Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
File: 34352e3233362e34382e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier: vbDXUL+W8pe9ZuKabvwK8RSOS8ryRM+TD+pWGvwvrt0=
Subject key identifier: E5:F3:87:FF:C1:ED:D9:8E:09:79:F3:5D:EF:84:5D:53:5D:8E:A2:CA
Certificate issuer: /CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
Certificate serial: 0757E954CEA73C0EC3297B669F400E608295ED89
Authority key identifier: BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
Signing time: Tue 09 Apr 2024 16:49:49 +0000
ROA not before: Tue 09 Apr 2024 16:44:49 +0000
ROA not after: Tue 08 Apr 2025 16:49:49 +0000
asID: 268205
IP address blocks: 45.236.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:57:e9:54:ce:a7:3c:0e:c3:29:7b:66:9f:40:0e:60:82:95:ed:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCB1F68DF2709D725FAB621593B41E20C3D376FE
Validity
Not Before: Apr 9 16:44:49 2024 GMT
Not After : Apr 8 16:49:49 2025 GMT
Subject: CN=E5F387FFC1EDD98E0979F35DEF845D535D8EA2CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:0d:cd:61:d6:8e:db:54:9d:73:31:a2:61:
dc:03:fd:9d:e3:cd:b0:d7:b9:5a:4d:68:0f:3f:b6:
58:39:21:80:8d:a9:6c:69:33:cf:db:9b:23:55:11:
f7:8b:73:d0:45:40:2b:c4:1e:80:f1:4e:6b:cc:85:
f7:01:1f:9c:66:36:32:e8:47:0b:cc:6a:96:9d:9f:
36:63:72:78:e4:3b:0a:00:49:8f:da:b9:af:2d:72:
88:31:56:d4:c3:16:6f:41:dd:ff:d8:da:10:1d:63:
f2:72:9b:ee:a1:66:53:c3:d8:08:e5:8b:71:60:2f:
1f:39:14:3d:d2:dc:fa:3c:89:05:56:6d:de:cd:f3:
b3:77:48:53:12:31:29:67:c2:f9:1d:eb:65:2e:9f:
fd:1d:0d:ad:cb:e9:4b:23:d5:99:76:49:ac:13:a1:
85:14:38:e4:fa:ca:c7:83:f5:0d:ab:e6:be:f9:e8:
93:3b:2d:88:ce:a0:b6:05:10:e6:ba:be:6e:e3:42:
4c:91:b7:4f:88:2c:b4:fa:80:86:b3:1d:95:bd:27:
8c:a9:5d:ae:52:06:f7:c2:77:ca:bf:ac:f7:b5:ea:
a4:ab:ff:38:0b:15:5d:41:0a:a2:d5:a8:97:fc:f1:
4e:a9:ed:7d:cd:ee:e1:a9:97:bf:32:c1:97:49:3f:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:87:FF:C1:ED:D9:8E:09:79:F3:5D:EF:84:5D:53:5D:8E:A2:CA
X509v3 Authority Key Identifier:
keyid:BC:B1:F6:8D:F2:70:9D:72:5F:AB:62:15:93:B4:1E:20:C3:D3:76:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/BCB1F68DF2709D725FAB621593B41E20C3D376FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BCB1F68DF2709D725FAB621593B41E20C3D376FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/1/34352e3233362e34382e302f32342d3234203d3e20323638323035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.48.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ee:fc:73:2d:e4:3c:04:90:0d:79:e1:63:26:64:60:31:2c:
ef:2f:6b:77:31:69:c3:b9:da:6b:3e:f3:d4:75:2a:a0:c5:9b:
41:d0:f3:18:fc:cb:3f:00:fc:5c:c5:7e:f2:a1:75:87:ec:72:
9f:e3:e6:2f:11:71:42:94:2f:87:df:14:f9:4e:5d:1b:fb:51:
22:4f:2d:2f:8e:2a:3f:6b:45:17:78:7e:58:4a:f9:23:1f:27:
bb:92:f8:67:75:40:ac:b3:b9:05:20:23:37:00:57:7f:ed:2d:
a2:e3:00:d1:94:a6:19:86:da:0a:d9:b6:cd:bb:6e:1a:39:79:
a5:a6:b3:8c:7d:d8:24:6d:1d:78:88:a4:2a:ac:3d:2b:1e:16:
88:a4:5f:a8:97:d2:27:a7:c7:6f:79:25:88:1c:6e:c0:67:4d:
44:9e:4b:ca:47:c9:a1:c1:b6:3a:00:e9:55:8e:a4:46:dc:63:
30:cf:3c:2d:d2:3f:bc:20:99:e4:33:30:01:08:05:46:36:2f:
91:ea:13:f5:39:f8:d4:92:04:9d:89:5a:ec:3a:3e:f1:d9:0c:
90:51:5d:ff:3c:9b:6f:54:62:23:ef:32:db:60:fa:8f:a1:e7:
23:53:4e:d3:e2:7b:7b:b8:31:3d:32:28:d8:69:ef:42:73:fa:
d4:82:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:34:44 2025 by rpki-client