Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa
File: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (raw, json)
Hash identifier: zwE7+BkACCSkaLuprz1tnvVDwiMXOKL8M0S4eDl2SuI=
Subject key identifier: D0:9A:FD:2E:F2:DD:77:D4:61:66:6F:92:AB:3A:37:04:F0:A2:87:6F
Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Certificate serial: 0A48A126C71DF544D0F452DE8E6FAC1A36F0DDE0
Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa
Signing time: Thu 19 Dec 2024 23:08:07 +0000
ROA not before: Thu 19 Dec 2024 23:03:07 +0000
ROA not after: Thu 18 Dec 2025 23:08:07 +0000
asID: 269707
IP address blocks: 45.191.160.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:48:a1:26:c7:1d:f5:44:d0:f4:52:de:8e:6f:ac:1a:36:f0:dd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D
Validity
Not Before: Dec 19 23:03:07 2024 GMT
Not After : Dec 18 23:08:07 2025 GMT
Subject: CN=D09AFD2EF2DD77D461666F92AB3A3704F0A2876F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:cf:3c:92:ae:c5:74:e1:2e:f9:af:17:f9:
ba:8c:76:89:d6:9c:77:ad:3f:90:dc:ba:ec:a6:4e:
43:b9:8e:67:45:9c:ec:0f:bb:0e:c9:17:7c:1d:7a:
ee:0a:33:8f:35:a4:28:0e:6c:da:32:62:8d:4c:4c:
ac:e7:f6:47:bd:46:55:2e:46:6d:5c:69:69:17:ae:
93:8f:ba:ab:d5:fe:ac:3d:fe:94:dd:59:f4:31:b5:
7b:15:16:62:4b:f4:33:2e:7a:c9:73:bd:91:23:f1:
40:54:11:c4:a0:8a:fc:a5:fc:35:d8:2f:2a:96:de:
08:bb:f3:80:cf:9d:66:71:68:51:33:38:a3:35:d8:
e1:ee:dd:44:2b:18:56:56:50:5d:30:40:52:5a:3e:
98:cb:2a:94:7c:b0:e4:a5:94:f1:45:d0:d7:83:23:
e9:91:6f:0c:78:52:b3:47:90:cc:56:fe:b8:6d:95:
62:21:ae:5e:c0:6d:0d:8b:be:9a:c9:1a:ee:56:45:
df:3d:a2:c4:d3:ac:c2:1b:49:2d:e6:ff:10:0b:df:
3e:63:18:5e:0e:09:6f:fa:9a:2a:7a:6c:f4:c6:c0:
e2:e6:84:2b:f9:df:95:d7:11:72:91:73:ba:b8:e2:
09:2f:9e:66:bf:ec:2d:5e:32:54:52:9e:a7:33:80:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9A:FD:2E:F2:DD:77:D4:61:66:6F:92:AB:3A:37:04:F0:A2:87:6F
X509v3 Authority Key Identifier:
keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.160.0/22
Signature Algorithm: sha256WithRSAEncryption
11:1b:a7:94:e4:3e:9d:b3:2c:50:5d:2f:0a:f1:d3:0e:bb:28:
ee:8b:c8:1c:8b:60:be:22:8e:d6:14:0b:cf:b4:35:be:81:37:
45:8a:f0:03:59:7a:ce:d9:12:a1:e5:c4:e6:45:ba:40:0f:d7:
5b:e4:0d:bc:3d:42:82:95:f3:e0:c5:90:47:66:e4:d5:59:4b:
33:69:c4:09:02:88:72:a0:99:a2:32:d4:1b:88:3a:ad:79:a4:
c4:2c:7c:19:fa:e4:6c:b4:72:98:ee:14:11:03:0d:8d:3c:e8:
d8:b5:b6:e3:5c:61:95:13:2b:51:00:c3:a3:3b:12:be:44:61:
16:c1:09:25:26:35:95:26:0c:e7:32:90:3b:78:bc:dd:a4:e8:
a1:eb:2f:6d:d7:23:0d:7c:74:3b:09:dd:d7:53:d0:d9:05:89:
7d:e6:ea:a4:7d:04:84:08:36:8f:a6:40:80:f2:2b:63:0a:c2:
b0:82:e9:cc:28:b7:9a:9a:6e:98:20:4e:e9:b5:b6:f8:b1:6e:
8b:0d:69:da:df:cc:6d:7a:b9:64:58:5a:b3:db:ed:ee:5f:e0:
5d:13:f8:fc:1c:71:ff:b7:d3:6f:78:ae:6a:fc:04:28:69:7d:
c5:5f:35:02:51:d2:c1:c3:5e:1c:82:43:0c:dd:9e:00:e9:c4:
82:6c:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:30:37 2025 by rpki-client