Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa
File: 34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa (raw, json)
Hash identifier: 3q0xJ9CT5cLJ7S3UOlS4bGiefRPRVnKSQjM5D6bBJAQ=
Subject key identifier: 48:84:7A:FB:CC:F0:EA:37:8E:F7:BA:E1:C1:E9:72:42:67:ED:CB:69
Certificate issuer: /CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Certificate serial: 4C7E7B773E6D715D27C95170FC972E0A6CFAEE3D
Authority key identifier: 62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa
Signing time: Thu 04 Apr 2024 13:22:05 +0000
ROA not before: Thu 04 Apr 2024 13:17:05 +0000
ROA not after: Thu 03 Apr 2025 13:22:05 +0000
asID: 268160
IP address blocks: 45.170.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:7e:7b:77:3e:6d:71:5d:27:c9:51:70:fc:97:2e:0a:6c:fa:ee:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620FC0DB62F1480AC8CF9B22F3885A9A4268099E
Validity
Not Before: Apr 4 13:17:05 2024 GMT
Not After : Apr 3 13:22:05 2025 GMT
Subject: CN=48847AFBCCF0EA378EF7BAE1C1E9724267EDCB69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:c1:e1:d4:73:2e:cc:ad:f4:f7:3e:97:ab:
1e:05:c3:cf:ed:6a:57:6f:52:d4:68:c6:db:02:0e:
56:93:16:19:79:fb:03:93:e0:89:ad:ad:c1:a5:8b:
cd:cb:dd:c0:8a:af:dd:fa:cd:f9:a6:5f:79:50:7d:
d5:6d:0e:c2:67:74:91:d0:ee:6a:e6:e8:ed:18:20:
a0:7c:14:ee:60:a0:43:d3:53:d2:2a:45:6f:96:aa:
28:57:a9:3c:17:12:58:d0:d4:49:c8:d9:af:9e:25:
2d:d2:96:a4:10:62:dc:41:6f:07:b9:96:d5:ee:fa:
55:a9:82:ee:0f:62:a3:fa:b0:08:1c:2a:5e:d5:d9:
ce:9b:6e:f5:fd:1b:ae:d4:f2:1b:71:5c:3d:a1:5b:
83:a3:23:6d:4b:2f:12:e2:c8:19:a4:0a:f0:a5:8c:
25:de:24:5b:b8:33:dc:ba:ff:b8:36:b4:fd:9c:78:
b7:0c:03:80:18:42:9e:d5:a0:c1:1d:a0:a8:32:c1:
10:f7:2e:83:1f:dd:85:e0:64:c1:c0:ff:bc:9b:57:
23:cc:d6:1a:46:a0:87:04:3b:77:b3:75:77:57:43:
2a:a1:b8:18:d2:3d:f7:d0:e4:2a:e1:33:b5:f3:44:
6b:66:3f:2a:ad:fa:4c:18:d5:76:4a:a9:0e:58:c6:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:84:7A:FB:CC:F0:EA:37:8E:F7:BA:E1:C1:E9:72:42:67:ED:CB:69
X509v3 Authority Key Identifier:
keyid:62:0F:C0:DB:62:F1:48:0A:C8:CF:9B:22:F3:88:5A:9A:42:68:09:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/620FC0DB62F1480AC8CF9B22F3885A9A4268099E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/1/34352e3137302e3134342e302f32322d3234203d3e20323638313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:91:4e:c6:a0:d2:40:63:59:06:e5:ea:f8:33:a0:e0:cf:cf:
35:a6:a8:9a:91:fe:50:df:26:62:75:59:80:60:89:ac:64:30:
d0:6b:75:80:8c:1a:68:b8:81:f3:e0:f9:1e:00:4b:c1:fa:f6:
71:1e:a5:62:c0:f3:b8:2e:af:c2:ea:4e:58:16:d8:b9:2b:a8:
1c:52:3e:e0:41:28:d2:b2:4b:ac:78:f8:f3:81:7f:6c:88:6f:
77:aa:a4:14:1c:7e:e6:d4:fa:40:bc:3e:bb:54:40:b0:7d:20:
ab:17:6e:31:88:ed:51:f6:b0:b8:e4:97:50:07:1d:c4:18:81:
95:2c:fe:ec:ca:6e:36:9b:df:1f:a1:9c:57:36:61:82:ef:99:
dc:9e:35:83:96:1c:62:34:29:a1:dc:ba:eb:3b:af:25:69:19:
f1:6a:ab:08:71:c1:2a:67:1d:fd:1f:37:1d:f2:e5:8a:5c:7c:
6d:26:35:b3:d4:16:66:af:bd:f9:6f:73:55:37:0d:be:c4:d1:
aa:fb:01:27:6b:7a:11:5b:1c:2d:51:2a:f0:aa:76:0d:59:93:
ca:24:34:ac:c2:6c:09:b7:21:f4:89:de:b2:44:58:8e:44:d2:
9f:50:0c:c2:d6:45:15:b1:e3:3e:d6:2f:ac:7d:c6:83:6a:1a:
52:b0:f7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:38:33 2025 by rpki-client