Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/34352e342e3131322e302f32322d3234203d3e20323636303730.roa
File: 34352e342e3131322e302f32322d3234203d3e20323636303730.roa (raw, json)
Hash identifier: XRQMHg34h2vJKN42GKAlQDoARz15v4ddy9yyRBZJUIo=
Subject key identifier: 31:07:B7:FC:7B:78:65:B6:55:4F:2D:99:60:1F:01:85:80:32:5C:E9
Certificate issuer: /CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
Certificate serial: 4E66A9399DC957D3718EE16E806086A47B2B17DA
Authority key identifier: B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/34352e342e3131322e302f32322d3234203d3e20323636303730.roa
Signing time: Thu 04 Apr 2024 03:54:03 +0000
ROA not before: Thu 04 Apr 2024 03:49:03 +0000
ROA not after: Thu 03 Apr 2025 03:54:03 +0000
asID: 266070
IP address blocks: 45.4.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:66:a9:39:9d:c9:57:d3:71:8e:e1:6e:80:60:86:a4:7b:2b:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B32F1FCBEE4B489E658636E1B24545CA0E4EA820
Validity
Not Before: Apr 4 03:49:03 2024 GMT
Not After : Apr 3 03:54:03 2025 GMT
Subject: CN=3107B7FC7B7865B6554F2D99601F018580325CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:56:da:36:54:44:d5:02:9b:53:04:27:0e:
48:ea:42:a0:cd:c3:9b:24:78:c2:73:33:3c:3b:f8:
fb:56:fe:22:e8:ba:f6:a4:c3:3e:6a:f7:1a:4c:ed:
3f:99:c7:d0:c1:4c:56:ca:f7:48:d0:50:f0:c7:2c:
67:ca:b0:cb:dc:85:ac:98:d7:14:7d:22:5a:af:d3:
f7:80:c9:4b:77:86:a0:5c:0d:dc:02:a4:24:0d:a2:
68:a0:1d:6b:3b:de:f5:92:db:09:31:eb:08:07:08:
a1:77:95:38:20:96:03:0b:2c:bb:02:9c:9d:30:ef:
0c:70:b6:cf:13:ce:9f:a0:e7:03:ed:fa:f2:ea:da:
dc:b2:5f:4f:f7:23:bd:5a:04:95:21:6c:87:5c:90:
a7:a9:b0:d5:63:a2:2a:08:0f:88:41:78:c5:49:d6:
cd:7d:51:8b:92:c7:1a:5e:72:0a:87:d0:47:66:cd:
35:68:41:b1:ba:7c:31:6d:48:08:15:f9:6c:cf:ce:
0c:d9:56:09:2a:c3:f8:0c:21:cd:fe:2b:65:21:54:
99:d8:78:50:16:5c:ae:0b:34:75:93:23:d1:34:f3:
14:a7:40:b3:fe:bf:4f:3c:51:77:c6:56:c4:76:e2:
65:a7:69:2d:60:18:71:ca:64:07:45:0c:b1:50:50:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:07:B7:FC:7B:78:65:B6:55:4F:2D:99:60:1F:01:85:80:32:5C:E9
X509v3 Authority Key Identifier:
keyid:B3:2F:1F:CB:EE:4B:48:9E:65:86:36:E1:B2:45:45:CA:0E:4E:A8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B32F1FCBEE4B489E658636E1B24545CA0E4EA820.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/1/34352e342e3131322e302f32322d3234203d3e20323636303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:b3:24:bf:b0:f0:6b:30:7e:39:a9:a7:07:0f:aa:df:ee:42:
4e:44:15:32:d0:cf:a0:d2:91:9f:bb:d6:9b:e0:ea:87:8a:bd:
46:88:d0:b1:5c:d0:4e:6f:f7:40:53:28:c4:86:1e:12:8a:61:
7d:8f:43:e1:ca:5c:51:bf:02:d1:c4:f0:a5:c4:3a:de:1c:ea:
2a:20:bd:49:74:7e:1e:7d:fa:5f:d3:59:57:40:ce:65:4d:23:
f9:4f:07:41:11:6e:5b:f4:4d:68:af:d2:5e:49:27:34:e1:3a:
d6:6d:5d:21:6c:50:ff:f7:e5:2a:7e:45:20:68:fd:7a:eb:86:
67:5e:3c:da:43:11:f2:ef:de:39:15:22:16:8a:e7:c7:d0:cb:
75:9f:5f:dd:b2:9f:37:e2:63:51:68:30:4c:c0:09:d2:68:0e:
22:aa:04:53:24:86:b7:4e:92:55:9c:58:55:83:22:30:16:41:
b2:ca:5a:bc:8d:e7:6b:4e:87:65:88:19:2e:74:3d:d4:61:3f:
cb:9f:3a:85:3d:05:82:c3:77:40:f0:98:96:6e:a0:0a:8c:f3:
a4:2d:a5:69:23:e1:dd:98:8a:d2:f3:f1:ec:ce:ba:a9:c4:3c:
21:c6:13:8f:fc:0c:cb:7c:82:78:56:88:c2:31:9a:d6:ed:ec:
1d:e1:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:08 2025 by rpki-client