Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa
File: 34352e3233382e34342e302f32322d3234203d3e20323638333132.roa (raw, json)
Hash identifier: zURBlLyG+HZrqo3vOFTDZHMep9JFZOe5jCqJyLf2/IM=
Subject key identifier: 00:48:62:6D:0C:44:49:A8:43:8E:7A:18:D2:01:64:C1:0C:A2:9A:F7
Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial: 3C757940EB08CA1B621BF3C5271D379CACFA13
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa
Signing time: Wed 03 Apr 2024 18:31:35 +0000
ROA not before: Wed 03 Apr 2024 18:26:35 +0000
ROA not after: Wed 02 Apr 2025 18:31:35 +0000
asID: 268312
IP address blocks: 45.238.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:75:79:40:eb:08:ca:1b:62:1b:f3:c5:27:1d:37:9c:ac:fa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Validity
Not Before: Apr 3 18:26:35 2024 GMT
Not After : Apr 2 18:31:35 2025 GMT
Subject: CN=0048626D0C4449A8438E7A18D20164C10CA29AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:d9:9c:42:06:39:d2:ec:7c:b4:b7:9f:b6:
34:10:56:17:f2:1e:e8:e5:d2:79:b0:86:7e:5c:39:
06:51:60:64:2e:39:b2:71:ff:57:70:6c:e1:63:9c:
0e:f0:24:0b:dd:e6:1b:c9:62:be:57:b9:73:8b:3c:
16:e2:15:a0:32:7e:47:b5:82:e5:18:ee:52:23:2c:
44:5e:c7:ae:d8:01:96:67:bd:72:ab:4c:f8:55:40:
8c:8e:d1:77:85:e9:ad:a4:86:9b:f1:1d:4a:06:b0:
77:5b:8b:7e:66:c8:42:cb:86:99:3d:68:69:62:85:
17:a8:de:f4:50:0c:5c:02:7f:50:33:e9:79:a5:cb:
eb:0b:47:eb:04:d8:96:cf:1c:5d:2b:85:02:43:45:
e6:86:97:fc:fc:7f:7a:cf:76:35:0e:81:71:34:be:
9b:2d:8f:4b:4f:9a:ce:8a:29:ba:2d:b1:f6:ef:84:
32:51:85:ea:89:a4:74:b4:c5:ee:27:a4:39:af:7a:
f4:fd:9f:cc:10:30:e0:7a:ce:75:0e:ad:4e:20:9d:
31:6f:36:41:6c:5b:99:60:8a:09:10:fc:a6:56:c1:
c1:ce:16:2c:1b:e0:33:08:76:80:17:bf:e2:c0:a9:
45:9b:44:6d:80:d7:e6:ac:12:d9:6d:a6:ba:2f:e8:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:48:62:6D:0C:44:49:A8:43:8E:7A:18:D2:01:64:C1:0C:A2:9A:F7
X509v3 Authority Key Identifier:
keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3234203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:04:3e:75:13:6b:d5:25:e4:33:94:6f:fa:de:41:0e:a4:e1:
eb:73:73:e3:91:e7:df:48:82:01:ba:1a:f6:21:35:b6:69:e2:
8b:db:3d:38:27:e5:a9:f0:2c:d3:74:ef:6d:56:19:4e:42:c0:
9d:4f:23:14:9e:db:0f:97:03:1a:5e:03:2b:93:f7:03:a0:48:
8c:1d:f9:0b:f3:a6:db:bb:ce:db:31:51:d1:e2:29:2f:a4:19:
75:99:f9:45:c6:29:a3:9a:7e:eb:6b:37:91:a6:4b:a1:d1:d2:
86:a2:21:73:96:95:96:60:a6:0f:8d:11:ea:db:bd:1d:9f:01:
ba:df:06:45:33:b2:d2:5d:54:cb:6d:f2:43:8b:38:40:bd:46:
c2:f6:3d:91:eb:16:50:67:13:40:a4:80:62:8e:96:de:16:b5:
02:e1:e1:9a:30:5e:95:57:76:a2:da:b2:19:72:ab:8a:11:a4:
20:79:fe:20:55:30:a6:e6:18:b6:c8:d7:2c:29:f2:cc:9b:ee:
42:df:82:e2:0d:88:39:94:2a:91:00:74:ef:1a:17:00:1c:c1:
70:b0:20:11:c0:8d:02:ea:b5:1a:25:ac:62:b3:8d:6b:c5:a1:
23:6c:65:8d:73:7d:d1:7c:97:2c:6e:4b:50:4c:71:04:c1:34:
bb:de:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:27:51 2025 by rpki-client