Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/34352e3137322e3137322e302f32322d3332203d3e20323638383232.roa
File: 34352e3137322e3137322e302f32322d3332203d3e20323638383232.roa (raw, json)
Hash identifier: 36k4ARjPJEtErKQb5rHxaiiIEG9ou9YJbZyNphFALbk=
Subject key identifier: A4:53:01:F4:F5:06:16:9A:0E:24:25:8D:36:0B:3F:26:A9:02:52:5F
Certificate issuer: /CN=DFE7F74B9B7F295D740ABA91E7106F6A68F59899
Certificate serial: 56F82EE16F14DBCC57C5D1EA6AD49693A49F3407
Authority key identifier: DF:E7:F7:4B:9B:7F:29:5D:74:0A:BA:91:E7:10:6F:6A:68:F5:98:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFE7F74B9B7F295D740ABA91E7106F6A68F59899.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/34352e3137322e3137322e302f32322d3332203d3e20323638383232.roa
Signing time: Fri 31 Mar 2023 19:56:26 +0000
ROA not before: Fri 31 Mar 2023 19:51:26 +0000
ROA not after: Fri 29 Mar 2024 19:56:26 +0000
asID: 268822
IP address blocks: 45.172.172.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f8:2e:e1:6f:14:db:cc:57:c5:d1:ea:6a:d4:96:93:a4:9f:34:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFE7F74B9B7F295D740ABA91E7106F6A68F59899
Validity
Not Before: Mar 31 19:51:26 2023 GMT
Not After : Mar 29 19:56:26 2024 GMT
Subject: CN=A45301F4F506169A0E24258D360B3F26A902525F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:85:88:ae:11:0f:2e:e6:95:c7:12:a1:c9:
51:0e:ad:51:ff:fa:70:80:54:53:b3:e2:55:77:cd:
71:34:39:41:ec:97:f7:0e:a5:6c:86:b0:ce:b5:99:
92:f5:a0:91:db:e8:ac:21:a2:2a:41:12:b6:70:63:
20:02:d8:78:45:b5:1f:a8:48:4f:51:63:f3:44:96:
21:b1:c8:02:f4:55:13:0d:fc:12:11:5a:ec:57:a8:
4c:10:87:16:a4:0c:c1:59:1c:0f:da:76:64:04:25:
5a:5a:b6:9c:f1:c1:55:92:2b:3f:24:ec:f3:1c:e5:
f3:da:60:ac:23:97:0c:95:eb:e7:c5:c7:81:c7:04:
c4:9a:85:b5:5d:9a:35:0f:3c:5a:dd:fe:0e:32:26:
1c:5b:2c:c0:9f:5c:29:4c:9f:58:9d:29:c0:f6:c2:
64:eb:f4:de:6c:d8:0f:69:68:f9:e3:bb:4f:74:f3:
ac:9b:5d:63:71:21:30:d2:d8:c0:98:d6:c5:cf:54:
ed:2f:d1:02:d4:16:5e:c8:c8:04:32:25:bb:d6:87:
37:73:65:96:09:76:48:5a:c0:e1:8a:5c:af:83:bb:
1c:be:bb:9a:5b:d9:fe:9e:24:8e:21:61:1d:1e:8c:
83:19:ee:e6:8c:91:35:ad:41:29:65:48:98:f5:84:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:53:01:F4:F5:06:16:9A:0E:24:25:8D:36:0B:3F:26:A9:02:52:5F
X509v3 Authority Key Identifier:
keyid:DF:E7:F7:4B:9B:7F:29:5D:74:0A:BA:91:E7:10:6F:6A:68:F5:98:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/DFE7F74B9B7F295D740ABA91E7106F6A68F59899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFE7F74B9B7F295D740ABA91E7106F6A68F59899.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1YQF8mpEir25pCLkU8nfGpqY1fdkro5sNYv4u7GHDZv/0/34352e3137322e3137322e302f32322d3332203d3e20323638383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
56:15:86:3b:67:a3:4b:9d:27:ca:2e:a7:a5:e9:b9:10:ec:7d:
80:db:d9:f0:43:ba:4d:8b:f0:ac:00:6c:f3:19:89:85:95:75:
71:ca:78:18:a6:80:9e:38:f3:a7:27:40:4c:f1:7b:d6:61:5f:
35:7e:79:7f:02:b7:39:7a:fa:3f:b9:03:20:b8:87:ff:e7:89:
da:dc:ed:9c:3f:4a:2c:ad:32:0f:2d:a5:65:ee:aa:d7:e0:22:
5a:8d:9b:0f:da:c5:b8:0e:a6:82:0b:57:5f:95:4f:6a:6f:f1:
38:1a:66:bd:74:fa:6b:b6:7b:15:fe:7a:54:ae:50:89:15:aa:
cd:c3:02:16:05:31:4c:a6:69:6b:6b:e0:72:74:8b:a2:71:8f:
bc:f3:43:a6:ea:ff:76:f0:01:c7:54:8f:5c:e3:54:8b:58:8c:
64:9b:ed:36:a1:98:85:c7:18:e8:07:42:67:b0:1e:66:a6:fc:
50:68:e6:5d:be:58:5a:ee:14:9e:96:64:41:1a:0e:32:1c:e6:
d3:3e:b6:29:1b:89:27:01:29:7a:60:c6:4f:45:b4:9e:97:34:
5c:d3:90:1f:5b:bc:86:5a:79:cb:66:76:04:7d:53:af:e6:32:
b7:7f:32:c4:65:5f:a1:83:59:a5:a9:f6:d8:ca:91:0a:a0:56:
2d:83:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:29 2025 by rpki-client