Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33382e302f32332d3233203d3e20323639353038.roa
File: 34352e3138382e33382e302f32332d3233203d3e20323639353038.roa (raw, json)
Hash identifier: 5BAoKY7mIVJC41pKAc0RT4IItwg3WpuqNEstGETj12I=
Subject key identifier: 04:F3:E2:A0:20:D2:4B:7C:C2:C3:6D:9C:33:B9:30:D4:D3:16:72:59
Certificate issuer: /CN=38025C3CE376357918C078D8E62D989FFD0406EC
Certificate serial: 62F6F2357C39D6DE3CCC9EE7B943EF86E7AB98B6
Authority key identifier: 38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33382e302f32332d3233203d3e20323639353038.roa
Signing time: Fri 14 Mar 2025 21:43:20 +0000
ROA not before: Fri 14 Mar 2025 21:38:20 +0000
ROA not after: Fri 13 Mar 2026 21:43:20 +0000
asID: 269508
IP address blocks: 45.188.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f6:f2:35:7c:39:d6:de:3c:cc:9e:e7:b9:43:ef:86:e7:ab:98:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38025C3CE376357918C078D8E62D989FFD0406EC
Validity
Not Before: Mar 14 21:38:20 2025 GMT
Not After : Mar 13 21:43:20 2026 GMT
Subject: CN=04F3E2A020D24B7CC2C36D9C33B930D4D3167259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:dc:7f:71:db:67:87:a0:32:e4:ce:36:b9:
b0:ce:80:c7:d6:bb:2c:82:7c:96:05:ce:a5:b5:3e:
94:95:0a:d9:4e:5b:b3:49:97:de:b2:00:2c:26:5e:
74:37:97:cc:d6:6d:12:d9:7a:69:03:13:61:78:31:
08:1b:5c:f4:e5:b7:e2:7c:60:76:6a:1b:e5:60:43:
c5:c5:87:33:c3:9b:13:a2:99:c5:b9:26:ed:24:b7:
19:46:79:98:d2:bd:60:45:25:bd:61:4d:c4:15:c4:
f7:04:4a:e4:15:af:55:b0:6c:22:d2:0b:38:3e:47:
28:24:35:62:5f:e4:2c:8c:c7:20:fc:cd:3a:a3:3e:
d1:09:9b:f2:97:e1:df:87:dc:34:12:b2:c2:f8:98:
7b:a1:73:17:9c:21:6b:5c:fa:c3:51:c6:1d:b9:df:
26:7e:0e:11:f5:fb:95:f7:db:a9:ca:92:6a:35:79:
78:b2:f6:c6:2c:80:04:11:69:6b:8b:59:33:1c:0c:
45:d6:68:5e:46:78:38:a9:67:01:d5:a9:1c:9d:f0:
f3:72:4a:30:ab:78:e7:10:ed:6a:a6:3d:07:f0:7b:
df:dc:aa:8f:77:f4:5f:9b:32:7f:5b:ed:78:4e:1f:
97:af:fe:b7:78:13:2a:1c:20:08:e6:af:21:28:b5:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F3:E2:A0:20:D2:4B:7C:C2:C3:6D:9C:33:B9:30:D4:D3:16:72:59
X509v3 Authority Key Identifier:
keyid:38:02:5C:3C:E3:76:35:79:18:C0:78:D8:E6:2D:98:9F:FD:04:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/38025C3CE376357918C078D8E62D989FFD0406EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38025C3CE376357918C078D8E62D989FFD0406EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33382e302f32332d3233203d3e20323639353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.38.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:fc:44:58:24:d2:3f:83:bb:7b:4f:5a:21:4f:f9:7f:33:ac:
2f:c8:d9:25:25:93:41:2b:3b:09:c0:2d:93:35:d5:03:c7:f7:
aa:d2:82:29:bd:be:31:0f:eb:20:6b:2f:ff:66:48:e1:5a:5d:
8e:27:0c:e2:cb:19:ea:53:48:a6:e2:ef:c2:a4:ac:ab:3e:21:
54:5d:ed:39:02:bb:87:56:42:36:8d:0b:f5:d8:7f:34:a2:70:
56:8c:2e:c8:7d:fc:62:c8:f5:f1:2c:66:35:78:76:32:9a:32:
60:91:31:63:e3:28:97:67:5b:b7:61:3b:10:0f:c9:b7:3e:82:
a7:2a:27:f8:85:6b:fc:16:71:4d:8d:bb:74:02:96:bd:90:3f:
cd:f0:a7:fb:8d:9d:01:ec:49:d5:40:65:73:8e:a7:1c:3c:5d:
e1:ab:e8:98:18:ef:91:97:0e:76:d1:f0:87:b2:41:ec:f6:ca:
87:d6:d6:a8:08:bc:d5:30:63:71:b0:b5:ab:0a:ad:a4:02:b6:
69:1e:16:0b:ae:9d:f9:ae:98:c8:f3:f0:42:3d:7c:33:d6:cd:
e8:31:d4:08:a6:f4:55:76:8d:e5:01:61:00:22:ce:ac:8c:84:
67:b1:95:c1:71:e6:f7:c6:f4:d0:0b:ca:27:62:7c:cf:4c:15:
5b:ff:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:49:05 2025 by rpki-client