Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3232352e3233362e302f32322d3234203d3e20323633353639.roa
File: 34352e3232352e3233362e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier: sL7dAj71GsnHGMLRrAlckw35C7C5hxqn/TL+hKQV08M=
Subject key identifier: 2A:20:78:EA:1E:63:99:2A:5F:FE:8F:5D:6D:F8:83:9F:C5:96:12:80
Certificate issuer: /CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Certificate serial: 0A98F5D450B361DABEE002D30F5890A73D0198E5
Authority key identifier: 82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3232352e3233362e302f32322d3234203d3e20323633353639.roa
Signing time: Fri 24 Jan 2025 18:46:19 +0000
ROA not before: Fri 24 Jan 2025 18:41:19 +0000
ROA not after: Fri 23 Jan 2026 18:46:19 +0000
asID: 263569
IP address blocks: 45.225.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:98:f5:d4:50:b3:61:da:be:e0:02:d3:0f:58:90:a7:3d:01:98:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82BD943EADDE8D043442C08B37EFCE567D8A3660
Validity
Not Before: Jan 24 18:41:19 2025 GMT
Not After : Jan 23 18:46:19 2026 GMT
Subject: CN=2A2078EA1E63992A5FFE8F5D6DF8839FC5961280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:e5:ea:82:d6:52:39:8d:c5:37:ee:3c:2f:
63:67:54:3e:ca:5b:a2:83:36:5b:9c:a1:fb:36:3b:
ab:f2:6d:c2:eb:b1:f7:e9:d9:b7:ad:7d:f5:40:fd:
a1:3a:9a:8a:f0:0a:37:0d:ba:42:18:55:55:24:a7:
cf:14:cb:cd:94:e5:05:30:a1:c0:6a:c9:2c:91:05:
0f:8f:f9:cd:5d:de:8e:38:90:c7:bd:a9:92:59:de:
68:6c:c4:c2:47:d3:11:ba:30:d0:d8:73:28:6b:86:
b2:78:fe:e1:ae:cf:32:07:f6:2b:9d:96:e1:ac:b7:
28:8f:e2:3b:45:fe:c2:0f:2c:96:a4:83:7b:80:38:
f8:91:a7:0d:05:8b:06:39:f6:18:2c:34:47:0c:b0:
ba:f6:75:4f:45:d7:bc:7c:60:52:02:d9:de:53:ad:
ee:22:de:0a:58:6a:a7:1e:12:43:0e:04:42:de:86:
29:91:52:b8:2c:f6:42:c1:d6:b2:da:a1:a2:4a:ae:
53:2a:b0:cf:82:5d:b2:0c:7a:0c:cc:cd:89:26:96:
1a:ca:a8:24:3b:e6:27:00:fb:16:3c:5b:dd:df:60:
b7:ef:1d:57:79:85:5d:99:65:3c:02:d1:c7:e0:e9:
57:9d:b6:a0:88:1d:92:77:78:a1:2a:01:65:bd:30:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:20:78:EA:1E:63:99:2A:5F:FE:8F:5D:6D:F8:83:9F:C5:96:12:80
X509v3 Authority Key Identifier:
keyid:82:BD:94:3E:AD:DE:8D:04:34:42:C0:8B:37:EF:CE:56:7D:8A:36:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/82BD943EADDE8D043442C08B37EFCE567D8A3660.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82BD943EADDE8D043442C08B37EFCE567D8A3660.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/34352e3232352e3233362e302f32322d3234203d3e20323633353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:52:7d:79:28:48:bb:b5:51:cf:09:a0:b0:19:d4:fc:9e:60:
bc:3c:ec:97:1c:a6:0f:49:16:a2:a0:82:15:aa:45:29:4a:e1:
81:7e:ca:88:6a:98:09:83:b3:fc:61:cb:bd:89:f9:20:8f:45:
23:a9:55:64:5b:93:3d:dc:7c:68:dc:04:9c:f2:01:74:03:ab:
7a:87:2b:32:93:d8:35:7c:5c:55:b6:42:0b:4c:85:89:4b:c0:
cf:f9:4d:a7:de:67:8a:ab:11:a4:a2:be:87:9e:bd:6b:61:bc:
ce:e5:65:fc:34:c8:ce:ad:65:a7:e2:0e:28:a3:0a:26:d8:a8:
56:37:73:eb:20:61:26:40:51:43:da:dd:82:a6:36:64:f9:0d:
c0:e5:ec:ff:4f:6d:ff:58:ce:7e:19:06:8d:6d:04:a5:2a:31:
1d:23:21:17:1d:4e:5e:7a:90:52:b4:4d:3a:43:9d:f6:25:f4:
28:a2:92:89:7a:b0:d1:13:28:9d:b6:b4:7d:95:0b:4a:23:f0:
c5:77:8a:15:8a:0e:e4:e5:66:79:eb:3c:4b:70:d1:18:6f:82:
6b:5d:df:fe:97:f9:9d:7b:1d:45:16:c5:ba:fc:b9:c4:b7:5f:
23:08:27:ae:b1:2d:d3:09:f9:44:00:2f:8d:ba:b6:fe:94:58:
22:b4:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:20:56 2025 by rpki-client