:6a:58:1d:4b:1f:6b:55:23:
79:db:0f:0f:90:2e:2a:54:a5:aa:54:2f:f4:ee:17:
bc:b7:92:9a:96:04:c5:41:74:80:09:19:ee:70:a1:
c6:39:2f:22:3a:c5:13:13:f6:93:fa:ca:cd:80:38:
89:fa:ba:77:b6:30:e5:86:1c:22:d1:ff:60:f3:76:
21:d1:5b:a1:42:44:60:af:9f:d8:3c:63:e0:cd:0e:
fe:88:66:e0:2b:aa:1f:50:2c:ca:73:23:33:2d:eb:
bc:11:6b:b3:c5:4e:f0:65:83:a6:e9:99:5e:02:f8:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:C8:AA:01:E1:DB:00:FD:8F:EE:70:69:5B:C6:15:F8:74:8F:08
X509v3 Authority Key Identifier:
keyid:D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.240.0/22
Signature Algorithm: sha256WithRSAEncryption
55:02:a4:44:45:5e:6c:84:d8:af:56:b0:29:59:46:0b:79:bc:
25:ef:1a:ad:56:4c:2d:d9:93:1f:3a:95:5f:02:59:5f:06:54:
79:10:d2:e2:42:05:7b:12:ed:f8:77:af:88:e9:70:f1:3d:a0:
eb:6a:99:89:45:74:ee:4b:a7:1a:8c:fc:48:73:0a:18:65:6d:
28:29:55:ee:f8:5d:4a:bd:ca:af:84:90:ce:18:49:f9:f3:31:
ab:1a:d5:0f:22:f5:ae:15:0b:b2:7f:e5:fc:ca:aa:1c:3a:8d:
fb:e4:9a:86:6f:ae:93:78:49:42:2a:5c:91:8f:f0:8a:15:01:
8a:26:dc:1a:aa:a9:5b:76:62:bb:17:67:1f:62:fa:21:76:b7:
5e:17:e2:c8:8d:78:4b:6a:a1:62:f0:82:64:8d:2f:d2:75:ee:
73:5c:8b:32:f9:80:5d:62:ff:de:b5:33:57:24:31:02:56:cc:
eb:3b:8c:99:55:4f:f4:1a:ee:ff:a9:5d:3f:70:28:4e:57:0d:
be:01:14:99:07:5f:82:09:d5:80:68:dc:94:17:10:ea:9c:ad:
34:fa:55:f3:68:f7:bf:2b:10:a8:b6:40:cb:3b:24:68:40:22:
b8:e9:f7:10:12:8a:38:04:4d:f1:73:31:11:fa:a4:d5:a4:b4:
1f:2f:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:46:55 2025 by rpki-client