Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
File: 34352e3233342e34302e302f32322d3234203d3e203238363639.roa (raw, json)
Hash identifier: IR75jgv1Iqa+kdIaXTKqmEgJauEzQTSroQ0klf4j5qk=
Subject key identifier: AC:4A:EB:78:D6:FE:E3:AC:78:1D:DB:C4:26:EA:49:A3:3D:AB:6F:B1
Certificate issuer: /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial: 6E5818884F27DFB14505FE029CBE824B8752326A
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
Signing time: Fri 03 Nov 2023 13:04:13 +0000
ROA not before: Fri 03 Nov 2023 12:59:13 +0000
ROA not after: Fri 01 Nov 2024 13:04:13 +0000
asID: 28669
IP address blocks: 45.234.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:58:18:88:4f:27:df:b1:45:05:fe:02:9c:be:82:4b:87:52:32:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Validity
Not Before: Nov 3 12:59:13 2023 GMT
Not After : Nov 1 13:04:13 2024 GMT
Subject: CN=AC4AEB78D6FEE3AC781DDBC426EA49A33DAB6FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:76:77:e7:34:ed:c2:4b:6c:73:c4:23:cd:
6c:18:d1:bb:9c:31:38:e6:ce:f2:e2:dd:59:56:bd:
ff:26:6a:73:19:c5:db:ef:09:f6:25:52:9d:a1:d7:
34:9f:a4:ce:4c:ea:b3:81:36:2f:3a:5d:f6:25:b1:
ce:33:09:bc:46:24:61:6b:28:6f:80:be:7b:10:58:
75:8d:e2:f9:f9:b8:6b:66:ea:76:2c:ec:27:38:fc:
e6:56:bd:9e:88:31:db:e7:36:63:1c:b4:54:11:53:
ed:c0:37:7a:06:2d:e0:c7:b4:cd:35:82:7c:28:68:
a6:e9:66:31:d8:f0:55:ae:32:1b:2d:f3:60:44:5a:
ee:95:1b:4d:10:9d:41:43:37:f0:4c:23:f0:65:f2:
d4:7e:07:60:e0:e4:df:20:f7:62:ae:b1:1f:b0:56:
25:cf:e7:80:6f:f8:dc:ab:3a:b5:57:51:b6:92:3d:
18:41:a3:fd:be:88:ed:fe:8e:96:24:23:04:5c:42:
a9:6d:63:fb:92:5c:d1:a8:7b:e7:e2:11:14:ba:1f:
9e:65:67:ee:3d:ad:5b:df:0a:0f:ef:0c:d3:eb:24:
32:0d:b2:19:92:8c:ed:9f:83:1a:4b:6e:a2:cb:81:
66:3e:1a:06:4b:56:5b:ca:d2:0f:6d:3e:dd:a4:12:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:EB:78:D6:FE:E3:AC:78:1D:DB:C4:26:EA:49:A3:3D:AB:6F:B1
X509v3 Authority Key Identifier:
keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.40.0/22
Signature Algorithm: sha256WithRSAEncryption
33:42:22:d4:8c:b6:e2:61:3a:d5:5e:92:f5:cb:96:7e:2d:88:
a9:46:df:bc:68:e3:3a:66:3f:b6:3b:d7:d2:0d:26:29:3c:4a:
03:98:93:32:b8:c8:80:55:23:31:b3:6a:ff:5a:94:94:df:84:
2b:b1:d9:61:23:07:99:10:33:8f:8e:fc:37:2c:95:56:67:1b:
64:c4:55:10:8d:33:bb:0c:83:6c:b0:21:90:01:3d:68:68:1d:
4d:27:94:ad:6c:d0:dd:82:8d:b1:c5:ba:9f:06:c3:bd:d3:85:
57:70:18:a4:9f:16:5c:78:b8:f2:33:6f:f5:e0:4f:54:a1:51:
47:b5:ed:21:3f:3b:22:36:a8:f8:5d:64:0e:e6:63:ab:5e:e2:
79:9f:51:f4:64:16:4b:19:0e:5c:33:59:0a:f1:83:dc:fb:8d:
cd:f0:47:07:b5:74:93:47:d3:98:77:90:a0:73:23:2f:e1:73:
65:f7:56:e2:71:44:58:a3:a0:49:3b:69:d8:b6:a3:d3:90:29:
aa:ac:23:8f:af:02:6e:65:91:97:ea:6a:03:67:b0:db:06:9c:
af:4a:26:23:f7:09:00:81:d4:15:49:93:b5:55:47:bb:cd:64:
d0:c6:1a:fb:19:75:da:6c:23:f2:df:81:cf:a4:cf:fa:98:94:
41:c9:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 14:33:22 2025 by rpki-client