Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa
File: 34352e3233322e32342e302f32322d3234203d3e20323637333031.roa (raw, json)
Hash identifier: S5I5dGWtw/XptPBrvWCz6D5juozuvXncnntSeiD8lGA=
Subject key identifier: 11:EE:64:2A:E2:A3:42:2C:D3:D0:93:CA:20:32:BD:1E:77:61:CE:54
Certificate issuer: /CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Certificate serial: 08034C74FAEF16CC42918CE369057192C6769DF3
Authority key identifier: CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa
Signing time: Thu 04 Apr 2024 03:55:51 +0000
ROA not before: Thu 04 Apr 2024 03:50:51 +0000
ROA not after: Thu 03 Apr 2025 03:55:51 +0000
asID: 267301
IP address blocks: 45.232.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:03:4c:74:fa:ef:16:cc:42:91:8c:e3:69:05:71:92:c6:76:9d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Validity
Not Before: Apr 4 03:50:51 2024 GMT
Not After : Apr 3 03:55:51 2025 GMT
Subject: CN=11EE642AE2A3422CD3D093CA2032BD1E7761CE54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:b8:01:61:c3:44:a8:15:5d:ba:21:dd:49:
b0:02:20:50:f0:d9:e3:48:85:c5:33:49:f0:8d:44:
9f:b5:10:dd:ad:ba:7a:da:aa:07:be:87:f7:cc:d9:
5e:1e:13:23:86:48:55:3b:cd:98:5a:84:86:06:84:
f5:74:e3:ec:12:d1:26:2c:88:4b:c1:0e:ae:fd:c8:
32:52:a4:24:0d:aa:32:28:f6:e0:92:91:e4:c6:a0:
1d:a7:06:7f:f8:d5:b6:08:5b:45:67:3f:5c:53:ab:
b7:22:e4:a1:17:26:46:d0:aa:13:74:8f:be:63:d3:
af:11:4e:a0:d9:96:72:92:3b:40:89:46:0e:46:4c:
8c:92:d9:3e:32:2f:f3:44:ed:8c:34:60:72:d0:a6:
b6:07:11:ff:4a:4a:28:9f:7e:89:f6:af:f8:df:08:
90:d9:fa:0d:1a:37:37:4a:e6:34:bc:b7:bc:1a:db:
0b:a7:19:dc:3e:04:28:19:51:49:97:65:7f:78:b4:
e0:84:72:b8:bb:b7:95:f9:55:ac:2c:16:72:f5:de:
71:9a:3a:d6:2a:64:14:59:71:48:11:fa:e4:13:a1:
35:74:95:05:df:47:12:41:6d:57:ff:5f:35:19:b5:
80:cb:1d:27:3b:00:3d:05:37:d4:eb:25:56:42:35:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:64:2A:E2:A3:42:2C:D3:D0:93:CA:20:32:BD:1E:77:61:CE:54
X509v3 Authority Key Identifier:
keyid:CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/34352e3233322e32342e302f32322d3234203d3e20323637333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.24.0/22
Signature Algorithm: sha256WithRSAEncryption
71:f0:f4:23:46:a0:bd:b7:39:3d:2a:0c:c8:d3:ce:50:b7:b1:
05:5a:6a:72:cf:96:dc:5a:bd:d9:dd:bf:00:2c:b6:b4:74:79:
b5:14:7d:27:81:cd:de:e9:8a:a9:13:e1:19:a6:4e:45:a8:26:
39:46:31:f5:7b:b8:c0:da:d7:3f:64:53:be:0b:88:08:34:51:
5d:f8:56:e4:0d:b7:ff:a8:a6:29:74:24:85:4e:74:58:15:7e:
60:58:c0:c8:0f:0d:0c:fc:0f:b4:46:3e:28:32:3c:9f:41:cc:
70:6a:0b:b7:f6:ce:e7:0b:fa:18:20:6a:13:3c:36:67:87:de:
e8:1f:13:ad:12:a3:44:8a:6e:d6:27:dc:7c:90:69:c5:10:ec:
83:82:45:14:27:cd:fc:95:e2:65:ec:b1:bf:1d:0f:c1:35:35:
b1:88:be:77:98:f5:de:9d:76:b3:20:31:9e:80:d7:07:ff:13:
6c:60:a2:28:06:b2:d4:3d:b3:84:79:57:23:c2:27:ff:63:6d:
63:e9:1e:01:ea:e7:4a:cb:f0:c5:6a:a9:41:14:2c:20:4e:c6:
2f:fc:7e:d8:d3:c4:dc:cd:6d:80:18:93:64:52:cd:04:ec:b0:
e9:5b:6b:81:e9:f1:69:41:84:73:91:f8:62:a8:15:3f:f2:5f:
f5:df:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:27:17 2025 by rpki-client