Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/34352e372e3132382e302f32322d3234203d3e203533303632.roa
File: 34352e372e3132382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier: Qkzwd4QrrXHx38p011EQenU4Ym+hAHP9k/TKu1Mkk3Y=
Subject key identifier: 10:38:FB:01:36:3F:85:6D:7D:B5:9F:53:AC:C7:2A:06:86:87:21:1B
Certificate issuer: /CN=174E7897062398E9506F0862FA46597DF937825D
Certificate serial: 32C710CF9C4A1477FD3A12B07476905B62B1E661
Authority key identifier: 17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/34352e372e3132382e302f32322d3234203d3e203533303632.roa
Signing time: Mon 10 Feb 2025 19:10:08 +0000
ROA not before: Mon 10 Feb 2025 19:05:08 +0000
ROA not after: Mon 09 Feb 2026 19:10:08 +0000
asID: 53062
IP address blocks: 45.7.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c7:10:cf:9c:4a:14:77:fd:3a:12:b0:74:76:90:5b:62:b1:e6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174E7897062398E9506F0862FA46597DF937825D
Validity
Not Before: Feb 10 19:05:08 2025 GMT
Not After : Feb 9 19:10:08 2026 GMT
Subject: CN=1038FB01363F856D7DB59F53ACC72A068687211B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:f0:f8:0c:a1:48:42:7e:7e:0d:26:65:72:
7b:04:b1:e2:cf:9f:37:15:87:27:a5:01:c4:23:f7:
ed:2b:dc:51:de:f9:a8:a5:02:18:ab:b5:bc:05:4c:
19:14:ee:c7:01:49:ec:3e:a5:45:0c:b7:cb:d3:06:
c2:d2:06:78:62:b2:25:6a:43:90:d9:a6:ae:52:c5:
2c:d6:ec:09:e1:05:5a:05:86:d5:4c:55:8c:d0:c1:
f5:21:32:36:bb:63:46:ab:cb:d2:1d:23:fd:0b:0a:
1c:44:ea:fe:e8:bd:29:bd:9e:b8:ef:bd:59:0c:bf:
4f:84:f7:a3:d9:b2:86:06:6d:6a:d4:09:e1:f7:e6:
db:26:e7:ba:c6:68:66:ed:07:a9:c8:ac:fd:f6:36:
58:66:2e:2e:5e:16:c2:2c:0e:66:73:61:17:af:4b:
bd:89:21:d1:c4:0a:2a:59:12:01:2f:4c:70:b2:34:
57:d2:c0:f2:da:a0:c4:21:83:2e:e1:34:d2:8f:20:
f0:e0:d4:95:23:8b:9b:e4:d6:40:ff:df:47:d4:3d:
bf:7f:63:f4:9c:9a:f6:66:cd:b3:5b:21:37:55:92:
3b:40:3f:62:1d:a2:34:7d:09:5a:40:63:df:ec:ef:
9c:77:75:15:09:9a:61:cb:3f:b1:36:7e:05:74:80:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:FB:01:36:3F:85:6D:7D:B5:9F:53:AC:C7:2A:06:86:87:21:1B
X509v3 Authority Key Identifier:
keyid:17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/34352e372e3132382e302f32322d3234203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.128.0/22
Signature Algorithm: sha256WithRSAEncryption
89:fe:3e:3f:a2:3a:06:93:ea:cf:0c:77:26:ef:17:70:af:61:
03:1b:f3:76:54:a6:27:21:14:aa:8b:03:26:e7:be:91:22:f0:
71:89:4c:20:79:a5:64:79:29:13:de:29:b0:37:4a:d1:3a:85:
f8:8f:24:0b:68:d3:15:c3:bf:28:5f:11:46:87:f9:de:35:82:
2f:c3:29:af:a5:f1:85:4d:4f:81:d3:da:23:83:3d:0c:ae:93:
82:a3:5a:d4:2c:53:ad:b7:55:65:d6:7b:40:fc:d0:66:29:b6:
47:f5:95:5f:2e:4e:f7:31:a2:6a:92:0a:e1:32:a5:b5:e4:f8:
c4:59:be:0d:a0:90:f5:5f:7c:7c:fc:2c:77:b9:5d:18:35:08:
f3:60:81:7c:ff:ac:66:3e:ed:4b:c1:dc:12:77:8f:5e:58:14:
93:5c:6c:a8:48:11:64:1d:7b:19:31:b4:d0:f7:50:a2:85:02:
4c:23:ae:af:5b:73:12:34:be:b2:fe:6f:82:af:d5:eb:3f:58:
b9:30:86:fe:cc:7e:42:82:a2:51:92:cd:82:0a:aa:51:6b:ea:
b6:ca:91:ee:61:1e:e0:d8:6e:51:09:15:d1:e6:33:cc:10:20:
5b:d7:40:86:df:ef:52:83:e0:1b:25:92:70:31:fd:7e:5d:d4:
9a:d9:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:14:58 2025 by rpki-client