Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
File: 34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (raw, json)
Hash identifier: 6Tw1Qh3+7pbuMN+p/b0CjOJVcWYBSbeaPsx04md2eiM=
Subject key identifier: 99:52:DE:F0:67:11:6F:71:92:26:62:26:0B:32:13:B0:12:B1:D0:0C
Certificate issuer: /CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
Certificate serial: 1237C7688A6C636DBE53335A123E22560FD00D72
Authority key identifier: 32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
Signing time: Thu 06 Mar 2025 10:25:04 +0000
ROA not before: Thu 06 Mar 2025 10:20:04 +0000
ROA not after: Thu 05 Mar 2026 10:25:04 +0000
asID: 266526
IP address blocks: 45.65.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:37:c7:68:8a:6c:63:6d:be:53:33:5a:12:3e:22:56:0f:d0:0d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
Validity
Not Before: Mar 6 10:20:04 2025 GMT
Not After : Mar 5 10:25:04 2026 GMT
Subject: CN=9952DEF067116F71922662260B3213B012B1D00C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:5f:28:63:d5:3a:13:4a:08:ca:76:63:41:
94:0d:b8:0e:bb:01:8d:fc:51:11:87:0f:40:2c:55:
e0:7b:d5:2e:81:2b:77:d5:fa:99:d0:98:4d:9d:09:
1f:c5:af:3c:b2:8f:d2:22:30:f8:5b:48:5a:fe:74:
bc:b1:7c:9c:48:10:86:b0:2c:e4:d5:cf:fd:16:2a:
1f:15:86:4f:35:12:91:8d:43:65:74:a9:e9:39:a8:
0f:89:32:98:2f:f9:c0:31:68:32:72:2b:5e:dc:db:
b9:d4:8d:86:91:49:06:3d:fc:74:45:34:d9:34:21:
39:26:c2:0c:c6:b9:1d:90:d6:5c:17:f9:70:9f:eb:
8a:bb:f7:1f:da:d8:2c:0a:4a:68:95:2f:a1:6d:ea:
ce:66:bc:2d:ef:37:54:99:a0:fe:6f:6b:d4:12:4a:
82:8f:0b:6a:71:d9:54:20:63:d6:f6:30:b3:8c:5b:
a1:ec:49:66:b4:c0:03:b5:4c:a5:c6:2b:ab:13:cb:
d1:3c:48:82:ef:59:d7:e4:ef:7b:83:00:5b:56:d5:
21:04:9b:ef:02:e1:55:ab:6a:bd:9d:46:cd:fb:c2:
35:d4:52:c7:9e:0c:46:9f:7b:2d:fd:6c:94:8b:2c:
22:6a:00:f9:c7:50:a0:b3:09:fc:41:d0:2d:6c:3f:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:52:DE:F0:67:11:6F:71:92:26:62:26:0B:32:13:B0:12:B1:D0:0C
X509v3 Authority Key Identifier:
keyid:32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ca:d8:52:27:fc:74:83:33:0b:e9:d0:a3:7b:d2:c8:67:50:
cb:f0:ef:5e:b8:6c:66:db:33:66:79:a9:53:74:76:fd:4a:21:
44:54:d9:2a:61:0c:3b:73:2c:3d:00:28:ef:d7:8e:d5:c7:67:
1f:6d:fa:b5:f1:1f:83:cf:e8:14:a1:a7:9e:44:8f:73:cd:2f:
94:61:9e:c8:d0:02:2f:01:5d:39:60:16:d8:39:0e:84:a9:d8:
e6:cc:90:d3:39:a3:78:65:d8:61:24:9f:16:48:64:85:4b:a5:
42:35:f8:fc:8a:e0:6c:e1:b5:41:3d:e1:e4:e9:e5:00:24:aa:
10:e6:44:04:92:1a:73:05:df:87:8f:4c:12:4c:1d:fa:8d:2b:
44:1e:44:48:61:a1:73:ca:3f:a1:1d:88:f8:1a:db:34:b7:29:
48:76:4c:77:a7:0d:6b:67:c8:ff:9e:37:58:61:bd:62:d3:ed:
2d:c3:f4:3e:ae:57:f7:51:a3:28:61:73:79:f3:22:c6:ea:69:
0a:ab:1d:36:00:49:82:f9:74:e4:41:48:91:e0:57:70:ea:c8:
5a:f3:7f:ca:32:ec:e7:29:a2:cd:7b:43:6e:83:da:a6:16:e0:
91:57:e3:b2:5e:8c:b3:f9:2e:74:51:bf:d8:f2:60:35:fc:3e:
cd:47:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:46 2025 by rpki-client