Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/34352e3138392e32302e302f32322d3332203d3e20323639363439.roa
File: 34352e3138392e32302e302f32322d3332203d3e20323639363439.roa (raw, json)
Hash identifier: THzG1irdLu6oRplZDvsfV5bFjwEHrLs8L2adlAvOW80=
Subject key identifier: 5E:F1:14:31:A1:A6:09:F5:6E:9B:11:8C:4F:45:6A:93:B9:35:AC:03
Certificate issuer: /CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
Certificate serial: 016C380889DADB030EBA2A3417A71ECC34BA47C1
Authority key identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/34352e3138392e32302e302f32322d3332203d3e20323639363439.roa
Signing time: Thu 04 Apr 2024 19:27:22 +0000
ROA not before: Thu 04 Apr 2024 19:22:22 +0000
ROA not after: Thu 03 Apr 2025 19:27:22 +0000
asID: 269649
IP address blocks: 45.189.20.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:6c:38:08:89:da:db:03:0e:ba:2a:34:17:a7:1e:cc:34:ba:47:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629
Validity
Not Before: Apr 4 19:22:22 2024 GMT
Not After : Apr 3 19:27:22 2025 GMT
Subject: CN=5EF11431A1A609F56E9B118C4F456A93B935AC03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7e:79:84:78:90:f1:b3:1c:35:f1:55:80:c2:
6b:4f:a1:8f:1f:af:bd:bc:c9:27:f4:bc:c1:27:db:
ae:e4:9e:2f:31:90:38:59:48:6f:b4:f2:9a:64:74:
e5:a2:f0:10:af:b0:3c:cd:40:d7:fa:04:cd:9c:66:
cd:5e:ea:61:16:e1:87:d1:63:22:b8:31:03:90:b5:
36:73:95:b5:72:3b:6d:8d:72:04:78:31:0a:c9:71:
19:0a:9e:33:23:66:05:ea:ad:de:1b:aa:7d:54:69:
4c:51:60:af:75:b2:be:a6:0d:25:e2:91:39:1d:58:
9b:a2:d2:02:69:2f:17:81:03:30:4b:d4:ae:4d:21:
6e:d5:c1:a1:70:c3:1a:ce:e5:1b:76:34:13:e3:d7:
8a:c4:40:b2:08:09:9f:6f:18:cf:78:6e:89:e7:e9:
0a:99:5c:4e:f2:97:5a:39:ce:65:9d:5e:52:f5:f2:
b2:5f:91:67:f3:c1:ba:e5:86:27:70:83:32:6e:c6:
46:c5:c2:98:2e:9f:7f:2c:76:d1:2a:ee:30:e1:0f:
21:61:89:54:9a:91:d4:0f:72:e3:c5:35:0f:41:7d:
6e:96:90:75:a1:dc:5b:be:0a:f8:ac:71:64:8d:80:
da:08:58:00:32:ae:d8:49:3f:7d:a0:42:b4:b0:06:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F1:14:31:A1:A6:09:F5:6E:9B:11:8C:4F:45:6A:93:B9:35:AC:03
X509v3 Authority Key Identifier:
keyid:BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/34352e3138392e32302e302f32322d3332203d3e20323639363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.20.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a4:ae:59:38:ec:d0:3e:be:19:91:71:16:9c:f7:17:19:c0:
33:03:5a:1d:ea:e3:38:0a:a1:d5:f1:5f:ff:0b:18:1c:73:8d:
7b:50:26:a7:37:d4:d1:f6:3e:02:f9:a9:36:d0:b7:be:26:03:
e5:20:6e:ef:e7:9a:57:39:49:dd:67:45:cb:72:3f:7c:1e:33:
48:77:bb:f1:2c:9a:7d:1a:db:1c:e0:5e:c4:61:a0:ff:3c:9d:
6e:58:aa:b4:51:de:17:14:d4:a1:86:86:11:b9:ad:0b:f3:a0:
04:ad:cc:cd:3c:34:49:6f:b4:f6:3b:52:ff:a7:6b:6e:47:9b:
2f:bf:e5:4e:25:3f:0e:4d:08:ac:4f:12:a3:3d:b3:2c:5a:98:
09:df:5d:e0:a7:27:4e:9b:de:26:7e:34:c8:aa:bf:70:6b:1b:
e6:36:7f:3c:ef:cc:43:b6:83:f9:b6:87:3f:ce:a2:35:c1:5e:
21:15:11:93:e0:89:42:c9:2a:bc:0e:f1:20:4b:87:93:b1:3e:
a3:ce:63:bc:31:7f:0a:1c:ca:71:46:72:17:be:98:57:9b:e6:
76:0f:0f:66:c0:a9:02:42:04:e3:49:76:88:b5:b8:c7:89:26:
83:df:df:f3:8c:64:1e:7c:0f:55:cf:21:47:c6:5c:d9:2e:45:
aa:a9:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:40:17 2025 by rpki-client