Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
File: 34352e3233382e34362e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier: Uaz2PzTov1enkFZiWCIugx1qNX16/Njs1EoH7WoarH8=
Subject key identifier: 4D:DD:E6:95:66:8B:A3:D2:36:81:71:1E:2E:57:ED:7F:66:C2:46:DF
Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial: 2B135D7132A80800C9151B35436FDF6C92443A26
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
Signing time: Wed 03 Apr 2024 18:31:35 +0000
ROA not before: Wed 03 Apr 2024 18:26:35 +0000
ROA not after: Wed 02 Apr 2025 18:31:35 +0000
asID: 268312
IP address blocks: 45.238.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:13:5d:71:32:a8:08:00:c9:15:1b:35:43:6f:df:6c:92:44:3a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Validity
Not Before: Apr 3 18:26:35 2024 GMT
Not After : Apr 2 18:31:35 2025 GMT
Subject: CN=4DDDE695668BA3D23681711E2E57ED7F66C246DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:25:0d:77:b0:e5:02:05:3b:48:e4:86:6a:
c3:ab:ab:ab:a8:35:f7:0b:73:2a:f7:d3:ac:a5:9f:
9f:2c:3c:58:42:c5:f6:26:da:ac:b4:a2:a4:fa:4c:
cc:1c:a8:d4:af:11:09:39:28:89:c0:b1:89:03:06:
da:28:ea:db:d5:e3:6e:f7:b9:17:56:33:87:2a:bb:
1e:2d:e5:3b:8c:e6:23:89:3e:0f:de:d0:a1:d8:2e:
27:ba:56:d9:51:c9:75:86:4e:4d:92:a6:2e:fa:8e:
db:ac:ff:51:c5:1c:f9:f7:e5:ef:5d:46:56:a1:4f:
38:76:ea:f2:13:52:4b:3c:32:5b:09:a4:b1:3f:ee:
15:6d:e5:28:1e:a2:2c:5c:0f:37:42:d4:d4:58:5c:
0d:c5:49:bc:e9:67:1b:82:6d:9e:d7:7c:6d:b7:de:
a1:1c:90:5c:fb:6c:b6:25:57:ae:63:f8:38:43:62:
63:e1:26:ef:0b:b4:bc:d1:06:38:ec:c9:65:1b:64:
ea:c2:2f:48:ce:04:85:0b:75:dc:2c:ce:21:dc:20:
27:a2:23:9e:5e:a9:22:d5:81:02:e2:e3:3a:ab:76:
87:c6:33:30:b3:43:2a:cb:db:01:91:43:1e:71:bd:
d8:dc:eb:19:3c:34:71:58:8e:38:30:16:db:9b:7d:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DD:E6:95:66:8B:A3:D2:36:81:71:1E:2E:57:ED:7F:66:C2:46:DF
X509v3 Authority Key Identifier:
keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34362e302f32332d3233203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.46.0/23
Signature Algorithm: sha256WithRSAEncryption
28:56:f6:24:f6:4b:36:00:83:ba:a7:ac:3e:c0:ce:f3:c4:3b:
21:26:77:ad:8a:a9:7b:66:8b:fc:d0:f3:45:5d:13:de:91:3f:
f4:56:d6:c8:83:12:0b:cc:c1:ce:49:25:3d:3c:7b:3f:51:da:
fe:9c:ca:d7:fb:ee:31:42:02:fb:9e:85:a2:be:65:98:7c:87:
fd:c4:d8:c7:e8:0a:26:cb:0d:4e:26:72:fe:a3:c6:e4:1a:a6:
11:06:97:c0:6c:3e:92:fe:13:fd:db:73:df:77:61:e5:9f:d0:
f3:3a:5d:06:67:5d:02:ee:5b:7a:d3:23:ef:c7:c5:14:7d:e8:
a9:d2:00:cb:9f:6e:63:96:f0:4c:64:a7:18:28:c2:aa:4e:32:
69:0e:40:41:35:61:d8:c1:fd:42:46:55:a7:a4:73:c9:4b:35:
51:54:bd:5f:34:b8:6f:dc:62:75:fb:27:c1:ec:5b:f1:1b:5d:
89:64:8b:b5:8e:4f:f1:58:1e:93:5f:ea:46:e4:85:90:7a:7a:
d3:36:9b:40:17:9d:cf:99:23:d7:80:d5:2e:c2:3b:66:53:36:
06:dd:84:e3:5c:66:8f:80:78:dc:e0:45:ed:e8:c4:b3:c4:84:
46:b6:e3:fe:b3:ff:47:8f:c4:74:d7:a5:d2:d8:57:6a:d8:2c:
18:bb:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:24:40 2025 by rpki-client