Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32322e302f32342d3234203d3e20323638323737.roa
File: 34352e3233372e32322e302f32342d3234203d3e20323638323737.roa (raw, json)
Hash identifier: pl9YuA6LZ+Uqm4YuPXK+BVlac4u3moUmz+ovovduRUc=
Subject key identifier: 1E:F9:98:C9:54:22:E1:33:82:EB:52:EA:19:B5:EA:D6:DE:88:21:BC
Certificate issuer: /CN=E9F384C706E4A5CEF9A232E6DB03918B52C871F1
Certificate serial: 3CC934E904992103B6B01FD61C0DBDA0A6688584
Authority key identifier: E9:F3:84:C7:06:E4:A5:CE:F9:A2:32:E6:DB:03:91:8B:52:C8:71:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32322e302f32342d3234203d3e20323638323737.roa
Signing time: Sun 20 Aug 2023 15:42:53 +0000
ROA not before: Sun 20 Aug 2023 15:37:53 +0000
ROA not after: Sun 18 Aug 2024 15:42:53 +0000
asID: 268277
IP address blocks: 45.237.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c9:34:e9:04:99:21:03:b6:b0:1f:d6:1c:0d:bd:a0:a6:68:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9F384C706E4A5CEF9A232E6DB03918B52C871F1
Validity
Not Before: Aug 20 15:37:53 2023 GMT
Not After : Aug 18 15:42:53 2024 GMT
Subject: CN=1EF998C95422E13382EB52EA19B5EAD6DE8821BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:cf:d5:f1:17:a0:e1:f7:27:d9:44:02:1c:
f1:a5:3d:8e:42:9e:2c:61:01:77:81:00:4a:0d:f1:
bf:c6:19:8d:d1:9b:ba:a3:49:4b:2c:c1:e3:3a:3a:
49:11:7a:26:f8:76:a2:d4:d0:96:ab:79:fa:e1:78:
2e:7e:79:47:8c:4d:24:f7:46:5b:1b:e4:ac:e5:70:
20:06:12:0f:e3:82:08:06:5b:cf:71:75:f8:ef:7f:
d7:69:6c:73:ac:31:71:0a:ba:78:8c:ef:5d:a2:f9:
c3:a5:12:c1:33:f8:be:e6:89:0b:de:67:67:b6:33:
14:63:43:71:6c:66:e5:10:5a:0d:29:06:c3:05:ed:
9f:ae:95:96:df:ad:7d:37:a8:79:0f:cf:70:f4:cb:
ba:2c:81:7a:17:f2:ae:5f:3a:3b:16:48:96:cb:69:
60:f1:d5:87:a9:63:77:cd:e8:48:f5:fd:2e:78:aa:
73:51:0d:53:39:aa:75:c2:e1:94:16:f3:24:98:78:
13:48:dc:b5:7e:fc:77:27:e7:14:25:ca:af:30:bd:
eb:0f:cc:ca:8f:15:75:f3:7a:3c:78:ec:fc:e6:2e:
07:ce:34:bc:0d:8e:e3:dc:ff:e0:21:ae:d0:85:22:
17:0b:36:8d:f8:96:64:01:a8:7f:88:d5:9b:10:e9:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F9:98:C9:54:22:E1:33:82:EB:52:EA:19:B5:EA:D6:DE:88:21:BC
X509v3 Authority Key Identifier:
keyid:E9:F3:84:C7:06:E4:A5:CE:F9:A2:32:E6:DB:03:91:8B:52:C8:71:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32322e302f32342d3234203d3e20323638323737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.22.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5a:eb:f2:56:2f:dc:09:81:c1:76:4a:4a:a9:8f:c2:4f:40:
24:14:88:6d:6c:6c:5f:3e:d5:48:21:e3:da:ca:bc:d1:9b:f5:
e8:4f:b0:d0:ae:ed:fb:ed:b5:16:9f:ee:93:2b:2d:40:22:69:
b2:64:b3:94:83:a2:43:87:2d:72:2c:b8:f3:43:42:28:9d:06:
51:2b:58:bc:2d:fb:8b:b9:31:33:f2:9b:c6:fc:7b:04:44:47:
66:28:b1:09:01:d0:7b:e3:2d:f4:6f:25:73:3d:5c:32:b6:20:
59:2f:26:09:de:a0:a1:b8:5b:5e:44:7b:63:19:a4:bd:68:7b:
74:83:3d:1a:87:f6:1c:50:fd:ed:0c:d6:22:78:0a:01:cc:11:
e3:a3:38:56:5e:d5:f3:c4:d9:24:d8:7c:a7:81:ab:0b:48:bb:
a4:c4:b5:dd:04:28:43:02:5b:4e:92:86:ab:9a:4b:f8:b2:2b:
58:49:80:90:69:33:2d:17:7d:cb:43:9e:6c:e7:36:6d:54:91:
f8:9d:62:6f:2b:0a:5a:75:4a:5c:b4:17:61:7e:ef:ed:e0:b6:
d2:fb:6b:95:6a:e6:05:f6:28:d2:44:ab:0d:64:9a:e5:61:78:
a5:b8:fb:d5:e3:88:d6:f5:fd:a1:40:83:8c:c3:dd:c9:be:03:
c6:cc:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:23:54 2025 by rpki-client