Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/34352e37302e31362e302f32322d3234203d3e20323637353433.roa
File: 34352e37302e31362e302f32322d3234203d3e20323637353433.roa (raw, json)
Hash identifier: LNTBiLjoYLMfdc2mgzqN/E0VinkfRc2nX4o6PRpKE+o=
Subject key identifier: AD:13:84:8D:02:E7:1A:56:A3:9A:F5:32:3A:A4:C0:A2:AF:A4:F2:74
Certificate issuer: /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Certificate serial: 2AEA3D353FFE618A04C67BDC4C86417AD4D1A08B
Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/34352e37302e31362e302f32322d3234203d3e20323637353433.roa
Signing time: Thu 04 Apr 2024 03:59:41 +0000
ROA not before: Thu 04 Apr 2024 03:54:41 +0000
ROA not after: Thu 03 Apr 2025 03:59:41 +0000
asID: 267543
IP address blocks: 45.70.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ea:3d:35:3f:fe:61:8a:04:c6:7b:dc:4c:86:41:7a:d4:d1:a0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Validity
Not Before: Apr 4 03:54:41 2024 GMT
Not After : Apr 3 03:59:41 2025 GMT
Subject: CN=AD13848D02E71A56A39AF5323AA4C0A2AFA4F274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:14:6e:5c:ee:4c:e3:4d:56:19:f6:d5:b2:
18:12:54:42:e7:e8:13:1a:b9:bf:39:10:a1:4d:0f:
d0:3f:2c:09:44:a8:d3:1e:1e:73:4f:10:03:1d:b5:
a0:a4:87:71:73:72:71:8e:f1:14:bf:b5:13:cd:23:
d5:2b:96:5b:77:bc:f6:fd:be:86:cb:3b:37:9b:56:
97:58:fe:bd:7d:7b:5a:f5:e2:c6:33:f4:27:de:96:
71:06:79:0b:ec:a3:2d:1e:e1:4f:b9:34:6c:e4:53:
d6:6d:11:eb:ac:b6:7b:77:0d:78:64:84:8b:be:69:
91:ea:6b:62:ce:9b:75:e4:2a:e4:74:cf:05:ef:50:
d7:a3:23:c2:df:ec:40:51:93:57:52:57:09:ce:4f:
38:ce:31:48:9c:61:17:fc:7f:bc:21:85:83:56:74:
08:3b:4e:b9:2c:d5:7d:a5:73:2f:b9:b4:f7:8a:56:
36:c2:a3:e7:de:9e:80:31:1c:2d:cc:e1:1d:28:79:
70:25:aa:48:c1:e4:17:74:44:41:fe:a3:55:32:e1:
a5:e7:54:01:e2:c8:a8:8d:94:86:14:ed:cb:36:dd:
99:35:c7:24:ec:25:c6:97:3f:ae:a7:b5:b8:30:b3:
dc:75:e6:6c:32:1a:e7:f6:ba:af:0e:80:96:df:c8:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:13:84:8D:02:E7:1A:56:A3:9A:F5:32:3A:A4:C0:A2:AF:A4:F2:74
X509v3 Authority Key Identifier:
keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/34352e37302e31362e302f32322d3234203d3e20323637353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:c0:4e:c9:df:f3:89:9d:6a:4e:ac:31:49:63:5f:a9:cf:b9:
7f:66:6c:0d:35:0d:cb:84:57:50:41:6f:5c:35:ee:7a:0c:fa:
c4:f4:d7:f7:3e:7c:4c:a7:fe:23:fe:04:4d:f0:23:1b:22:34:
48:17:e8:75:63:ed:f3:87:5c:84:89:86:18:4f:7e:1f:ad:ae:
d0:0c:e9:09:f2:93:a4:62:78:3f:4d:24:90:86:78:a9:ba:0a:
1e:9b:a3:03:0b:38:65:1f:c0:4b:b4:b8:52:b2:50:9a:cc:8b:
6a:04:bd:22:b4:f0:79:cf:84:55:d0:64:4e:26:f9:d3:66:99:
81:e4:33:b6:aa:65:11:79:51:95:e8:d2:2f:93:4a:24:bb:92:
df:49:09:b6:7a:13:84:53:87:92:e9:d9:97:8a:9d:5b:22:09:
a4:09:61:1b:5c:d7:65:0d:6f:4d:6e:c0:b2:36:ef:39:42:f8:
31:0e:73:c2:59:1e:6a:1b:8f:51:93:89:6a:6e:3e:9a:6c:20:
9c:df:f9:a3:b4:90:0a:3a:1f:bb:42:c6:99:bc:a4:33:b2:af:
ee:f7:47:1f:90:dc:9d:cf:be:5c:17:03:46:59:37:c8:04:25:
42:ed:7c:2c:ac:34:21:a3:4c:77:4b:94:e6:7f:c2:ff:f0:fd:
e4:c1:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:04 2025 by rpki-client