Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
File: 34352e3139312e3230342e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier: pF1UD0ohRrUrA/uoF1MvhgOp3OOokkhl3tDCRmc9boU=
Subject key identifier: A6:C6:47:10:A3:46:DB:7B:26:A9:2F:FC:FD:5E:DC:C3:85:4B:B0:EA
Certificate issuer: /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial: 35FC181611ADC79F5547C090BFAF831DC918BB10
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
Signing time: Thu 04 Apr 2024 23:12:28 +0000
ROA not before: Thu 04 Apr 2024 23:07:28 +0000
ROA not after: Thu 03 Apr 2025 23:12:28 +0000
asID: 3356
IP address blocks: 45.191.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:fc:18:16:11:ad:c7:9f:55:47:c0:90:bf:af:83:1d:c9:18:bb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
Validity
Not Before: Apr 4 23:07:28 2024 GMT
Not After : Apr 3 23:12:28 2025 GMT
Subject: CN=A6C64710A346DB7B26A92FFCFD5EDCC3854BB0EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:73:a6:21:80:83:67:e6:81:80:81:7f:9e:
3a:55:2f:d6:a5:b0:73:c7:25:7f:7c:ca:e2:94:d7:
e5:ce:93:ff:6a:53:71:30:32:1b:15:f4:19:90:a7:
79:62:54:a3:82:f4:0f:f9:91:0c:0f:9c:5d:c7:b8:
cb:c7:63:ca:3f:36:a0:ea:4e:51:9d:40:ac:c5:f8:
1f:ec:ee:46:e7:34:33:a1:fb:83:ea:a1:b1:1d:f0:
91:91:28:e0:8c:f0:0a:00:40:50:8e:4b:09:d9:45:
a2:a2:e1:9f:45:85:50:0f:d7:c3:a8:b7:a9:64:38:
69:96:21:83:21:b8:fc:79:45:2d:60:69:b5:48:ac:
e0:c5:a0:63:6a:fe:b3:97:69:98:12:20:c5:84:b3:
17:be:b8:d8:e1:a8:29:32:08:3d:9c:24:2f:30:79:
33:e1:df:20:98:7b:1d:78:35:29:28:d2:f0:ba:5e:
50:0e:4a:8f:1e:d9:7f:f2:a6:b8:9c:00:7b:16:8d:
e7:f1:f7:0c:65:4a:4f:ee:a9:7e:7c:80:c4:fe:a5:
32:80:56:3e:53:45:17:32:90:c4:6d:af:0f:59:5c:
a0:23:6c:54:0a:a2:fa:52:10:c5:35:d2:78:00:f5:
9b:d3:3f:9f:e7:2e:1a:4f:ac:d6:54:4d:68:71:16:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C6:47:10:A3:46:DB:7B:26:A9:2F:FC:FD:5E:DC:C3:85:4B:B0:EA
X509v3 Authority Key Identifier:
keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.204.0/22
Signature Algorithm: sha256WithRSAEncryption
33:ff:fa:3a:84:3d:2c:f8:97:9d:eb:24:fb:d4:d1:f6:00:b6:
c8:4f:1b:0a:26:b4:08:38:eb:78:55:48:04:7a:36:ef:ce:28:
8f:1d:af:17:2e:a1:de:76:6f:b2:54:ce:f2:5a:b6:75:64:ad:
63:3b:ab:70:21:12:4f:44:16:aa:02:5e:79:5b:1e:6a:41:0a:
de:32:1f:e1:75:2e:58:5a:2d:66:ca:bc:c4:d1:59:0e:9f:8c:
3a:f0:a8:e0:54:f5:24:4b:95:fd:08:cf:40:78:b9:0e:e1:3f:
53:ec:e5:72:80:af:87:58:ca:de:59:82:20:05:3a:6b:89:98:
ea:53:e3:65:33:ce:a8:82:81:4b:21:f0:da:fe:aa:3d:be:f5:
c6:d0:da:fc:a7:b7:d5:d2:3f:6d:04:bf:64:a8:9f:3a:14:25:
4b:19:a5:10:13:21:fc:17:f0:8e:c1:22:b8:6b:7d:98:aa:dd:
5c:d2:76:f7:57:8b:7a:f2:18:86:f7:4a:7d:7b:c2:62:26:97:
e8:c2:eb:db:07:ce:4f:6c:2a:99:08:8a:a1:62:92:c9:74:a7:
47:84:70:3b:d9:28:62:c8:05:b7:4c:3d:99:5e:76:81:44:b4:
a9:09:52:a2:d2:7c:9c:00:db:84:66:9b:2e:12:5a:c9:ce:0d:
3f:c7:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:29 2025 by rpki-client