Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32322d3332203d3e20323637333639.roa
File: 34352e3233342e3137362e302f32322d3332203d3e20323637333639.roa (raw, json)
Hash identifier: dWbov0RA3jj6B2FlK9gsSA7iBcmpeKsuT2Q0wDMC6UM=
Subject key identifier: 6C:2D:D7:BD:6F:6C:1D:FF:07:20:2D:E6:4C:E4:1A:1B:E7:AF:C4:CD
Certificate issuer: /CN=AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8
Certificate serial: 4C9652915C9CA11D236AC92E6637707BAA43A287
Authority key identifier: AF:AB:10:CE:6D:C6:17:64:DC:EE:9F:8E:1B:C6:7B:5B:D8:A6:19:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32322d3332203d3e20323637333639.roa
Signing time: Thu 20 Mar 2025 18:54:31 +0000
ROA not before: Thu 20 Mar 2025 18:49:31 +0000
ROA not after: Thu 19 Mar 2026 18:54:31 +0000
asID: 267369
IP address blocks: 45.234.176.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:96:52:91:5c:9c:a1:1d:23:6a:c9:2e:66:37:70:7b:aa:43:a2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8
Validity
Not Before: Mar 20 18:49:31 2025 GMT
Not After : Mar 19 18:54:31 2026 GMT
Subject: CN=6C2DD7BD6F6C1DFF07202DE64CE41A1BE7AFC4CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:58:94:b7:82:3f:a9:eb:75:28:f2:2c:db:
f1:af:ce:1d:b1:ba:0b:7c:18:8a:fe:20:bc:c3:37:
9c:4d:0f:66:42:4d:1e:39:bd:ee:24:39:14:ed:1f:
b2:ea:b3:89:b3:70:7d:05:cf:f2:ea:b7:57:1e:d1:
98:ee:c8:6a:fc:3a:9c:d9:0a:eb:73:7a:17:7d:4c:
e1:43:22:30:cd:13:95:4d:07:a4:1b:d6:bb:fb:86:
1b:86:44:36:e3:53:10:1a:c0:75:76:95:e7:8b:c4:
9e:86:7a:7c:eb:f7:57:c9:13:3a:c4:e4:f2:d0:66:
7f:b4:47:0a:0e:9d:19:c5:3a:3a:2b:d2:37:ed:b4:
d3:dd:1c:df:80:9f:de:0d:fd:7f:34:aa:b0:55:dd:
ac:12:ec:7e:44:26:d5:5f:94:81:5c:ee:e7:5f:e6:
30:b8:a2:a6:0e:28:3d:7a:c0:22:f7:1d:14:dd:f1:
39:de:45:5a:2d:bd:98:a8:a1:57:f9:b7:74:ad:54:
ce:86:a5:18:bf:8d:34:f2:a1:b0:bb:59:4f:9c:1b:
37:28:7e:6f:45:bc:77:07:ff:7d:79:33:2d:74:2a:
80:a2:dc:aa:f6:71:b3:78:e7:e7:9a:96:d7:2a:b9:
8c:f9:5e:b8:f4:e5:50:d6:a1:d3:f4:2d:df:f4:de:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2D:D7:BD:6F:6C:1D:FF:07:20:2D:E6:4C:E4:1A:1B:E7:AF:C4:CD
X509v3 Authority Key Identifier:
keyid:AF:AB:10:CE:6D:C6:17:64:DC:EE:9F:8E:1B:C6:7B:5B:D8:A6:19:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/34352e3233342e3137362e302f32322d3332203d3e20323637333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.176.0/22
Signature Algorithm: sha256WithRSAEncryption
68:ea:7e:8e:78:a6:8a:a9:1d:70:d0:e9:52:ac:36:5b:61:90:
63:86:82:5d:77:3c:81:84:15:72:4c:2b:fe:a7:8b:be:40:c7:
d4:96:f2:66:4a:aa:7b:74:43:39:a6:74:44:8c:32:fc:f1:f7:
58:10:13:89:da:58:03:55:62:b7:01:68:9b:fc:40:3d:b0:7b:
f3:50:25:a7:eb:3c:fa:d2:84:98:c5:09:40:b8:88:10:6a:79:
88:39:cc:26:28:2d:ee:71:ab:e6:92:22:ed:2e:40:b4:4a:e3:
81:b9:f6:88:be:57:a8:b6:1e:62:72:75:22:0f:cf:f1:75:26:
a5:fb:bc:a9:eb:b0:d1:48:20:81:f5:c7:6d:90:93:80:b4:03:
3f:3a:94:d1:8d:a9:13:c9:96:ec:09:16:5a:e7:d5:23:80:8d:
dd:4a:6d:01:04:ac:e2:69:1f:ef:f8:fc:c4:a6:5b:76:40:10:
91:e3:37:22:5c:d1:56:c7:72:ae:20:8e:61:fe:da:73:6d:8f:
e4:63:9b:1c:e4:62:54:46:ca:65:28:47:3c:67:e5:55:33:d6:
e2:4a:e4:c4:d4:48:20:e8:b1:ca:bc:e1:1e:17:b0:77:29:fb:
8d:2e:2f:f8:cc:60:77:02:11:e1:cb:b5:83:70:a2:af:b4:1d:
29:51:bc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:05 2025 by rpki-client