Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
File: 34352e3136312e32332e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier: gu7wZfo1vZPM6KCABXiyBMLjxOzEp/E43hLjS/zEls4=
Subject key identifier: B2:DA:D9:6D:FB:83:29:54:C3:AD:3B:51:B9:02:19:D8:6A:5E:F3:CD
Certificate issuer: /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial: 74AB3BF0888C7236721F05F0C623D42A340B206F
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
Signing time: Mon 05 May 2025 20:58:37 +0000
ROA not before: Mon 05 May 2025 20:53:37 +0000
ROA not after: Mon 04 May 2026 20:58:37 +0000
asID: 268440
IP address blocks: 45.161.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ab:3b:f0:88:8c:72:36:72:1f:05:f0:c6:23:d4:2a:34:0b:20:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Validity
Not Before: May 5 20:53:37 2025 GMT
Not After : May 4 20:58:37 2026 GMT
Subject: CN=B2DAD96DFB832954C3AD3B51B90219D86A5EF3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:98:31:88:d5:76:49:12:76:0d:e5:52:4a:
be:b5:66:48:a9:ff:b0:4f:77:91:56:1a:f1:09:08:
9f:b0:3e:43:bf:f6:6b:49:d6:ae:a5:9c:21:ad:5f:
c4:89:4d:97:14:34:2f:37:7f:cb:fa:92:ba:74:7d:
0c:fd:a8:b1:a9:af:31:4d:0b:a2:1f:59:93:3b:70:
44:4e:14:58:f7:7b:ed:39:e2:d9:90:93:11:81:7d:
00:03:26:9d:c1:78:02:8c:04:95:61:b0:07:56:61:
1c:9c:f1:35:8a:31:55:b8:cf:51:a0:c1:a1:f8:f5:
92:d2:81:86:8d:03:f8:2e:f7:21:8f:84:e8:00:f6:
98:69:3c:20:62:7e:fa:5e:2b:9e:5c:71:31:b6:8c:
9e:34:d7:39:4b:31:b9:cc:94:c0:23:c1:bc:98:8b:
29:96:19:c1:ca:b5:37:2f:69:32:40:d6:83:2a:c3:
66:43:4a:14:61:2b:d3:55:38:dd:b1:81:6f:aa:56:
48:8c:c6:a8:24:d4:d5:0b:de:02:9f:88:00:1d:cd:
39:fc:6d:71:de:92:5e:4a:9b:53:90:e7:87:95:5b:
c2:3c:b1:a5:6c:db:39:cd:64:59:06:00:25:4e:d5:
4e:3a:5b:4b:c8:16:5f:bd:71:05:03:0f:f8:a5:fd:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:D9:6D:FB:83:29:54:C3:AD:3B:51:B9:02:19:D8:6A:5E:F3:CD
X509v3 Authority Key Identifier:
keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32332e302f32342d3234203d3e20323638343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f9:19:39:18:22:3d:af:1b:31:05:53:b7:b0:ac:66:1d:e3:
e9:52:f1:39:32:0a:18:65:1c:0a:ad:d4:0c:30:b5:34:ad:f9:
da:38:31:26:ac:46:63:59:8f:e2:b8:77:50:f0:7f:fc:f4:05:
0f:cc:fb:db:ad:80:5d:a3:00:98:95:bb:e5:83:f4:d7:cb:8d:
c3:a6:26:d1:56:44:fd:8a:bb:0d:ce:4c:38:da:59:00:4d:90:
38:d0:b3:5c:bb:30:28:f2:77:93:da:d9:c9:36:6c:43:51:ee:
23:bd:86:82:a7:a7:d4:4e:b1:a7:47:5a:88:fc:ab:11:e9:8f:
7e:82:3e:c7:db:42:17:a1:c3:c8:ec:33:cc:09:a5:60:fc:14:
bf:f5:02:59:c3:8f:61:c8:f2:4c:e8:14:8f:1c:ac:bd:10:f1:
9d:68:9d:01:8f:d3:2c:a6:af:30:24:76:93:aa:ed:0f:f2:2d:
be:15:c9:ae:33:1b:e4:a4:08:e3:1e:21:75:6e:fc:3c:9b:cd:
44:ce:b5:c3:e3:00:c6:c2:5e:50:e8:c9:93:a2:8d:82:9e:c9:
08:4a:d4:51:9e:12:ef:62:72:54:93:56:91:12:52:c7:48:a5:
d2:a8:74:25:12:a9:26:44:2c:14:ee:eb:5f:ea:e9:e7:de:2d:
5d:46:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:08:07 2025 by rpki-client