Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/34352e3232352e31362e302f32322d3234203d3e20323636393230.roa
File: 34352e3232352e31362e302f32322d3234203d3e20323636393230.roa (raw, json)
Hash identifier: 01idUwmZnYSqCwp3g7s11ZGlNk0uGj5sxtDEX9SOoA0=
Subject key identifier: 99:BF:0A:91:42:DB:57:E6:7E:32:76:96:67:05:5A:8E:E7:51:FA:78
Certificate issuer: /CN=B7A663920AEF637DF79AA0A99AF488170644C538
Certificate serial: 325D4B003B00CC22C2A91BBEDA993FF3585B830C
Authority key identifier: B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/34352e3232352e31362e302f32322d3234203d3e20323636393230.roa
Signing time: Mon 24 Feb 2025 15:02:04 +0000
ROA not before: Mon 24 Feb 2025 14:57:04 +0000
ROA not after: Mon 23 Feb 2026 15:02:04 +0000
asID: 266920
IP address blocks: 45.225.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5d:4b:00:3b:00:cc:22:c2:a9:1b:be:da:99:3f:f3:58:5b:83:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7A663920AEF637DF79AA0A99AF488170644C538
Validity
Not Before: Feb 24 14:57:04 2025 GMT
Not After : Feb 23 15:02:04 2026 GMT
Subject: CN=99BF0A9142DB57E67E32769667055A8EE751FA78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:e3:4a:0c:f4:99:98:21:12:f9:6f:71:7c:
75:3c:0e:d7:25:e6:c4:d6:9d:c8:08:89:10:7f:5b:
06:61:e3:39:e9:21:89:f9:2f:31:43:98:8b:8b:90:
74:2e:ce:eb:fe:55:03:65:9a:b7:60:c0:15:19:a2:
36:2a:db:ba:56:3a:19:ea:9a:d7:10:9b:43:fe:c2:
53:77:4d:b9:52:16:a3:03:0b:7b:58:92:4d:38:12:
b7:4d:d0:4b:54:39:23:4a:89:98:9f:9e:a0:7f:c5:
05:75:41:61:5c:03:6d:5b:50:fb:90:24:01:27:cf:
82:73:da:99:51:66:c8:87:6a:22:d6:f1:d2:2d:39:
2d:4d:5e:fc:20:86:6d:74:4e:aa:fd:d5:ea:cb:ef:
d0:6c:ee:55:66:6b:6c:18:b7:84:b7:a8:a5:26:de:
8a:13:62:7e:9f:b2:e7:8e:b1:b5:8c:93:de:5e:a2:
31:44:aa:b2:d2:e4:4b:67:e1:63:e3:0c:fd:0d:d6:
6f:f1:e5:c3:e4:c9:a3:c5:e1:44:61:96:aa:29:51:
3a:b5:cd:19:e5:66:a2:96:b6:8b:05:aa:e7:c5:e6:
bb:8d:22:10:3d:7f:48:f8:b2:47:d2:2a:95:2b:c6:
a3:07:c5:ab:61:3d:be:61:36:77:83:d4:9b:f1:1d:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BF:0A:91:42:DB:57:E6:7E:32:76:96:67:05:5A:8E:E7:51:FA:78
X509v3 Authority Key Identifier:
keyid:B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/34352e3232352e31362e302f32322d3234203d3e20323636393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.16.0/22
Signature Algorithm: sha256WithRSAEncryption
33:95:ea:18:2e:ea:7e:bb:89:6b:b0:f1:d6:7f:53:b2:80:0c:
da:a2:bb:df:ae:1e:17:73:ae:cf:b0:63:10:82:37:92:94:42:
e4:6d:10:d1:48:00:43:d0:a7:1a:47:8e:45:a5:16:d6:87:2b:
0a:87:a8:a5:4e:e0:a7:67:52:17:33:d8:35:5f:bc:cf:dc:0e:
0d:d3:18:05:88:d9:3f:e4:92:bf:41:35:40:70:e9:cc:ed:09:
35:33:96:b5:bf:26:9d:7c:3f:12:f8:54:4f:db:cb:ad:50:b4:
70:55:2e:30:1d:29:d1:9c:69:5b:ed:3c:ce:dc:d9:75:5f:bd:
79:08:8f:d2:ef:af:22:b4:da:14:cd:ec:05:dc:c3:8b:22:69:
aa:5d:fd:d4:ff:44:43:3d:b8:53:7c:e3:d0:45:c6:14:98:c7:
de:dd:75:0d:fe:ce:13:72:c3:73:c8:68:7b:44:78:c6:eb:9f:
51:bc:91:9a:51:97:26:83:b7:89:e9:c6:5f:2c:98:f3:56:e5:
04:82:31:f7:37:ea:cc:09:24:2e:24:ec:7f:34:fd:10:32:90:
91:b8:a5:99:c2:41:16:20:6f:05:df:47:3a:08:28:f4:e0:ec:
77:c3:31:61:c9:bb:c7:c3:81:9b:26:1d:4a:d5:12:00:32:88:
e9:3c:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:42 2025 by rpki-client