Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e31302e302f32332d3233203d3e20323639353633.roa
File: 34352e3138392e31302e302f32332d3233203d3e20323639353633.roa (raw, json)
Hash identifier: grLk2F9bVepeccv04n4k/Ck63gLG2ydyFULg/857CxI=
Subject key identifier: E0:8F:23:98:FD:1F:F6:CF:C3:F3:21:48:D2:CE:D7:01:70:D8:93:3C
Certificate issuer: /CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Certificate serial: 1EC7385164F39B301DCC8E753E87E8F0FF8D2868
Authority key identifier: 9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e31302e302f32332d3233203d3e20323639353633.roa
Signing time: Tue 02 Jan 2024 16:29:44 +0000
ROA not before: Tue 02 Jan 2024 16:24:44 +0000
ROA not after: Tue 31 Dec 2024 16:29:44 +0000
asID: 269563
IP address blocks: 45.189.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c7:38:51:64:f3:9b:30:1d:cc:8e:75:3e:87:e8:f0:ff:8d:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Validity
Not Before: Jan 2 16:24:44 2024 GMT
Not After : Dec 31 16:29:44 2024 GMT
Subject: CN=E08F2398FD1FF6CFC3F32148D2CED70170D8933C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:de:58:7b:4a:75:be:3a:83:67:a1:4e:16:
6f:a0:fc:a3:0e:0c:a0:6b:17:44:db:1c:4c:05:9c:
61:27:79:83:a6:1f:f6:1a:a6:a6:bd:c8:3d:cd:7e:
2f:de:64:05:82:23:1b:25:15:21:20:9d:24:4b:dd:
33:b6:2d:31:ee:80:60:6e:97:fc:2a:85:93:5d:24:
04:86:08:d9:40:30:6f:0a:7c:e8:f5:7b:9f:42:01:
fc:a8:4a:08:08:55:fa:4c:83:ad:37:76:13:59:f0:
97:94:39:ed:8e:99:8f:62:42:d3:fa:1a:fe:2c:85:
25:31:54:b6:03:83:26:21:1e:3c:cb:4d:ee:a8:f1:
fa:06:88:91:e0:5f:e4:0e:5c:af:23:8e:88:bc:13:
4e:d9:1e:74:f9:34:ac:d0:c7:c4:8a:13:94:a2:0c:
44:cb:8a:d5:13:ac:6e:6d:d4:ae:c6:3f:36:62:af:
d3:b2:8e:8a:d8:6b:79:a0:ad:34:2e:16:a6:bd:27:
b4:32:08:f1:3f:c0:cd:4a:96:f1:d6:96:e8:98:ab:
a9:06:40:19:2a:2f:af:28:5a:87:9c:24:85:90:31:
ce:03:44:52:b1:cd:26:69:d8:ac:93:28:69:66:7a:
ae:7f:c8:7e:c6:ee:c5:9d:6e:2b:df:30:22:57:c0:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:23:98:FD:1F:F6:CF:C3:F3:21:48:D2:CE:D7:01:70:D8:93:3C
X509v3 Authority Key Identifier:
keyid:9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e31302e302f32332d3233203d3e20323639353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:88:6e:f4:39:c1:0d:99:77:06:6c:c5:cb:41:16:85:6b:f8:
c5:c0:33:f8:5b:21:32:61:ac:eb:0c:35:78:0d:b2:10:8a:d8:
7f:8f:ee:9a:c0:66:0a:0c:5b:2b:46:93:df:9d:a1:37:fa:5c:
60:d6:2f:ca:62:ab:48:9f:36:9b:d0:7f:7c:4d:2a:2c:30:00:
8a:d8:ff:3e:6d:a0:c2:1b:02:8c:4d:77:1f:aa:c4:9e:ef:79:
8c:6d:b8:ec:5e:04:8a:0b:44:08:5a:69:0a:b6:9a:5f:09:76:
83:e0:67:90:13:db:66:62:28:b9:66:30:87:94:b8:5e:1a:7f:
5d:23:d1:e9:a8:e1:14:1b:b0:36:42:1a:5c:0b:ce:03:89:ec:
39:d8:16:98:d1:1c:33:07:22:7a:b6:5c:9c:b4:56:ee:31:89:
ee:d1:2d:ae:e3:99:11:ce:d3:db:7d:29:45:dd:c4:ce:18:a1:
f6:3b:f5:82:65:4f:64:db:05:38:a2:c1:b9:4c:5c:fe:b0:b3:
19:f5:4e:f1:fa:dc:37:87:db:47:db:2d:c7:b5:76:20:e2:f7:
a3:29:0f:e5:dd:ea:00:ab:78:b0:6a:69:f0:94:0a:b5:bd:6b:
c7:50:1d:3b:9e:aa:29:64:6d:9c:1f:3a:9d:a2:ca:bd:1f:e6:
e8:cd:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:07 2025 by rpki-client