Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32332d3233203d3e20323636313239.roa
File: 34352e362e39322e302f32332d3233203d3e20323636313239.roa (raw, json)
Hash identifier: eImD4yTBR7iUjK8Rrb2bpQ/BeLvAe5+CiEIDHQ7YoJQ=
Subject key identifier: B2:06:8F:BC:7B:AE:CD:65:4F:92:BF:64:57:2D:79:15:DD:04:3A:19
Certificate issuer: /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial: 5B1C2FE54D360152812822F746B21CFC64F40F54
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32332d3233203d3e20323636313239.roa
Signing time: Wed 03 Apr 2024 18:32:19 +0000
ROA not before: Wed 03 Apr 2024 18:27:19 +0000
ROA not after: Wed 02 Apr 2025 18:32:19 +0000
asID: 266129
IP address blocks: 45.6.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1c:2f:e5:4d:36:01:52:81:28:22:f7:46:b2:1c:fc:64:f4:0f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Validity
Not Before: Apr 3 18:27:19 2024 GMT
Not After : Apr 2 18:32:19 2025 GMT
Subject: CN=B2068FBC7BAECD654F92BF64572D7915DD043A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:ae:85:fa:b4:1b:50:c4:5f:10:87:1e:cc:
48:b9:ee:b3:87:52:dc:99:12:06:ba:ff:d9:de:a1:
d2:28:f1:04:23:57:ad:ab:52:9b:ea:78:e3:ae:9e:
b0:29:ec:e3:03:94:5c:7a:7d:94:59:b1:ed:5a:5e:
7e:32:04:35:22:e8:5e:fa:fc:19:a8:2a:85:f4:22:
e6:7f:09:19:9c:dd:b8:1f:58:f9:bc:c1:45:7e:da:
67:63:9f:ce:bf:1d:bf:e4:a4:3e:0f:f3:86:9c:97:
e4:e2:33:a7:3a:26:f5:fb:5c:70:3c:98:f4:90:17:
7a:1b:99:2e:48:aa:4d:02:ef:7a:e5:13:e6:bb:09:
8d:66:3d:4c:de:e2:52:9d:a7:90:c9:42:4d:18:88:
f9:36:39:03:3d:12:50:d9:06:4a:6b:7d:75:28:cc:
20:e1:9f:d5:11:c1:43:c8:a2:92:3c:ca:60:67:f7:
2a:f0:7c:18:63:08:1a:cf:ff:c6:39:2c:d2:47:ef:
07:9c:a0:81:fb:87:a2:2e:9a:66:55:5b:18:f2:da:
d8:f4:4c:72:64:a3:a8:be:07:af:cb:53:75:21:1c:
32:74:f5:e6:58:f0:97:50:a9:e0:0c:65:c2:49:b4:
46:f7:4f:db:5c:c5:95:60:d4:22:57:f5:04:98:d6:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:06:8F:BC:7B:AE:CD:65:4F:92:BF:64:57:2D:79:15:DD:04:3A:19
X509v3 Authority Key Identifier:
keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39322e302f32332d3233203d3e20323636313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.92.0/23
Signature Algorithm: sha256WithRSAEncryption
51:c8:cd:8d:d1:c9:87:0c:52:e0:92:98:bc:28:34:cc:66:da:
30:68:6a:21:ce:2e:78:f7:6f:b3:12:62:81:b4:82:6c:f0:58:
17:bc:fb:8a:d0:be:3d:ee:1b:d9:ea:7d:18:d5:f4:8a:54:d7:
8e:4e:94:66:3f:55:3c:46:0d:0e:dd:88:da:ad:f7:c5:45:dd:
5d:3a:ee:74:d9:db:e1:b0:95:44:21:77:8a:4e:a7:ff:ab:17:
3e:03:77:6b:3c:e2:99:87:f0:bb:92:e7:dd:23:de:97:c4:5c:
4a:36:78:83:1d:ca:b1:f7:2f:9f:18:ee:51:35:2b:39:ed:9b:
c0:74:45:af:30:29:bf:de:6f:34:bb:88:65:46:16:79:34:77:
b4:75:9c:3d:e7:10:44:2b:c9:97:d8:c0:7a:4f:ee:bf:92:34:
7b:5c:3a:de:0b:d0:b5:f8:c4:b3:7c:88:af:e4:f9:47:c8:31:
85:7a:ee:06:ff:96:03:a5:21:f9:6b:1b:4c:10:64:1b:bc:84:
69:55:fa:be:b2:a3:d4:c1:3f:d6:a7:53:d7:5a:62:6e:fd:20:
c5:79:9b:30:6d:87:95:82:21:4b:86:e9:f8:ea:7e:7a:11:0d:
4c:63:13:af:e1:6d:a4:c4:ec:ec:92:94:de:27:1e:17:a0:44:
a5:7c:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:23:26 2025 by rpki-client