Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
File: 34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (raw, json)
Hash identifier: 9n1lDBo1FXRI+JzSvsWz1BWeJxc6LfXeT6LkBIHHQC0=
Subject key identifier: 15:CF:D3:76:A5:B4:21:9E:39:7D:BC:AA:35:F8:2E:5D:96:86:A8:A7
Certificate issuer: /CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
Certificate serial: 109E995F256A46C1C2F60B56936E8BEB639A4109
Authority key identifier: 32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
Signing time: Thu 04 Apr 2024 09:25:12 +0000
ROA not before: Thu 04 Apr 2024 09:20:12 +0000
ROA not after: Thu 03 Apr 2025 09:25:12 +0000
asID: 266526
IP address blocks: 45.65.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:9e:99:5f:25:6a:46:c1:c2:f6:0b:56:93:6e:8b:eb:63:9a:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
Validity
Not Before: Apr 4 09:20:12 2024 GMT
Not After : Apr 3 09:25:12 2025 GMT
Subject: CN=15CFD376A5B4219E397DBCAA35F82E5D9686A8A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:9f:01:82:bc:d4:d1:43:73:a7:e4:69:77:
5b:fa:e5:7c:ce:45:0e:0b:90:bc:49:4c:57:61:21:
3e:06:5f:11:dc:f5:ff:94:17:e7:e1:6a:77:95:35:
e1:98:29:a3:24:b2:00:8c:49:0a:e8:e4:fc:5b:6f:
21:1f:4e:44:b8:ee:bd:30:ac:d3:7e:76:ce:dd:c2:
d0:2a:68:72:90:7a:4f:3a:be:c3:38:f9:d1:26:a1:
76:2e:dc:db:7c:42:9c:3c:9f:b7:e0:b1:bf:06:dc:
e8:84:73:d5:d9:8b:b2:16:da:bb:de:a8:7a:e7:b5:
6f:b0:35:df:92:67:21:2d:76:a9:70:fc:1f:88:d6:
b6:67:36:e2:15:1c:f9:43:5b:f0:6d:bc:fa:51:09:
f8:07:21:36:9f:6c:09:9c:7f:3d:1c:f3:80:d6:93:
63:ed:d7:8a:65:d6:dc:4d:7f:a4:92:66:27:1f:3e:
6b:6d:52:7d:f0:53:bc:fc:21:15:fa:92:ae:e3:4f:
0c:9a:44:7d:3e:3c:68:98:aa:ee:a8:0a:fb:28:c5:
5d:5e:86:ec:b5:d6:2e:26:49:72:67:67:b1:66:88:
68:d9:f1:b0:2f:7b:ef:83:da:08:9d:a5:70:18:af:
b9:24:14:47:0f:b7:77:d0:20:dc:ae:89:74:04:11:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CF:D3:76:A5:B4:21:9E:39:7D:BC:AA:35:F8:2E:5D:96:86:A8:A7
X509v3 Authority Key Identifier:
keyid:32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/34352e36352e3233362e302f32322d3234203d3e20323636353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.236.0/22
Signature Algorithm: sha256WithRSAEncryption
99:46:92:92:e4:f9:5b:2a:49:c9:17:96:76:3b:97:5c:b2:2c:
fc:c9:1c:c6:5d:4b:91:a4:5e:18:ef:01:49:86:a4:87:56:55:
da:95:2f:b6:4f:29:07:87:19:1e:1b:e5:87:e9:b6:6e:a4:5f:
45:7b:94:2d:28:69:1f:5a:51:cd:89:67:ee:bf:0b:e0:4e:50:
1c:f0:56:c9:da:93:d7:42:a2:9b:3f:cc:3a:1a:6f:39:c1:59:
f1:81:60:9d:fd:cd:4c:40:94:0d:63:02:16:73:79:e5:30:db:
65:4c:4f:6c:35:93:2d:3f:7c:52:66:b4:f5:14:8b:f3:8e:de:
14:74:35:2b:1b:3d:a4:d3:a6:07:12:e7:63:ed:c6:7a:50:33:
3e:33:e7:b5:a8:36:28:c5:21:3f:40:88:a3:a6:11:54:4f:6b:
97:a4:5b:6f:fe:34:b9:9c:c5:51:dc:18:03:08:dd:16:e8:ba:
30:60:ee:92:8f:75:ba:6f:bc:e9:fd:af:40:e9:51:e8:b8:f2:
a7:bc:71:61:9e:0e:ca:2c:e6:03:b8:1e:f4:e6:77:9a:30:17:
d2:73:81:cb:55:9f:09:12:66:c8:f6:fa:57:0f:4d:e5:77:87:
99:5f:e7:2d:04:38:ec:b5:8b:cb:99:80:91:0b:42:08:68:c3:
24:cf:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:25 2025 by rpki-client