
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36342e302f32322d3234203d3e20323637393436.roa
File: 34352e3136362e36342e302f32322d3234203d3e20323637393436.roa (raw, json)
Hash identifier: tCLSc118shGYXWPdy0cLkqqo1GQVGcivGk93ekpphW0=
Subject key identifier: 53:AF:3E:B4:E9:80:4A:AA:FC:30:AD:92:75:2B:CF:5D:9B:31:A0:7C
Certificate issuer: /CN=AFE278875684A95688481FDA0240406D1EA7F004
Certificate serial: 3EC3F71FFFB92138765C126ACAAE7185482C62FB
Authority key identifier: AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE278875684A95688481FDA0240406D1EA7F004.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36342e302f32322d3234203d3e20323637393436.roa
Signing time: Wed 29 Mar 2023 15:53:46 +0000
ROA not before: Wed 29 Mar 2023 15:48:46 +0000
ROA not after: Wed 27 Mar 2024 15:53:46 +0000
asID: 267946
IP address blocks: 45.166.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c3:f7:1f:ff:b9:21:38:76:5c:12:6a:ca:ae:71:85:48:2c:62:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFE278875684A95688481FDA0240406D1EA7F004
Validity
Not Before: Mar 29 15:48:46 2023 GMT
Not After : Mar 27 15:53:46 2024 GMT
Subject: CN=53AF3EB4E9804AAAFC30AD92752BCF5D9B31A07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:20:aa:e1:45:96:ea:d6:ae:9d:d4:e7:82:
e5:e6:0e:fe:67:20:d0:3d:04:f4:ed:49:53:4d:1a:
20:a4:43:b0:7e:8f:19:a3:a8:6b:b7:85:c0:dc:bb:
63:5e:04:68:22:c0:39:50:48:f3:5f:41:a9:38:bc:
9f:7f:94:9e:6c:f4:df:d1:94:a1:fd:0d:99:8a:eb:
b0:0d:fc:3a:88:9b:38:05:3f:4b:f1:71:49:4c:33:
7d:9a:78:a9:d0:19:83:b2:08:08:74:8b:bb:5b:5f:
3b:ba:52:b6:49:29:44:36:fe:78:2b:84:e8:8a:12:
ad:a2:62:5a:e0:33:92:dc:c0:67:c3:69:ca:be:62:
13:c7:6e:f1:b5:b7:3c:2b:7b:41:b4:32:e4:20:3c:
f2:23:8e:68:30:d9:4c:5d:7d:e3:7b:11:48:07:04:
ca:78:fa:07:0e:1d:62:6e:40:3b:bd:6a:76:5e:16:
40:03:da:c6:31:02:70:51:63:bf:e7:1a:d7:04:15:
44:b8:29:c9:4a:ed:93:27:9e:71:9d:a4:81:b5:60:
81:30:76:33:59:86:63:1c:e0:bc:c9:16:44:34:e1:
d0:f0:15:7c:ba:d9:94:fd:d7:6a:15:e8:b9:91:22:
84:f1:2c:73:8e:dd:a0:49:a6:4d:0c:ac:10:5d:97:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AF:3E:B4:E9:80:4A:AA:FC:30:AD:92:75:2B:CF:5D:9B:31:A0:7C
X509v3 Authority Key Identifier:
keyid:AF:E2:78:87:56:84:A9:56:88:48:1F:DA:02:40:40:6D:1E:A7:F0:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/AFE278875684A95688481FDA0240406D1EA7F004.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFE278875684A95688481FDA0240406D1EA7F004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/34352e3136362e36342e302f32322d3234203d3e20323637393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.64.0/22
Signature Algorithm: sha256WithRSAEncryption
60:dd:e2:da:ea:b4:e3:e2:af:b4:61:38:da:1f:27:3a:c7:e2:
08:80:31:e0:7b:9d:0d:e8:ae:ee:57:36:36:6c:22:79:03:3a:
04:5f:4e:df:fe:98:a5:ba:f1:21:c0:d4:96:63:6f:18:63:20:
78:00:75:d4:2e:52:a8:ce:06:4d:cb:a3:46:b6:30:12:79:4e:
1a:ff:c5:9d:af:d9:2b:b9:6c:0f:05:14:83:08:9b:d6:25:ca:
f6:bc:45:43:55:61:55:2e:32:2e:db:09:a7:bd:0a:4e:eb:44:
b8:1c:05:ed:d1:16:50:5b:b4:c1:dd:92:f2:0d:d5:83:36:9a:
22:76:57:81:35:07:70:d3:b8:78:bd:fa:9b:d4:68:10:05:c1:
b0:98:f4:2a:38:1b:b7:ab:72:69:b2:ba:9f:70:32:2c:59:2e:
24:a2:62:37:eb:78:99:04:21:e8:55:5e:1a:07:7c:88:e9:96:
ab:fd:aa:91:50:ce:b4:68:f8:20:68:60:1a:5b:e2:26:39:67:
dc:47:4a:c5:35:cf:15:10:74:18:85:21:f8:91:1b:86:96:31:
3e:23:44:12:58:6d:1c:f8:24:25:3d:c9:8e:f0:72:96:3c:8c:
04:d2:42:29:4d:18:23:a4:e7:9b:9f:2a:e6:0c:c4:7d:74:d7:
bc:7b:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:43 2025 by rpki-client