Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
File: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier: odYxRp/W7D7RdaQMJwndqOl8VSFgxLBNQXZYWRJOpmI=
Subject key identifier: FD:E3:A7:F9:A0:53:C9:54:E2:93:EA:69:80:52:2F:95:4E:84:3C:32
Certificate issuer: /CN=C422E0B8C0893646916FBC7155048940DBDE3512
Certificate serial: 4636B9DE6D288238894CFDE8726D39899898167A
Authority key identifier: C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C422E0B8C0893646916FBC7155048940DBDE3512.cer
Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
Signing time: Wed 13 Mar 2024 20:01:55 +0000
ROA not before: Wed 13 Mar 2024 19:56:55 +0000
ROA not after: Wed 12 Mar 2025 20:01:55 +0000
asID: 53107
IP address blocks: 45.171.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:36:b9:de:6d:28:82:38:89:4c:fd:e8:72:6d:39:89:98:98:16:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C422E0B8C0893646916FBC7155048940DBDE3512
Validity
Not Before: Mar 13 19:56:55 2024 GMT
Not After : Mar 12 20:01:55 2025 GMT
Subject: CN=FDE3A7F9A053C954E293EA6980522F954E843C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b4:7b:53:0e:65:23:8b:24:0f:c7:6d:77:48:
32:25:48:d1:da:32:24:5a:aa:90:7b:d0:3f:4c:7b:
1e:86:64:33:29:7f:30:cc:ce:fa:41:27:9d:38:2f:
92:19:10:47:eb:1d:60:75:93:98:62:59:52:57:2f:
42:04:a6:f1:71:54:b7:eb:43:25:25:bc:92:04:fb:
34:df:9f:f0:34:33:b9:82:7f:87:51:98:44:3c:87:
11:77:9c:93:79:2b:77:17:c3:88:63:0e:1e:9c:65:
53:4d:31:3d:7d:72:17:b1:d0:71:1f:c5:92:11:6a:
b2:5f:8f:9b:53:bc:9b:d2:17:33:21:73:26:74:11:
74:3c:2d:10:3e:f4:9f:4c:90:2a:b6:e0:08:63:3a:
63:7b:e2:50:46:a5:b2:a1:0f:86:ca:9c:a6:cd:d7:
80:cc:65:c6:49:29:11:77:cb:7d:7e:46:99:db:d7:
0e:28:fa:a9:22:8a:9c:9e:b9:37:8c:92:f9:fd:75:
36:8e:90:06:e9:34:5d:e3:dd:9a:80:bb:5b:12:da:
8a:3c:bf:d5:7b:7d:a5:88:f5:e3:56:f2:62:53:44:
b6:30:29:50:c7:6f:18:bd:19:35:02:3f:a4:1c:cc:
c5:a4:0b:b7:0f:bb:2a:5f:38:71:b4:57:7c:66:f0:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:A7:F9:A0:53:C9:54:E2:93:EA:69:80:52:2F:95:4E:84:3C:32
X509v3 Authority Key Identifier:
keyid:C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/C422E0B8C0893646916FBC7155048940DBDE3512.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C422E0B8C0893646916FBC7155048940DBDE3512.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/34352e3137312e3138392e302f32342d3234203d3e203533313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.189.0/24
Signature Algorithm: sha256WithRSAEncryption
17:19:c5:f8:e1:60:c4:7a:aa:46:14:e2:ed:7d:a7:28:fc:dc:
07:69:b2:90:a2:ff:80:f7:1b:af:ca:5c:a0:6a:3a:d7:2b:e9:
bf:48:e1:f0:f5:e2:22:cb:b2:4b:2a:39:43:4d:78:f9:45:d6:
11:09:66:e0:e2:eb:25:99:c6:28:7e:2e:ae:e8:f2:c4:dd:98:
b0:8d:0e:43:89:24:10:34:ff:53:94:7a:01:e0:ad:df:51:46:
2a:be:51:76:61:2f:06:9f:5d:d1:a7:af:4b:9d:9c:b5:f1:be:
8d:93:11:ac:0a:3b:e3:7d:9e:ba:27:6b:74:4b:ff:79:7d:de:
9c:e6:6d:de:a2:b5:2f:5b:5c:d4:51:4e:c9:60:b8:e4:a9:94:
12:aa:4d:c3:46:a7:67:1e:82:0e:1e:d9:25:e2:23:8c:57:35:
a7:a6:03:7b:b0:1f:96:36:97:10:2f:c5:e8:73:de:e1:7e:d2:
22:7c:0a:1d:22:2f:83:75:6f:90:15:22:fd:79:07:fe:50:50:
8e:c0:06:45:27:57:03:64:46:e0:35:6f:14:07:26:8b:3b:9b:
ae:c6:8d:ad:5c:24:20:5b:81:d1:63:6c:7d:f2:5c:c2:2b:0a:
37:c6:0f:34:3e:6c:36:25:36:0a:c8:36:2a:1c:db:a4:47:d6:
0e:a2:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:18 2025 by rpki-client