Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
File: 34352e3136382e35322e302f32322d3332203d3e20323638303239.roa (raw, json)
Hash identifier: vVHa43rKpGGbpv4Z9qchlES0Se/oYCQmYzzkcjNjt6c=
Subject key identifier: 78:62:F1:82:AA:54:FD:AE:B8:6F:D0:3C:EE:E3:75:9C:E1:54:A6:8C
Certificate issuer: /CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
Certificate serial: 7B152CD729987CBF310407DAE67044B097984978
Authority key identifier: 67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
Signing time: Fri 17 Jan 2025 14:55:04 +0000
ROA not before: Fri 17 Jan 2025 14:50:04 +0000
ROA not after: Fri 16 Jan 2026 14:55:04 +0000
asID: 268029
IP address blocks: 45.168.52.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:15:2c:d7:29:98:7c:bf:31:04:07:da:e6:70:44:b0:97:98:49:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677766EC5972FF0FC4FBA6F57085123BEB48BE31
Validity
Not Before: Jan 17 14:50:04 2025 GMT
Not After : Jan 16 14:55:04 2026 GMT
Subject: CN=7862F182AA54FDAEB86FD03CEEE3759CE154A68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:7b:04:26:66:74:46:06:e1:09:ad:41:18:
de:6c:f0:64:fe:04:ce:04:79:57:1e:00:f7:7d:99:
2d:2e:19:fb:ed:fb:1e:dc:f1:a2:e3:66:31:28:96:
ba:99:ee:d4:82:dd:9b:e6:83:19:a4:56:ff:0c:54:
87:ba:4b:65:4b:0e:3d:bf:e7:62:a3:4c:c0:f8:85:
4f:05:a5:04:3d:89:13:62:f2:bc:56:ed:df:1e:dc:
0f:86:2f:03:23:57:e2:2d:63:0a:65:8d:f8:de:12:
c0:1c:4e:a8:ce:9c:d9:fc:5d:3a:67:dd:7e:a7:75:
9b:43:a2:fc:de:d4:67:b1:cf:99:43:6c:38:bc:51:
bb:90:d9:53:72:26:6f:ac:26:ca:0e:e2:f7:47:01:
d0:50:7b:0a:e9:59:be:38:c1:fa:0d:d5:c1:96:d9:
40:e2:e0:61:55:51:33:fd:0f:98:2c:31:e1:30:a6:
bc:d0:e5:6c:f2:88:1f:3a:74:a9:cb:39:c2:de:41:
7b:f2:5d:9c:bd:7c:c1:38:00:3d:36:66:89:64:ba:
2f:6a:15:b5:4e:b2:ae:29:af:fb:8e:ac:87:7e:6f:
44:1a:a0:d7:dc:2b:c4:16:64:41:97:5c:d6:20:f0:
25:87:8b:25:0e:73:83:b0:f2:3b:13:d9:be:88:b3:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:62:F1:82:AA:54:FD:AE:B8:6F:D0:3C:EE:E3:75:9C:E1:54:A6:8C
X509v3 Authority Key Identifier:
keyid:67:77:66:EC:59:72:FF:0F:C4:FB:A6:F5:70:85:12:3B:EB:48:BE:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/677766EC5972FF0FC4FBA6F57085123BEB48BE31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677766EC5972FF0FC4FBA6F57085123BEB48BE31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/34352e3136382e35322e302f32322d3332203d3e20323638303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:c4:32:45:d6:f3:cb:9a:7e:e3:fe:cf:65:0c:e9:a7:e0:79:
25:26:ea:03:c4:79:f9:20:6a:97:5b:e3:78:24:e1:c0:a0:c0:
46:7c:4f:72:30:b4:8f:3e:db:0c:30:80:96:39:83:f5:54:37:
cf:5a:a2:ae:9a:17:d7:79:6c:ea:ff:80:07:fe:cb:3f:83:67:
6b:58:c9:94:48:79:a3:39:ec:b8:e1:ee:e1:96:8c:4f:e8:16:
83:14:78:ae:48:bd:f2:bb:14:1e:10:fb:0c:22:a2:6a:34:e1:
fe:8b:53:fe:b9:d8:87:aa:e1:f9:d7:3c:a6:bd:38:ca:f1:49:
7e:c7:44:d6:eb:4f:0a:77:9a:fd:83:f9:3a:42:d7:e3:d2:3b:
bb:ca:d2:27:86:60:b2:d5:05:a9:c3:80:84:1a:df:4b:d5:f2:
a5:06:62:12:bd:aa:52:0b:63:76:5e:fa:a9:31:04:2d:05:6e:
cc:a7:2b:e8:32:89:22:bf:52:d0:6a:6a:38:d4:1f:4b:0d:4f:
43:36:0a:5f:77:83:b2:b0:77:14:03:32:10:4e:e3:45:e8:35:
d6:46:56:85:7f:68:05:d4:9e:f4:65:cc:6e:bc:03:be:5e:15:
6c:bb:dd:ed:a4:17:d5:a1:c7:d4:3d:18:6c:4b:6c:ec:1c:69:
2d:0d:b6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:41:06 2025 by rpki-client