Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3332203d3e20323032.roa
File: 34352e3233302e38342e302f32332d3332203d3e20323032.roa (raw, json)
Hash identifier: 6aIoEyvbSjqGwaXfc8Z03Kk1Zq891DtHx4hw1LqYC4Q=
Subject key identifier: 38:95:C7:38:A9:E5:1B:19:D6:95:BC:05:DA:7D:1C:0C:4D:FC:2C:B9
Certificate issuer: /CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
Certificate serial: 7CF55BE1FC677B1B000920EF9E0F180EEFBDE9AE
Authority key identifier: 7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3332203d3e20323032.roa
Signing time: Fri 16 Aug 2024 02:40:45 +0000
ROA not before: Fri 16 Aug 2024 02:35:45 +0000
ROA not after: Fri 15 Aug 2025 02:40:45 +0000
asID: 202
IP address blocks: 45.230.84.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f5:5b:e1:fc:67:7b:1b:00:09:20:ef:9e:0f:18:0e:ef:bd:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
Validity
Not Before: Aug 16 02:35:45 2024 GMT
Not After : Aug 15 02:40:45 2025 GMT
Subject: CN=3895C738A9E51B19D695BC05DA7D1C0C4DFC2CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:46:74:ff:3c:a9:af:74:cb:1f:0d:cd:7e:05:
aa:20:f4:c3:b4:cc:27:f5:e1:75:d1:46:87:16:52:
9c:31:77:2a:8c:9c:ec:30:e3:3a:12:49:2e:08:59:
13:81:bc:35:33:41:e1:cd:29:cf:cf:21:3e:c3:a0:
41:86:e0:6f:34:f0:a1:71:b1:fb:38:23:14:fb:01:
72:b6:17:b3:a3:ca:80:61:e1:7e:4d:67:ae:16:fe:
ae:a1:5f:5a:4c:5a:f6:40:2e:55:8d:dd:32:2c:0f:
06:d5:94:70:07:0d:f5:c0:b9:38:0f:14:c6:cf:1c:
6f:c7:01:48:78:35:68:50:45:65:91:b5:86:23:63:
1d:e9:6a:fa:9d:da:3e:c1:59:36:48:89:3a:aa:fe:
0f:6b:c5:dd:05:0e:b3:b2:90:fb:03:0a:59:43:67:
c2:56:b6:79:73:5d:72:f4:71:ab:0e:43:93:e9:93:
1c:a5:7f:c4:86:10:69:4a:e5:99:ac:9a:15:d2:72:
92:60:5e:83:a8:b6:28:4d:f1:d4:f4:2f:b6:7d:5d:
b6:8c:d7:58:8e:ed:0b:ae:cd:a4:4d:16:c2:ed:cf:
e5:8f:fa:f2:92:00:d7:d8:53:56:5f:17:9d:61:56:
06:31:7a:0c:fe:3d:a7:cc:41:c0:a3:41:dd:f8:a7:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:95:C7:38:A9:E5:1B:19:D6:95:BC:05:DA:7D:1C:0C:4D:FC:2C:B9
X509v3 Authority Key Identifier:
keyid:7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3332203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.84.0/23
Signature Algorithm: sha256WithRSAEncryption
40:2a:13:d7:68:b3:05:5e:ff:87:47:4f:f7:d4:db:d4:e1:1f:
8e:69:a8:6a:65:14:9c:58:86:b0:92:af:2d:a2:c1:d3:f5:b4:
6f:d8:41:e4:e4:77:9f:d8:61:5a:bd:16:73:ae:7b:ed:35:11:
54:ee:68:ad:d2:74:b5:6a:d9:eb:1a:c6:06:d7:23:27:6e:04:
6c:12:8d:f1:35:d5:2c:5b:e0:a0:f8:11:42:b6:95:1c:32:30:
cf:73:26:a7:ef:63:c5:98:1a:34:74:fe:55:81:bd:33:d7:af:
e9:13:dd:8e:17:66:ac:1b:dd:0b:36:07:3f:27:de:bf:23:96:
1c:09:31:51:eb:e6:2a:ed:e8:d1:ad:0b:a5:67:de:ea:f4:36:
b4:b0:82:59:93:b9:a5:e1:db:6d:43:d2:98:c7:29:b3:52:a5:
c5:2a:fd:bb:81:9a:41:4d:78:e4:d2:1c:c7:86:9b:d2:93:4e:
8e:e6:52:4c:dc:e9:8c:dd:7f:53:df:f6:1a:20:77:04:c9:f5:
bf:2e:33:e4:4f:ad:3f:e4:85:5f:87:63:9b:e4:86:b3:9e:4c:
64:ea:63:6c:29:5b:db:ac:e2:3e:c9:5d:7f:67:4f:c5:36:f5:
df:ef:ba:67:fa:86:78:86:55:cd:f7:88:5e:34:39:af:c2:b7:
52:af:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:09 2025 by rpki-client