Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
File: 34352e3136382e31342e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier: +E6sxqlWsFDm1lH2sLu+AFUgO3caoF2yIWjvv4Jyts0=
Subject key identifier: E3:BD:83:0E:31:D3:D7:ED:CD:9B:69:44:BB:A3:42:8C:35:A2:5B:93
Certificate issuer: /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial: 148F6322AA5AFCF4867BC595D1F48730AD68B80A
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
Signing time: Thu 04 Apr 2024 09:24:28 +0000
ROA not before: Thu 04 Apr 2024 09:19:28 +0000
ROA not after: Thu 03 Apr 2025 09:24:28 +0000
asID: 268035
IP address blocks: 45.168.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8f:63:22:aa:5a:fc:f4:86:7b:c5:95:d1:f4:87:30:ad:68:b8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Validity
Not Before: Apr 4 09:19:28 2024 GMT
Not After : Apr 3 09:24:28 2025 GMT
Subject: CN=E3BD830E31D3D7EDCD9B6944BBA3428C35A25B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0b:9f:87:b8:d3:01:1f:87:86:0e:9e:99:1f:
cc:c9:9d:15:d3:27:e9:1d:ed:17:80:b5:ab:0d:f3:
d5:ff:b9:2e:77:55:d4:42:11:c5:fb:40:57:63:0b:
32:97:fc:d4:69:44:66:ed:8e:43:0e:28:1f:ed:e0:
a3:66:80:01:93:3b:00:c9:a7:c9:f4:a5:ab:fc:ed:
07:52:d9:1f:d7:92:12:5c:3b:97:00:d1:a6:3d:4e:
0b:14:86:cd:f1:af:47:ef:6e:70:26:da:6c:3a:72:
a2:6d:de:28:85:96:f0:5c:32:d3:50:f6:3c:aa:66:
ef:77:3c:a1:ed:63:c4:5f:e5:3d:1f:a3:29:5f:13:
1b:0f:ef:a2:aa:c8:b8:1c:1d:66:98:43:a6:04:a5:
07:d4:00:fc:f1:aa:56:b7:f7:67:56:ff:4c:06:08:
ca:5d:b4:c8:62:bb:f9:c3:90:0e:af:0c:e4:95:1b:
32:8f:a2:85:cd:d2:1f:23:c9:b8:24:6f:4d:62:bd:
44:43:6e:40:6d:da:88:20:5c:1b:f4:9d:bf:49:72:
a7:94:3d:20:40:bc:b2:b3:a0:a7:26:9b:e3:21:f8:
37:05:05:70:34:2a:5e:ab:46:33:86:79:f7:09:90:
f7:06:d7:0f:19:c9:3e:c7:61:5d:f3:f2:7e:80:8d:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BD:83:0E:31:D3:D7:ED:CD:9B:69:44:BB:A3:42:8C:35:A2:5B:93
X509v3 Authority Key Identifier:
keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:be:d5:b1:48:e7:91:95:d0:73:aa:2a:2a:a0:ba:de:d2:39:
ba:1b:49:2b:27:75:66:45:7e:8d:32:11:51:2f:dd:fc:f7:a2:
28:92:54:6e:bf:69:15:e3:f4:76:ad:a4:ed:b5:98:43:fe:85:
30:75:01:92:b7:4b:3d:81:1e:3f:8c:de:8d:18:ec:ba:9b:74:
c7:04:fb:9c:76:75:1f:08:30:ea:46:1c:8d:b6:8e:46:3a:a8:
67:f5:55:66:20:dc:cc:14:c8:92:d7:35:7a:72:fd:b9:81:31:
37:39:3e:e9:5c:66:ee:d0:1b:99:ea:77:db:c8:d5:d8:f5:9b:
f6:75:47:8e:6c:41:bb:90:1d:71:73:07:83:82:ee:9d:09:b5:
6d:1a:76:8e:6c:d4:d8:0d:23:7f:4d:c1:be:ba:a5:93:94:53:
73:d4:a2:cb:02:dc:e3:5b:8c:f6:40:92:44:8f:d8:43:8d:7c:
4c:50:f5:a9:09:18:b6:53:8c:33:7c:13:07:ec:11:ac:da:0f:
70:dc:0a:56:e6:23:9e:cb:ac:95:b5:e1:b3:ae:c3:d3:e5:51:
8e:9e:c8:6e:47:4d:24:9d:07:2d:96:8b:b9:de:19:18:0c:9f:
25:c9:5f:c2:fc:9f:f3:2c:ee:96:57:24:58:6e:db:70:cb:e1:
f9:d5:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:47:26 2025 by rpki-client