Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32342d3234203d3e20323637343130.roa
File: 34352e3233352e39322e302f32342d3234203d3e20323637343130.roa (raw, json)
Hash identifier: axcOULisYPJYSTN4rgUq7pq5p6YKnN6ZJoXHaueY4zM=
Subject key identifier: 98:BC:04:FC:11:3C:EC:E1:5F:04:A3:83:02:7E:8F:95:98:56:29:4E
Certificate issuer: /CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Certificate serial: 5F9A885386BC464B0A2F826F5062B795CB7494D4
Authority key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32342d3234203d3e20323637343130.roa
Signing time: Wed 03 Apr 2024 18:31:37 +0000
ROA not before: Wed 03 Apr 2024 18:26:37 +0000
ROA not after: Wed 02 Apr 2025 18:31:37 +0000
asID: 267410
IP address blocks: 45.235.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9a:88:53:86:bc:46:4b:0a:2f:82:6f:50:62:b7:95:cb:74:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0
Validity
Not Before: Apr 3 18:26:37 2024 GMT
Not After : Apr 2 18:31:37 2025 GMT
Subject: CN=98BC04FC113CECE15F04A383027E8F959856294E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:61:c6:b3:ea:a3:9b:44:62:8a:c8:aa:9c:
bb:e1:ee:10:13:80:82:1c:6c:c3:61:60:83:ab:5a:
6f:fa:2d:ef:48:db:0d:1f:4d:da:a3:9b:e0:58:93:
c0:f0:41:a5:77:c3:26:99:2f:df:e3:d5:e7:17:0f:
b7:09:68:d0:d8:18:1a:7d:d0:ce:42:c7:df:1e:ce:
fd:31:e7:e5:a7:fe:6f:2e:f9:c1:b5:e8:30:61:eb:
ac:65:7f:7d:36:c3:ec:d4:54:9f:78:85:f1:cf:da:
27:81:e3:df:c8:65:d8:d7:7c:49:eb:c0:79:8c:5d:
22:ed:39:4b:72:a0:a4:13:6c:42:6a:e2:14:48:9e:
0a:5f:4a:a3:7a:68:dc:17:db:48:2a:a5:4a:c5:e7:
97:9c:f9:e7:9c:61:0f:ae:48:0f:07:c0:82:05:12:
93:fe:d0:4c:e1:26:e3:78:8b:e1:35:96:6d:a2:d4:
dd:2b:e7:51:18:1b:0a:c7:37:8e:6a:a2:ab:ae:eb:
64:4c:69:af:5b:a2:94:62:4c:7d:d4:8d:7c:32:b1:
26:bb:c0:29:06:6f:b8:b5:2c:c1:28:cf:7e:a0:e8:
37:30:72:c1:cd:71:f5:a3:0e:7d:0d:d1:0d:e9:18:
8b:c3:53:51:1e:77:0c:0f:21:fc:7f:3f:68:cb:e8:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:04:FC:11:3C:EC:E1:5F:04:A3:83:02:7E:8F:95:98:56:29:4E
X509v3 Authority Key Identifier:
keyid:8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/34352e3233352e39322e302f32342d3234203d3e20323637343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9a:8e:bf:6c:9f:51:3c:a8:4f:4f:8e:f7:70:f5:54:39:2f:
a4:ef:0e:c1:72:e5:8b:b6:9a:06:78:e6:ce:e2:af:79:84:de:
96:4b:14:fe:fc:b0:2c:f4:37:ef:03:ff:9a:c5:dc:04:64:0f:
3c:7c:05:3b:88:d7:fe:01:5d:9c:fa:78:af:96:75:df:42:0b:
39:a5:a0:dc:69:71:e1:e9:ac:99:6c:ff:19:c4:0e:7d:88:1d:
89:39:05:33:e2:3e:3d:fb:7f:83:b9:e6:6e:2d:b8:c8:8a:ba:
61:8a:72:61:66:c8:cb:70:d4:63:86:e7:97:19:71:2a:ad:fb:
e0:68:7d:1c:89:9b:07:5d:c5:b5:2c:5a:94:6a:15:4a:29:44:
62:2c:2d:3e:a5:ea:e4:96:97:bb:d7:bb:3f:61:d7:a3:fa:1d:
f9:05:8f:a5:0d:08:29:66:e2:3d:b6:04:20:d2:fa:17:dd:64:
4d:a8:ea:6d:8a:f2:19:76:5c:db:ac:95:e1:17:b7:00:f5:64:
4b:49:f0:1c:53:56:ac:cb:b8:c6:af:c9:ad:f5:a2:75:3e:32:
d6:da:9d:0e:5c:fe:05:5b:03:9e:f7:50:be:5c:e2:2e:0a:1c:
1d:c8:cd:a5:7f:a0:d6:1e:09:77:e8:06:f0:a3:b8:d0:3f:4f:
97:9d:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:27:21 2025 by rpki-client