Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa
File: 34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa (raw, json)
Hash identifier: 8wLqmwDIkzgTjXeZ0/B/hKgvrewB3sFvzZYXaf3QDnk=
Subject key identifier: 42:D1:90:0A:14:E9:83:EC:36:97:40:EC:D7:A5:93:6A:07:09:F7:AE
Certificate issuer: /CN=8969EE982CBE9BCDB5B100091931153438B2D419
Certificate serial: 27435D9150E5DDCC50DE87B411CA7499F981F00C
Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa
Signing time: Fri 10 Jan 2025 13:55:58 +0000
ROA not before: Fri 10 Jan 2025 13:50:58 +0000
ROA not after: Fri 09 Jan 2026 13:55:58 +0000
asID: 267093
IP address blocks: 45.228.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:43:5d:91:50:e5:dd:cc:50:de:87:b4:11:ca:74:99:f9:81:f0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419
Validity
Not Before: Jan 10 13:50:58 2025 GMT
Not After : Jan 9 13:55:58 2026 GMT
Subject: CN=42D1900A14E983EC369740ECD7A5936A0709F7AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:58:85:4b:11:8b:ff:e2:be:84:56:63:3a:
7b:d8:40:89:37:1a:7f:3c:4f:4d:6a:93:2c:18:09:
17:72:7a:e7:91:78:19:62:bd:da:6b:3a:51:5e:29:
3d:06:f5:e9:e7:c0:5b:9b:84:bb:e4:ae:74:e1:5e:
dd:b8:85:b4:af:1c:b5:f8:ee:ef:88:5a:27:9c:63:
69:71:ff:3a:bb:76:ff:35:c2:13:01:06:2d:a0:61:
f4:9b:79:69:9e:e7:21:5c:ad:ee:c8:a8:e6:b6:be:
ff:fe:71:9c:80:57:a1:99:55:ae:4c:49:01:18:77:
0f:e0:d1:3a:5f:ff:4b:cd:82:ff:59:b1:6c:84:80:
63:3b:a9:18:ba:8f:f4:65:7d:19:d3:39:5b:0a:e8:
a4:d4:f5:c0:6c:a6:09:ac:8a:51:29:f3:dd:55:96:
fe:8e:7e:cc:96:a2:a5:5d:10:87:f4:97:33:c9:f8:
66:ac:de:97:c1:c5:b3:3e:4d:a6:9d:05:a0:2e:08:
b0:a5:87:46:df:cc:99:f0:51:1c:ce:75:2e:07:38:
5d:41:e0:00:e0:c6:d8:4f:06:27:06:05:fe:d3:02:
48:2f:3b:5e:ff:04:a2:a8:67:ad:db:33:21:7a:9f:
a5:85:ea:0e:ba:ee:2e:cb:9f:dc:89:fa:fd:a8:f7:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D1:90:0A:14:E9:83:EC:36:97:40:EC:D7:A5:93:6A:07:09:F7:AE
X509v3 Authority Key Identifier:
keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.192.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:c6:93:04:de:63:52:f3:5b:f9:0b:55:6a:fd:a2:ab:c7:68:
e7:b7:e2:92:74:a7:fb:0c:9f:61:1a:71:83:ee:e5:f3:d2:05:
14:63:4c:29:c9:a2:d1:b9:ad:ab:22:a0:8d:74:4b:99:ff:a9:
b0:71:c0:dc:82:3c:31:f0:c7:10:72:37:5c:f2:c7:10:c4:b0:
fc:88:62:cf:8f:33:e3:8e:23:71:ed:e4:93:03:1d:cd:9a:fd:
a0:76:07:c2:ae:9a:5c:67:bd:81:23:5f:87:79:88:4e:af:87:
01:61:5f:5a:9c:ed:20:35:67:0f:8e:ae:69:59:e8:51:ad:6a:
33:fa:83:9f:d1:b5:c5:d3:50:54:e9:75:16:01:ea:56:64:47:
21:75:34:27:d9:d0:e7:ef:f6:39:ef:fb:9d:0e:49:d3:f9:9c:
42:a9:dd:f3:aa:e8:86:08:61:f0:14:e9:75:da:1a:c3:9c:37:
5f:92:23:26:50:d5:7a:b2:8e:d3:60:c6:09:dd:b9:4d:7a:fe:
8a:ae:b3:4e:9d:b1:20:13:89:e3:9f:0b:32:11:d9:5e:e6:0c:
8f:8d:f4:10:7f:0b:c5:ec:7a:e5:98:c5:10:9b:37:38:88:3f:
43:41:10:fe:0f:5b:cb:82:5b:10:de:a7:6b:6a:79:40:23:a6:
e6:cd:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:45 2025 by rpki-client