Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3234203d3e20323730323534.roa
File: 34352e3139312e34302e302f32322d3234203d3e20323730323534.roa (raw, json)
Hash identifier: +ELc/cdHA6pm2kddxyuB8cT9ZxmW8xhCo1C9X8j7nOc=
Subject key identifier: 71:82:7B:FD:A5:60:BD:57:0A:DD:3F:E8:EA:82:12:C5:05:0E:FE:08
Certificate issuer: /CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3
Certificate serial: 751936A033C44A564EBC080A2A471C9ADBE1BF39
Authority key identifier: C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3234203d3e20323730323534.roa
Signing time: Fri 24 Jan 2025 15:00:07 +0000
ROA not before: Fri 24 Jan 2025 14:55:07 +0000
ROA not after: Fri 23 Jan 2026 15:00:07 +0000
asID: 270254
IP address blocks: 45.191.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:19:36:a0:33:c4:4a:56:4e:bc:08:0a:2a:47:1c:9a:db:e1:bf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3
Validity
Not Before: Jan 24 14:55:07 2025 GMT
Not After : Jan 23 15:00:07 2026 GMT
Subject: CN=71827BFDA560BD570ADD3FE8EA8212C5050EFE08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4a:82:0a:74:ca:c5:4b:4b:84:74:af:b5:3a:
d1:af:c5:2b:49:80:56:68:82:49:37:5c:13:20:8d:
f2:31:88:b1:e1:ae:43:cf:59:e4:76:cf:ea:6d:0b:
0a:98:0e:c1:11:73:9c:4a:e9:09:23:a9:45:2c:f6:
55:7b:49:1c:37:2c:4f:b7:88:90:65:06:1e:df:8a:
4d:4d:1b:5a:18:bd:ca:78:8c:b8:76:6c:ca:7d:18:
6f:60:ff:30:27:6f:91:38:e1:c4:b6:05:66:8d:b2:
54:1f:ec:46:99:d1:2b:34:87:3e:62:21:9f:4b:ed:
fa:6a:4b:d8:8f:17:da:90:15:92:3b:83:32:6b:a9:
dd:13:88:24:82:d2:df:0f:2f:13:c0:f1:2b:1e:a7:
fe:f1:a1:08:23:49:d8:b8:bc:be:34:53:67:ec:ec:
c7:ba:12:0b:0d:f5:98:87:bf:3f:ca:e8:b4:a1:d1:
65:b6:54:80:8d:ad:31:11:60:bd:21:2c:fa:0c:b7:
04:d4:53:cf:50:49:e2:35:05:47:8d:08:e8:ea:b5:
df:6c:37:61:eb:d8:a4:8c:53:03:21:2e:29:45:87:
aa:a4:91:1e:74:cc:66:8b:de:a3:be:0d:07:4f:3d:
ad:47:47:a7:83:33:44:7e:70:2e:da:87:1a:51:ae:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:82:7B:FD:A5:60:BD:57:0A:DD:3F:E8:EA:82:12:C5:05:0E:FE:08
X509v3 Authority Key Identifier:
keyid:C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/34352e3139312e34302e302f32322d3234203d3e20323730323534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:c6:3c:e4:58:41:c9:b2:8a:38:74:2a:cd:2f:28:5c:7a:c1:
c0:26:58:4e:dc:57:d1:48:2d:02:09:8b:0c:5d:e5:20:9b:2d:
b2:59:04:43:08:6e:cb:d4:6a:09:fd:f1:18:2d:e5:98:e5:65:
17:ed:6c:89:2e:c3:bf:5f:30:6c:4a:ba:e8:5e:75:d2:00:e1:
86:20:ef:20:a9:f5:52:11:c2:b5:55:68:db:5f:13:b7:30:09:
c0:54:ca:3c:07:e1:ad:d0:43:87:68:7d:5d:4d:18:97:24:d5:
62:19:17:5e:76:93:7e:ff:da:9d:59:a9:45:88:96:0b:09:24:
12:b5:f7:6d:21:89:46:39:b2:9e:19:94:29:90:cf:d0:ea:40:
3e:1a:f1:d5:a8:5c:42:5d:52:3a:89:ea:3f:9e:d0:c6:95:51:
c1:ca:d9:ca:74:62:69:31:b2:33:c9:c3:96:c0:fc:36:7f:b9:
ed:e6:5d:e6:6b:0f:25:1b:77:00:8a:7c:75:38:5a:04:72:5d:
65:29:65:32:dd:92:ec:b1:6e:eb:3a:74:24:62:cb:5d:85:e5:
9f:fe:fa:19:4c:38:b6:a8:46:11:f0:32:85:77:a8:5d:a5:9b:
c6:ea:7d:fd:76:57:bd:5f:37:c5:19:c3:74:f0:a9:a6:cd:b0:
7b:94:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:54:33 2025 by rpki-client