Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31342e302f32342d3234203d3e20323638333436.roa
File: 34352e3233392e31342e302f32342d3234203d3e20323638333436.roa (raw, json)
Hash identifier: G4PD1yFtC8M80Mooy2/6Z2y4rxRyLsvX7zKqtSe4Y8s=
Subject key identifier: DC:00:D6:0B:05:92:9B:65:6A:FE:DC:6E:FE:52:33:33:0A:EC:FE:7D
Certificate issuer: /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial: 3535EFF61CEF834369402AAC3FCE202FA78CFF3D
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31342e302f32342d3234203d3e20323638333436.roa
Signing time: Mon 22 May 2023 19:23:58 +0000
ROA not before: Mon 22 May 2023 19:18:58 +0000
ROA not after: Mon 20 May 2024 19:23:58 +0000
asID: 268346
IP address blocks: 45.239.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:35:ef:f6:1c:ef:83:43:69:40:2a:ac:3f:ce:20:2f:a7:8c:ff:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Validity
Not Before: May 22 19:18:58 2023 GMT
Not After : May 20 19:23:58 2024 GMT
Subject: CN=DC00D60B05929B656AFEDC6EFE5233330AECFE7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:a4:5d:0c:24:6a:3b:66:56:1f:f6:89:12:
0b:8d:48:55:66:dc:ad:54:cd:49:c3:c6:95:21:bd:
f9:7d:a8:62:99:37:1e:df:b2:43:6c:cb:3a:1b:ca:
8f:dd:73:fe:bd:76:5e:f6:c5:06:68:56:ce:76:af:
55:8d:2a:87:a0:70:7c:19:0a:0b:4b:c4:9b:2e:10:
6c:3f:88:91:3e:94:bd:9e:32:ff:05:1b:78:b8:b5:
ac:33:70:5c:f8:3a:19:b1:8c:6e:e4:60:4c:1e:c6:
1a:4a:ce:6f:02:18:1a:68:81:ae:e4:ef:b5:3f:94:
31:c9:ac:c1:e3:73:d7:19:69:05:60:8f:cb:71:6a:
d9:2c:de:50:ed:ad:4b:8e:45:6e:54:de:89:6e:09:
be:a7:5a:e7:b2:a3:04:aa:4a:6e:cd:47:95:92:7e:
9c:00:3b:f3:c4:4a:77:61:df:e4:3f:22:73:60:af:
65:af:9c:cd:cd:5c:ff:dc:d9:8b:be:66:8e:b8:6e:
0a:80:46:ac:b2:69:6b:13:cc:ac:4d:16:fe:52:a7:
3c:2e:b1:67:13:36:e8:76:d7:af:18:7c:46:ab:3e:
4b:06:c4:ee:22:2e:8a:42:72:58:e7:97:2d:a1:58:
ec:4a:8f:73:1b:28:d9:f2:59:94:9c:7f:13:0a:27:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:00:D6:0B:05:92:9B:65:6A:FE:DC:6E:FE:52:33:33:0A:EC:FE:7D
X509v3 Authority Key Identifier:
keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31342e302f32342d3234203d3e20323638333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.14.0/24
Signature Algorithm: sha256WithRSAEncryption
35:17:79:ac:04:25:d5:7b:d7:5c:22:5b:ee:61:ac:00:f9:a5:
ae:7c:53:a4:63:8f:d3:b8:45:0b:c5:ff:b4:40:80:3f:a0:90:
36:b0:cb:4c:8b:b7:63:74:cf:05:25:c0:23:09:13:a5:50:50:
77:b4:2e:f9:a0:80:c6:77:15:fb:c6:fe:33:07:c9:99:22:34:
93:15:8c:33:12:ab:90:a8:3d:b9:65:ce:5d:0f:ce:48:1b:ad:
c9:5e:a3:02:5b:7d:9d:4a:3d:53:bc:3f:06:14:54:ef:ce:cb:
64:a3:5f:ef:f9:4d:0f:64:1a:a5:e4:5f:a6:c3:ea:a9:9d:a2:
20:c3:0c:58:0f:f8:34:e7:1e:21:e4:b1:49:38:d5:be:cf:df:
e3:61:28:2d:88:c7:99:b5:72:ff:0c:cf:c2:64:08:97:f8:16:
04:a8:76:56:59:98:30:44:f1:09:50:6e:09:ce:f4:f6:20:08:
c7:85:1e:dd:4b:d5:f3:c9:5f:fb:b2:f8:9f:6b:03:c0:16:7b:
6a:fb:cb:b3:37:07:bc:67:68:ff:43:08:85:6a:3f:41:f0:01:
2e:ca:4e:9d:36:30:df:16:d2:aa:ac:95:99:6d:12:e8:9b:17:
28:83:a2:81:c2:62:2e:c1:7f:dd:6b:cd:1e:ca:bf:ec:f6:4e:
51:94:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:33:53 2025 by rpki-client