Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32322d3233203d3e20323638333037.roa
File: 34352e3233372e3234302e302f32322d3233203d3e20323638333037.roa (raw, json)
Hash identifier: 02EBJeEDN57YYL4INKpEk8ZS/zTFaTiOcuTWakNl2Y4=
Subject key identifier: E1:2C:5B:D5:E8:C8:8B:84:88:73:06:5E:0F:AC:76:53:49:4B:AA:B5
Certificate issuer: /CN=69823D7679590091792F5A82532AAFFF1FBDB871
Certificate serial: 59641CBA943BC802FAE9BAA18567E973BCA0D228
Authority key identifier: 69:82:3D:76:79:59:00:91:79:2F:5A:82:53:2A:AF:FF:1F:BD:B8:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69823D7679590091792F5A82532AAFFF1FBDB871.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32322d3233203d3e20323638333037.roa
Signing time: Tue 21 Jan 2025 21:14:28 +0000
ROA not before: Tue 21 Jan 2025 21:09:28 +0000
ROA not after: Tue 20 Jan 2026 21:14:28 +0000
asID: 268307
IP address blocks: 45.237.240.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:64:1c:ba:94:3b:c8:02:fa:e9:ba:a1:85:67:e9:73:bc:a0:d2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69823D7679590091792F5A82532AAFFF1FBDB871
Validity
Not Before: Jan 21 21:09:28 2025 GMT
Not After : Jan 20 21:14:28 2026 GMT
Subject: CN=E12C5BD5E8C88B848873065E0FAC7653494BAAB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:78:6a:15:04:5a:a6:66:d7:70:e9:a7:d3:
02:d4:85:ac:5f:4b:1a:24:64:20:84:6e:bc:b6:14:
b2:7a:b2:2c:5d:74:5f:26:1f:c3:2e:8d:17:27:e7:
4e:13:98:00:c1:61:58:bd:c1:56:d4:ed:8a:d7:e0:
cf:4d:23:19:a2:0e:00:51:1f:b8:80:fd:86:1d:0f:
21:a1:dd:a8:28:81:e2:4c:dc:ed:8b:00:4c:63:8e:
9a:8b:18:2a:93:17:01:53:d1:cf:ed:63:16:63:4f:
e9:82:b5:fa:58:9b:1b:96:f8:8c:ee:f1:9d:ad:95:
9c:10:bc:3e:40:8a:83:f3:db:b1:96:0d:a4:ca:99:
9a:5f:48:a5:52:d7:27:ea:6c:e3:f2:f7:17:e8:12:
a1:36:b7:b4:5f:64:c0:ff:d5:f8:8b:e8:40:62:07:
21:c2:91:c1:45:12:ec:a8:5c:65:57:2c:27:3f:29:
6a:1f:b3:67:7f:78:9b:4d:bb:3a:8c:ea:6d:ab:e3:
18:1b:87:d5:76:3c:09:20:70:b9:9b:a0:32:47:13:
fb:74:fd:e6:d8:e6:f4:3b:81:a0:4c:fc:b6:bf:ca:
b9:3b:89:ca:67:81:3f:2d:78:19:d7:3b:82:e2:80:
df:c4:75:e2:68:17:75:e8:c4:ea:1f:fa:fa:f1:ae:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2C:5B:D5:E8:C8:8B:84:88:73:06:5E:0F:AC:76:53:49:4B:AA:B5
X509v3 Authority Key Identifier:
keyid:69:82:3D:76:79:59:00:91:79:2F:5A:82:53:2A:AF:FF:1F:BD:B8:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/69823D7679590091792F5A82532AAFFF1FBDB871.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69823D7679590091792F5A82532AAFFF1FBDB871.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234302e302f32322d3233203d3e20323638333037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:1e:6c:4b:07:c6:7f:72:6c:af:2a:ae:cb:2a:ae:7c:bc:01:
39:d3:ae:92:1b:14:94:0a:ce:2f:0a:ca:7a:7a:c7:ee:9e:65:
f7:8b:05:be:8c:37:5c:ea:46:94:b5:a4:62:78:7d:af:e5:f1:
7c:99:01:48:d9:10:e4:01:63:8d:03:53:58:58:9d:25:ba:18:
8a:2a:c0:68:f7:27:77:20:97:5f:2f:ef:23:45:16:19:38:5f:
c2:3d:67:ec:e5:90:3e:0d:35:8a:92:ec:fc:29:fc:19:0a:6f:
b6:55:1e:29:91:e9:9a:8e:0e:a5:af:4e:a7:a7:21:5b:1c:a0:
51:e4:2a:c8:a1:55:5f:4a:22:02:c9:fd:2f:db:e7:dd:1d:7d:
94:48:ff:78:60:ff:34:b3:fc:7f:5a:8d:75:f5:97:b2:1e:c8:
3d:a3:d3:fa:c3:a3:a7:25:08:c4:66:d3:91:1e:29:47:5f:6a:
fd:b7:fd:2b:e5:b5:cc:ef:49:fb:f8:69:94:b0:d6:ce:97:b0:
72:e7:83:3b:38:92:4c:4a:fb:34:c5:69:46:b9:21:8d:f9:27:
95:6d:2b:46:38:51:93:bc:d3:93:e9:ff:4d:f4:70:8e:d4:68:
90:f8:33:ce:7d:48:dc:46:dc:57:09:43:9d:b9:6b:59:24:52:
1e:00:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:02:23 2025 by rpki-client