Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa
File: 34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa (raw, json)
Hash identifier: +S5pN/IwDoFBzJR85M5YoVGYwkvjmes/LdYL941VT7I=
Subject key identifier: D5:D4:D5:7B:1C:5F:C5:D8:48:5D:D1:42:7B:30:0F:C0:80:B3:A6:6B
Certificate issuer: /CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
Certificate serial: 3D989A08A1F304689E03535F19B8A2CC6ADAA6C8
Authority key identifier: 43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa
Signing time: Thu 04 Apr 2024 13:17:53 +0000
ROA not before: Thu 04 Apr 2024 13:12:53 +0000
ROA not after: Thu 03 Apr 2025 13:17:53 +0000
asID: 267283
IP address blocks: 45.232.216.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:98:9a:08:a1:f3:04:68:9e:03:53:5f:19:b8:a2:cc:6a:da:a6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A
Validity
Not Before: Apr 4 13:12:53 2024 GMT
Not After : Apr 3 13:17:53 2025 GMT
Subject: CN=D5D4D57B1C5FC5D8485DD1427B300FC080B3A66B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:8e:ec:a5:92:76:29:e9:a8:1f:c8:c2:9e:
0e:e5:8f:78:3a:dd:15:85:39:21:dc:aa:42:b8:88:
f3:e0:94:e2:5f:4d:8b:22:e4:35:4d:20:73:f8:f3:
c8:85:06:f6:dc:1b:06:7a:5f:c9:82:4a:c7:0d:0d:
00:ec:dc:1a:20:73:41:bf:a0:49:14:ed:ae:3f:6a:
03:d9:ae:96:65:13:d9:fc:09:0f:49:00:b2:16:d5:
5a:31:42:67:a8:d7:27:1a:6e:59:3a:9d:56:cd:a9:
5f:79:da:2a:f7:76:3c:e9:4a:fd:b0:81:e1:13:40:
1f:37:0a:b2:20:61:0c:6e:02:69:6a:c9:4c:bd:44:
2f:18:9f:10:a5:de:55:fc:22:81:a1:1c:fb:e2:04:
3d:d4:ef:2c:20:30:90:08:ed:44:48:5d:8a:86:cd:
cf:85:fe:e2:84:61:16:6f:d8:57:23:83:03:13:a2:
78:a7:c7:c3:70:00:23:7f:85:c3:a4:7f:6b:77:9d:
c9:3d:ce:b4:18:8c:3e:55:21:f7:69:10:17:8e:da:
10:0f:f8:3e:58:ad:e1:78:af:00:d5:f6:87:06:61:
05:0a:de:e6:6c:64:77:ef:86:33:47:62:b2:10:dc:
d1:b7:1b:c4:72:21:26:d9:1c:6f:87:9c:3e:d8:da:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D4:D5:7B:1C:5F:C5:D8:48:5D:D1:42:7B:30:0F:C0:80:B3:A6:6B
X509v3 Authority Key Identifier:
keyid:43:EF:4E:8E:E5:9B:B6:23:05:EF:CD:46:24:CA:E9:D5:24:4E:DC:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43EF4E8EE59BB62305EFCD4624CAE9D5244EDC7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvSbiYDmn7neu5bGXUadYcnytZzeRKEgQdPTr8KrBshg/1/34352e3233322e3231362e302f32322d3332203d3e20323637323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.216.0/22
Signature Algorithm: sha256WithRSAEncryption
67:c0:b7:52:33:13:02:19:61:89:e1:1e:e5:91:1d:4a:d3:34:
fe:4e:37:8b:87:3b:e5:28:cd:6e:68:2b:a1:58:da:86:79:1b:
d6:9a:1b:cd:ac:17:64:40:5f:eb:e3:67:ac:97:f8:29:c1:54:
95:10:36:9c:20:02:64:f7:ed:65:67:e7:b8:a2:6d:19:13:ad:
82:57:33:95:43:da:58:42:31:bd:8f:a9:49:4b:1d:f7:3a:bd:
4e:57:75:50:10:99:23:9b:79:d6:ed:70:8b:8a:cc:1d:3c:eb:
d0:a6:7f:21:e9:e1:8d:b6:f6:27:98:0e:4c:0d:78:54:3a:2a:
0b:c0:2a:be:a9:db:10:fe:fa:37:84:d3:a0:00:57:7d:52:0e:
a5:7a:de:89:93:2c:6b:83:2c:b0:56:35:60:9e:88:80:ee:c3:
ca:7e:ae:d8:8f:06:b5:ab:c0:4a:7f:88:b7:89:3c:fe:df:fb:
91:b6:b7:94:d3:9a:69:8e:94:ae:3d:9f:79:4f:ee:58:2c:70:
f2:4c:75:33:84:95:89:ff:51:8f:8e:ee:4f:52:92:8a:1e:28:
45:72:28:e3:41:57:02:c5:36:ca:c0:0c:65:18:ae:0d:63:a0:
02:74:30:79:8a:e7:17:c1:b8:4d:bf:5f:f8:2b:f3:b3:16:4f:
39:de:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:49 2025 by rpki-client