Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
File: 34352e3137392e32302e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier: Zkff9rAd7JoU9JBuaSd10YoNJ+aBGT5qiciNUj6UxXI=
Subject key identifier: 9E:13:F0:10:78:BE:77:69:4C:A4:99:C2:5E:E2:7E:30:B9:A7:45:97
Certificate issuer: /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial: 7808F18515E084AD21EE648218337E06A4772858
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
Signing time: Mon 25 Nov 2024 17:03:46 +0000
ROA not before: Mon 25 Nov 2024 16:58:46 +0000
ROA not after: Mon 24 Nov 2025 17:03:46 +0000
asID: 61844
IP address blocks: 45.179.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:08:f1:85:15:e0:84:ad:21:ee:64:82:18:33:7e:06:a4:77:28:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Validity
Not Before: Nov 25 16:58:46 2024 GMT
Not After : Nov 24 17:03:46 2025 GMT
Subject: CN=9E13F01078BE77694CA499C25EE27E30B9A74597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:91:47:50:ad:dd:a2:41:fc:b5:85:16:1c:
56:2c:26:3f:88:40:a3:09:29:dd:e5:7b:44:56:71:
7c:76:40:97:24:d6:b5:b0:d8:10:fb:c9:e9:9e:6c:
5d:9f:88:e0:c6:e0:60:c6:ba:5a:7a:a6:90:96:02:
b8:4a:00:fe:c5:12:27:4c:9f:35:da:60:aa:8a:9e:
ee:a6:d4:ab:a7:84:6e:ec:c1:b2:e7:af:85:4a:40:
d1:1b:f5:5c:c6:49:23:24:01:86:ff:3a:2d:46:c1:
f3:4b:06:37:05:96:ea:b7:e4:59:4a:03:cc:d9:d2:
04:f8:78:e7:0d:03:7e:28:25:cd:9a:da:61:78:06:
7d:5b:ea:00:35:5c:b9:01:1f:e7:2b:01:25:ea:7d:
71:8b:4f:b8:5d:28:7d:22:58:ec:ca:21:0a:74:b3:
c4:7e:69:ed:8b:a4:55:f3:e6:de:98:fc:01:d8:55:
33:6f:8f:6c:72:9c:ad:22:0e:c7:a8:74:a7:56:ff:
cb:96:c2:a9:10:87:09:83:4f:95:94:35:28:d8:48:
39:53:30:11:77:d3:ca:52:86:3a:cd:ab:5e:19:65:
c5:ab:41:85:c3:fc:26:6f:bd:46:3c:2f:c7:e1:2b:
89:d3:8a:02:45:47:b1:b6:12:f4:f4:9d:ee:1e:18:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:13:F0:10:78:BE:77:69:4C:A4:99:C2:5E:E2:7E:30:B9:A7:45:97
X509v3 Authority Key Identifier:
keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.20.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b3:44:15:cd:d5:39:a7:e6:a7:42:65:58:00:45:b8:5a:c0:
e9:04:aa:e2:82:c5:b4:54:43:a3:a6:7d:c8:f8:75:49:e6:da:
b9:40:8e:2c:ea:2a:d3:a3:9b:1c:e3:2a:71:33:1d:15:60:b3:
56:54:96:33:c1:b2:75:73:a2:58:f0:8d:15:e2:a4:cf:d3:18:
f2:83:8c:8a:9e:af:e2:69:71:cb:ed:81:28:6d:f6:a4:f1:a0:
7a:f2:56:ee:72:ed:d7:a4:cc:c1:2d:75:38:86:45:4f:66:54:
0a:7a:b1:85:55:c2:be:0e:c8:5d:23:ca:ed:25:ba:f6:61:2d:
de:ee:bd:cd:15:12:74:f3:b6:28:f8:29:27:09:4d:45:2e:61:
17:a3:6b:78:bb:d8:5a:e0:dc:d8:15:64:7e:a1:5d:9e:d6:b4:
b8:67:d0:d6:33:b7:5a:8f:c3:7c:0a:6c:d5:d0:ec:12:ca:f0:
45:b3:b7:44:d2:6a:33:4c:01:b8:d2:c1:fa:97:d1:92:c4:17:
5f:17:d1:56:10:1b:ce:47:8a:79:be:ac:18:06:a8:4c:bd:f2:
db:ce:81:fb:f5:ee:c6:09:48:8a:52:7b:59:98:f9:7e:b3:68:
c3:fd:54:85:df:c3:0e:57:d5:3c:52:87:1c:99:35:50:a2:5d:
15:cd:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:21:44 2025 by rpki-client