Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
File: 34352e3138382e37342e302f32342d3234203d3e20323639353137.roa (raw, json)
Hash identifier: Am7Akm3XriVDGA/V/qstiMfmnYByjeOJQP/8vdw4mpg=
Subject key identifier: 08:55:BE:28:D8:74:A1:B0:95:8A:80:D5:D4:46:29:9D:07:E3:5E:5F
Certificate issuer: /CN=CB0236634B4C2CE495EE34D60558955292749C07
Certificate serial: 38A15A0F5DC39EC32C74AE323C1993C46561231E
Authority key identifier: CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
Signing time: Thu 12 Dec 2024 14:06:46 +0000
ROA not before: Thu 12 Dec 2024 14:01:46 +0000
ROA not after: Thu 11 Dec 2025 14:06:46 +0000
asID: 269517
IP address blocks: 45.188.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a1:5a:0f:5d:c3:9e:c3:2c:74:ae:32:3c:19:93:c4:65:61:23:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB0236634B4C2CE495EE34D60558955292749C07
Validity
Not Before: Dec 12 14:01:46 2024 GMT
Not After : Dec 11 14:06:46 2025 GMT
Subject: CN=0855BE28D874A1B0958A80D5D446299D07E35E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:3d:b0:d4:84:68:dc:7d:c3:91:04:8c:29:
97:ce:7b:1b:df:04:81:cb:66:1d:79:43:e2:3d:6a:
e2:1a:64:79:8f:c3:30:30:08:c9:ca:c6:a6:d3:a3:
76:e4:47:47:48:19:dc:53:f8:94:b5:77:8f:f1:3c:
a6:10:17:45:48:a8:db:b2:32:67:3e:9f:70:3f:af:
f5:55:fa:5a:75:2e:af:3d:02:6c:b4:78:5a:ef:ae:
c6:85:63:24:d7:f0:bb:66:d9:81:c8:aa:22:06:8f:
f0:0a:3f:d0:e2:7f:af:07:29:e7:9f:ed:7a:8f:6e:
99:17:1b:bb:45:49:24:2a:ce:d9:58:1a:32:5d:df:
30:93:2d:0f:97:8b:da:46:4f:ce:32:85:54:8d:f8:
af:ec:2e:a2:0b:d9:b2:12:46:12:39:9f:4d:f4:3f:
ad:cb:b8:a6:cf:79:88:6b:90:18:59:dc:e0:92:61:
9e:d6:8d:fe:2b:43:3f:68:ec:b4:4e:ba:e7:d0:09:
2b:13:58:ce:4b:25:b6:b0:a8:3c:f0:2d:20:34:14:
80:78:b9:b7:d6:28:7a:8e:df:d3:e0:33:63:de:ee:
6a:9b:ff:56:9a:b0:e7:6f:3e:dc:4f:9e:9c:d7:d6:
14:12:33:88:13:83:12:7c:78:e9:1b:63:df:d5:cc:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:55:BE:28:D8:74:A1:B0:95:8A:80:D5:D4:46:29:9D:07:E3:5E:5F
X509v3 Authority Key Identifier:
keyid:CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/34352e3138382e37342e302f32342d3234203d3e20323639353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.74.0/24
Signature Algorithm: sha256WithRSAEncryption
01:46:8e:35:b3:3d:cd:78:91:34:6b:75:54:3c:5c:7d:b3:1e:
15:1e:a7:5a:00:80:0d:bd:7a:ff:d6:c4:0a:42:f2:bc:98:f9:
66:69:3f:0a:2d:31:31:7d:0c:3d:e2:9b:27:b8:20:0d:5d:06:
77:fb:b4:06:c1:11:42:ae:c3:dc:9e:32:65:e7:77:22:7d:f6:
af:2f:1a:ee:2e:fd:51:0c:3d:a0:90:e9:2d:dc:12:f7:38:0a:
b5:8f:80:2a:0d:9a:d9:69:49:b1:e0:1e:c3:90:4e:03:4e:b8:
e0:7c:6b:2f:51:6a:67:24:3c:13:3d:09:40:b1:76:7e:85:69:
81:1a:f1:ae:47:83:04:1c:8e:a3:5b:b0:9f:2b:b8:e7:68:66:
71:83:14:0a:00:93:1c:d3:c1:10:1a:96:b9:9b:5d:29:9c:31:
b2:0c:0b:46:e1:65:47:bd:20:e6:05:6a:df:3f:96:06:9d:21:
d0:f6:ab:00:b9:54:c5:87:a5:80:69:b6:14:f8:39:64:9b:fe:
56:c9:7f:63:0b:a3:4b:5c:6e:7d:96:9b:bc:fe:7d:e2:06:27:
0e:40:bf:40:74:b4:60:f7:55:64:ab:01:3a:fc:cf:0a:40:c8:
b8:bd:28:fa:12:ba:0e:14:09:e8:f4:8a:09:df:f6:c0:81:d9:
2e:93:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:54:47 2025 by rpki-client