Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36392e302f32342d3234203d3e20323637323232.roa
File: 34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier: 03tUioisypN7Gz1rDUdJTZYqJEBS+xGUiFCymO2EEVw=
Subject key identifier: C6:8E:72:88:3D:B9:11:E0:C5:AB:87:6E:B5:81:01:1E:C1:F2:78:85
Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial: 2535AF7A97A3E9CAFD62523E89A7CF337E398400
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36392e302f32342d3234203d3e20323637323232.roa
Signing time: Thu 04 Apr 2024 09:21:24 +0000
ROA not before: Thu 04 Apr 2024 09:16:24 +0000
ROA not after: Thu 03 Apr 2025 09:21:24 +0000
asID: 267222
IP address blocks: 45.229.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:35:af:7a:97:a3:e9:ca:fd:62:52:3e:89:a7:cf:33:7e:39:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Validity
Not Before: Apr 4 09:16:24 2024 GMT
Not After : Apr 3 09:21:24 2025 GMT
Subject: CN=C68E72883DB911E0C5AB876EB581011EC1F27885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:96:4e:d0:53:3c:87:bc:24:9a:1f:5f:b3:e1:
38:04:17:60:17:d7:eb:97:7c:35:da:16:1f:20:82:
3c:4d:f2:7b:e1:71:5a:8e:ab:00:92:69:b8:28:7a:
48:5d:e5:b3:9b:77:5f:92:d6:81:3c:4f:99:1b:cf:
0c:31:4c:31:e4:b4:61:45:fd:ab:ad:5a:4f:cf:81:
63:16:af:1a:52:91:f4:e9:79:42:e8:70:fe:9e:bf:
5f:2d:24:2c:a4:f9:d8:45:5a:ec:fd:72:2a:e4:da:
25:89:f4:8b:a7:3a:67:2e:4e:9b:79:5e:f3:f9:66:
6c:a3:1e:83:15:43:28:56:91:e2:2c:7d:65:1b:4f:
d3:e3:de:99:69:b5:2d:0c:0d:33:37:ed:23:db:bc:
e9:cc:e5:49:50:cf:ad:da:45:76:ce:8d:d2:26:15:
90:c6:75:fc:6b:d9:90:0c:ef:bd:48:d4:f2:32:79:
1b:c0:49:e3:6d:60:86:f9:48:c3:18:78:f7:ac:b8:
51:82:2f:d4:f8:5a:32:d3:9d:8a:76:90:35:a3:80:
0c:c8:e2:a7:3c:a9:8e:dc:e5:2e:a4:32:0d:8f:2d:
16:04:b3:4e:90:49:6e:53:c6:d5:0f:51:ae:70:ea:
a2:ac:78:27:c5:86:f8:a1:e2:e8:44:60:ed:73:aa:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:72:88:3D:B9:11:E0:C5:AB:87:6E:B5:81:01:1E:C1:F2:78:85
X509v3 Authority Key Identifier:
keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36392e302f32342d3234203d3e20323637323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3d:c8:95:e9:cc:c2:cb:c5:75:02:40:ac:a9:b1:30:d0:59:
22:c7:e9:89:94:eb:0f:db:2d:51:d1:57:4a:b5:84:14:8e:a6:
6c:94:20:c9:1d:3b:4f:9f:77:94:0f:f8:e5:a1:40:31:f2:89:
d6:cd:73:05:03:81:e4:60:00:1e:29:e7:56:98:57:b7:0f:45:
4c:e9:27:b2:91:35:a8:db:54:79:0e:14:73:0f:08:8f:69:fa:
0c:5a:0f:9f:d0:ad:67:23:31:d1:1b:1c:1a:e9:b1:96:40:44:
20:1a:a7:51:2a:ed:05:57:f1:2c:b5:40:5d:27:fa:cb:62:b5:
12:9e:cb:87:4f:a6:93:94:04:a8:d5:db:0d:5f:7b:4e:2e:66:
ac:75:ac:2e:5d:de:06:ad:0f:7d:31:a7:ea:5d:8e:99:c8:7a:
ab:12:af:b3:c8:b5:ac:0c:da:a4:4b:16:82:d8:0f:b7:89:b2:
22:ec:07:25:25:fe:ac:00:f6:6d:82:f4:f7:d9:db:9d:1f:9b:
fb:56:a2:c2:22:c2:f6:b1:c3:b6:de:25:2c:b0:5d:dc:c1:cc:
af:43:44:30:b4:5f:f6:20:a1:e2:51:eb:68:cf:f3:e0:71:08:
1d:db:2b:53:eb:c9:d9:e5:60:5e:57:23:c8:ad:82:75:ef:23:
76:45:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:09:16 2025 by rpki-client