Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231372e302f32342d3332203d3e203532353830.roa
File: 34352e3137382e3231372e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier: 8C3sAqTMZNbyjzguXMBHPD3wPpwjINLSASqJowE3TmI=
Subject key identifier: AA:E8:0F:EF:8D:05:9A:1E:76:D7:3A:00:71:B6:21:36:AB:60:BF:11
Certificate issuer: /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial: 0BF984A73315EA0EE70645F1A0263E96CE342E68
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231372e302f32342d3332203d3e203532353830.roa
Signing time: Fri 14 Feb 2025 19:12:39 +0000
ROA not before: Fri 14 Feb 2025 19:07:39 +0000
ROA not after: Fri 13 Feb 2026 19:12:39 +0000
asID: 52580
IP address blocks: 45.178.217.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f9:84:a7:33:15:ea:0e:e7:06:45:f1:a0:26:3e:96:ce:34:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
Validity
Not Before: Feb 14 19:07:39 2025 GMT
Not After : Feb 13 19:12:39 2026 GMT
Subject: CN=AAE80FEF8D059A1E76D73A0071B62136AB60BF11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:b9:2d:80:80:8c:10:61:22:0d:90:c0:6f:
1b:77:49:1a:03:89:ed:81:43:72:b2:28:43:ff:1a:
e9:98:a0:a6:24:c2:98:cd:33:86:e4:1c:a2:c1:a6:
ab:75:8d:77:ae:d4:d9:ae:76:ae:71:b2:b9:7f:d0:
9a:9e:ea:77:3c:ab:36:d8:45:62:55:04:a0:83:7a:
9d:93:f5:23:06:d1:fd:54:09:4a:83:9b:37:51:f1:
c0:56:b0:b6:36:d3:7d:c8:53:d3:1f:de:d2:8b:62:
be:34:53:eb:2a:25:06:2e:08:55:9b:66:79:bf:99:
49:8a:4b:19:b5:c0:0a:a6:ce:f2:50:68:b9:40:c8:
82:42:0a:bc:8d:9a:54:f5:4e:4d:04:ce:40:c6:e4:
bd:b9:79:b3:cc:1e:cd:50:f3:c8:d3:ee:1c:83:d9:
1c:4d:bd:a7:d8:6e:38:3e:87:98:8e:ae:68:b3:3a:
9a:73:45:ac:14:cc:06:77:5f:82:c8:1b:77:3d:1e:
9f:02:77:ed:9b:d8:02:b5:bc:72:5f:89:b6:fe:3a:
7a:e2:d8:f0:8a:5d:22:22:e9:f5:1b:f1:a8:4e:84:
e5:ab:92:81:39:ad:41:83:17:64:2f:76:6f:fd:94:
22:b6:8c:f3:07:50:8f:da:51:37:64:2f:30:70:4d:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:0F:EF:8D:05:9A:1E:76:D7:3A:00:71:B6:21:36:AB:60:BF:11
X509v3 Authority Key Identifier:
keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/34352e3137382e3231372e302f32342d3332203d3e203532353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.217.0/24
Signature Algorithm: sha256WithRSAEncryption
71:25:f3:56:7d:48:3b:bf:49:f0:5b:1f:29:41:02:db:aa:4e:
53:b5:63:6b:6b:b1:fe:47:75:65:62:0a:19:e4:ed:3c:2c:ef:
7c:29:d9:1d:81:21:e8:69:84:d1:30:b8:3b:d5:81:c1:7f:4a:
f4:90:01:ff:06:50:14:2c:c9:35:3d:1c:14:cb:4f:15:87:0f:
ba:95:28:19:d9:1c:21:9e:ab:5a:92:0f:3e:74:f8:eb:c7:a9:
52:26:04:b0:b9:a9:d4:a3:5d:a4:55:fb:24:45:b4:97:2b:83:
9a:41:e3:8d:ea:7a:65:dd:e2:52:6c:0d:f8:9e:09:8a:54:51:
d2:5d:bb:b4:2f:ac:8d:7d:f2:95:b0:a9:f8:f4:ff:74:b8:de:
80:ec:f3:5e:24:d4:a7:74:97:24:7c:75:31:c7:29:6b:f9:22:
b0:d5:b6:78:55:6c:f7:c9:0b:cb:de:5d:c9:d7:ed:3c:7c:61:
8d:7c:91:f8:12:0f:dc:30:41:b6:c9:2c:f6:48:f0:8a:2c:03:
67:d3:09:e0:49:31:d1:b0:98:b7:cf:3c:b8:98:5a:0e:b8:b1:
ad:a1:d6:82:9a:7e:80:9c:3c:39:8f:5a:89:c7:71:9a:8f:11:
c8:e0:75:ca:75:84:df:9a:94:68:bb:90:6f:96:c4:b2:c1:48:
f6:2c:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:38 2025 by rpki-client