Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
File: 34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier: YcHIN3mVYPmeyXSAZa/R2oY63kN01wlKQDi5X9fZJjA=
Subject key identifier: AF:14:FA:73:17:4D:6E:CC:F3:A8:90:4B:3F:C3:7C:88:A2:B3:97:FD
Certificate issuer: /CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
Certificate serial: 3C7BE9E93A46F7B9AB10E3C1F0D5B89F1964D5
Authority key identifier: C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
Signing time: Wed 12 Feb 2025 14:39:56 +0000
ROA not before: Wed 12 Feb 2025 14:34:56 +0000
ROA not after: Wed 11 Feb 2026 14:39:56 +0000
asID: 268746
IP address blocks: 45.171.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7b:e9:e9:3a:46:f7:b9:ab:10:e3:c1:f0:d5:b8:9f:19:64:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
Validity
Not Before: Feb 12 14:34:56 2025 GMT
Not After : Feb 11 14:39:56 2026 GMT
Subject: CN=AF14FA73174D6ECCF3A8904B3FC37C88A2B397FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:0b:a2:ef:e3:88:7e:cb:6b:3c:82:3b:70:
f9:b9:1a:9e:2f:0f:ff:84:3c:fd:2a:ac:c4:15:66:
f1:7c:e4:bd:63:b1:ed:57:61:d5:0e:b3:ea:97:b4:
3f:cb:cc:d6:c3:da:86:07:83:11:cf:01:7b:0e:89:
86:51:18:a7:b5:b4:c3:6e:35:33:66:c5:39:3b:0c:
a7:30:75:46:cc:0f:29:e6:fd:99:91:9b:f5:65:df:
4d:b5:f7:6b:43:c2:6f:2a:36:67:8b:f8:66:52:3f:
9a:ef:b1:da:80:c3:e5:d9:d4:61:d9:c5:7b:d8:bb:
b3:e4:49:89:bf:b2:a4:0e:fa:88:31:5d:20:00:7d:
00:c3:2c:97:e2:83:33:0a:2b:b7:af:dc:f0:dd:ad:
2b:f0:f3:fd:4c:87:48:92:fa:62:1c:e2:02:c0:30:
bb:6f:a1:5b:25:fb:a7:0a:91:ad:fe:29:00:42:f9:
22:a2:1c:57:d1:35:9e:88:81:57:bb:c3:3b:97:0a:
ca:26:7a:23:c6:1e:92:82:8f:cf:1a:e2:0b:31:e0:
17:2f:d9:8f:89:7f:3b:dc:08:d8:5e:3a:10:af:1b:
48:85:2e:d0:c0:99:b6:5d:f9:b4:1e:43:ce:73:14:
c8:ce:9b:ad:1d:4f:38:d7:e9:ac:96:ba:2f:db:32:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:14:FA:73:17:4D:6E:CC:F3:A8:90:4B:3F:C3:7C:88:A2:B3:97:FD
X509v3 Authority Key Identifier:
keyid:C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232392e302f32342d3234203d3e20323638373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.229.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ae:21:78:2d:6c:54:c6:67:b2:fd:86:83:8f:ad:9f:ed:7a:
e0:82:c2:fa:c5:5e:58:fc:79:e1:2a:25:35:1c:4d:20:56:c6:
74:14:14:3e:94:9d:fd:17:99:0a:43:4e:fd:04:18:bc:ab:c3:
71:76:fc:96:87:86:f6:f6:0e:e7:4a:6d:51:47:5d:a9:17:6c:
0e:0d:b7:32:64:13:75:80:fa:36:43:0d:79:b3:f0:95:d6:69:
6e:7f:61:a5:d2:04:56:37:4c:d1:06:cf:cb:28:6e:c2:c9:b7:
8e:f3:a4:0f:6d:ae:92:40:cf:91:a7:8a:7c:7c:47:66:48:c5:
d7:7d:0f:25:2e:14:ba:e4:dc:ed:bf:10:b3:c3:52:86:53:5d:
03:9c:a9:bb:58:36:f3:87:14:66:6a:8e:dc:58:ab:40:fd:3a:
e3:ff:df:77:d3:29:ff:93:0f:21:59:11:b1:9e:aa:2c:1c:e1:
06:bf:b8:9b:ea:17:24:2f:74:b9:b1:c7:4c:18:36:ef:46:38:
9e:e1:9e:c4:df:a1:9a:05:b4:67:b8:85:1e:8a:52:f2:08:a4:
6e:42:aa:f1:c1:e8:03:b4:17:d5:56:c1:51:f9:13:f7:e3:a3:
2b:61:8d:c0:3d:ee:71:9a:58:3f:6c:69:94:8e:a9:2d:98:61:
06:7c:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:08 2025 by rpki-client