Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230342e302f32332d3233203d3e20323637363635.roa
File: 34352e3232342e3230342e302f32332d3233203d3e20323637363635.roa (raw, json)
Hash identifier: EiL615Lewe7XzVpIr7qYbz58tCOfClnNm/0zgTMbMaE=
Subject key identifier: D5:D1:BF:16:46:F6:DC:2E:0B:91:63:5D:CC:A5:BA:82:85:0A:E9:1E
Certificate issuer: /CN=2ACF040B0315E2967A7D30E1A3047CCBB7A56867
Certificate serial: 5CA5693E37C3345640F1AAFF90D6D5854928E43A
Authority key identifier: 2A:CF:04:0B:03:15:E2:96:7A:7D:30:E1:A3:04:7C:CB:B7:A5:68:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ACF040B0315E2967A7D30E1A3047CCBB7A56867.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230342e302f32332d3233203d3e20323637363635.roa
Signing time: Mon 21 Mar 2022 19:13:00 +0000
ROA not before: Mon 21 Mar 2022 19:08:00 +0000
ROA not after: Mon 20 Mar 2023 19:13:00 +0000
asID: 267665
IP address blocks: 45.224.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:a5:69:3e:37:c3:34:56:40:f1:aa:ff:90:d6:d5:85:49:28:e4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ACF040B0315E2967A7D30E1A3047CCBB7A56867
Validity
Not Before: Mar 21 19:08:00 2022 GMT
Not After : Mar 20 19:13:00 2023 GMT
Subject: CN=D5D1BF1646F6DC2E0B91635DCCA5BA82850AE91E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:89:01:85:54:c2:a0:c1:5d:2d:46:81:83:
c6:48:00:40:9c:dc:a4:62:45:c7:75:1e:03:87:44:
44:14:b1:aa:83:0c:93:7b:2c:be:c6:fe:95:d2:9a:
16:7e:2a:73:2c:6c:95:6b:66:ac:11:5a:3d:fe:8d:
4f:1e:35:77:ee:df:85:7f:74:dd:a7:95:10:b2:26:
37:00:4f:d0:c4:83:59:81:39:33:ae:c5:7c:7b:ec:
a3:0d:2e:d6:c2:7c:c3:cb:98:36:b1:44:df:2c:ca:
9e:a6:eb:8b:48:ff:a1:fc:aa:cd:d7:3c:84:48:30:
13:0d:df:8e:4d:43:df:5c:ff:6f:1b:a7:61:ef:53:
12:45:60:92:0a:a8:73:31:fa:16:15:49:f1:8d:47:
20:b5:64:45:ce:95:b1:52:63:ce:5f:3c:28:d9:c9:
73:fc:ea:ad:ab:98:4d:8b:e1:b3:42:e2:25:65:1c:
d6:60:08:ff:df:be:1b:24:40:c5:6d:94:15:08:3b:
3e:b6:6f:7f:69:3c:4f:fe:99:3a:67:5c:b3:82:cc:
da:cd:a2:5a:ea:7d:48:5a:39:f0:24:ad:8c:2e:2e:
88:cf:56:e1:5b:54:67:0e:f9:40:78:62:ce:42:6d:
0f:b3:c0:7c:db:d4:af:62:5b:40:25:91:13:09:8a:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:BF:16:46:F6:DC:2E:0B:91:63:5D:CC:A5:BA:82:85:0A:E9:1E
X509v3 Authority Key Identifier:
keyid:2A:CF:04:0B:03:15:E2:96:7A:7D:30:E1:A3:04:7C:CB:B7:A5:68:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/2ACF040B0315E2967A7D30E1A3047CCBB7A56867.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ACF040B0315E2967A7D30E1A3047CCBB7A56867.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAqLMCsGAJGzKrZn5QFZpeJWH1U6QqzxEbCd8UwpC6qz/0/34352e3232342e3230342e302f32332d3233203d3e20323637363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.204.0/23
Signature Algorithm: sha256WithRSAEncryption
04:fb:ac:4c:b7:af:10:9d:e7:20:91:89:78:19:0e:24:9b:e5:
cc:c8:18:a2:54:76:0f:2c:12:d3:9e:9a:4c:2d:8c:44:36:26:
59:a7:00:8a:f1:8f:8e:f9:44:b0:39:33:f2:f1:98:6f:64:5c:
4a:2f:94:bd:b4:f2:28:5c:76:18:01:30:f1:88:ba:50:c0:b4:
50:a7:b5:b6:fa:54:a6:04:c0:6c:f1:f1:97:54:c4:a4:8d:3f:
8f:c9:80:6c:68:f3:2e:cf:1d:2e:0b:f0:d2:1a:cf:d2:39:fe:
9a:e3:55:4e:56:11:94:0f:6c:1f:a8:2e:5f:e9:2f:6e:ed:8f:
10:12:3a:73:a1:e5:f8:9f:c5:cd:88:44:7e:b3:c6:d6:a1:ac:
7a:8f:b0:ee:df:a7:a4:eb:94:5b:a2:f4:4a:fb:f3:20:ab:44:
ac:54:5f:f2:54:66:c8:88:4e:bd:3c:2d:5b:98:26:10:00:fe:
9d:8e:f0:95:16:90:29:3d:13:c3:5a:b6:df:51:55:24:49:3e:
ef:29:b7:f9:05:ec:ad:71:0a:4a:48:45:4a:a6:c5:b6:f8:11:
b1:d6:ef:05:f9:b7:10:97:ce:87:df:0b:1e:15:78:30:f8:0b:
ab:f8:75:31:3c:1a:7b:a3:ba:2e:12:2f:65:51:b5:ae:78:1f:
ad:d3:07:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:56 2025 by rpki-client