Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa
File: 34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa (raw, json)
Hash identifier: Y9qphqLnZFf8LXiTWveisRC/af4mMwwn/uPz6dMV0GU=
Subject key identifier: AD:EA:3A:8D:42:54:53:ED:F3:DF:F5:2E:6E:FA:81:60:ED:60:F0:23
Certificate issuer: /CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
Certificate serial: 1F8FF9734147B3805B8BAEC3750BE5051FF9702D
Authority key identifier: 1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa
Signing time: Wed 03 Apr 2024 23:44:19 +0000
ROA not before: Wed 03 Apr 2024 23:39:19 +0000
ROA not after: Wed 02 Apr 2025 23:44:19 +0000
asID: 268112
IP address blocks: 45.169.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8f:f9:73:41:47:b3:80:5b:8b:ae:c3:75:0b:e5:05:1f:f9:70:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
Validity
Not Before: Apr 3 23:39:19 2024 GMT
Not After : Apr 2 23:44:19 2025 GMT
Subject: CN=ADEA3A8D425453EDF3DFF52E6EFA8160ED60F023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:47:00:c8:a8:27:00:3e:6d:1c:c5:70:6a:
ed:4f:60:9f:27:d7:09:76:95:dc:d5:34:ce:58:26:
c8:4e:55:86:6d:31:a7:ab:01:d1:09:c9:55:73:b2:
cf:f5:cb:46:f0:c0:69:9e:9a:c6:83:af:a6:b6:c3:
f3:8c:d5:56:66:f9:d0:8d:7e:f8:f6:83:39:4f:76:
97:81:ee:eb:60:c7:c5:75:06:69:57:7c:b2:da:4b:
c7:07:75:90:e5:68:4c:29:e8:a6:00:b8:88:5b:14:
49:8a:04:c5:1d:be:d9:8a:bb:00:b5:28:6d:0b:f8:
3c:00:ec:5c:51:21:ae:fc:19:81:e3:ff:ad:00:86:
3e:05:2e:32:3c:90:38:2c:f6:b0:11:e6:ab:b1:10:
8a:6a:11:0f:79:bf:3c:7c:a2:2a:a7:6e:c4:1d:54:
ab:89:69:6b:28:f3:e0:9a:56:27:3f:07:73:47:82:
36:ba:05:dd:4a:1c:f3:47:a9:35:9b:c8:af:e7:60:
cf:04:44:de:37:cf:dd:de:96:bd:e0:20:ae:ce:33:
36:ad:e8:61:55:57:d9:cf:ca:b4:a6:45:e1:e3:df:
83:5b:ba:eb:2e:2e:c6:17:b7:aa:c2:66:6a:57:68:
e3:2a:d7:66:3c:f9:82:20:63:e2:10:54:f4:c9:23:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EA:3A:8D:42:54:53:ED:F3:DF:F5:2E:6E:FA:81:60:ED:60:F0:23
X509v3 Authority Key Identifier:
keyid:1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/34352e3136392e3132302e302f32322d3332203d3e20323638313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.120.0/22
Signature Algorithm: sha256WithRSAEncryption
23:f3:34:2f:56:60:9b:7b:92:56:9f:fa:b0:81:04:53:a1:c5:
1d:2b:8f:05:29:95:89:78:66:d5:ba:fb:03:fb:68:5a:4a:83:
9d:48:3e:58:27:fb:db:61:13:ca:87:e0:15:b8:cf:cc:91:0b:
68:5f:fa:b6:32:ac:7f:03:bb:ff:ca:58:6c:b9:9a:b9:74:59:
9d:85:4e:39:c9:e6:d7:eb:0a:6d:7c:2e:90:12:5b:f9:61:76:
ec:67:70:44:c3:8b:c9:fc:b7:f0:76:3f:2b:90:67:bc:0c:2a:
13:00:c5:d8:e4:96:14:78:aa:13:44:49:54:65:6b:45:d4:91:
3e:55:77:68:3f:f5:65:48:67:df:a3:4d:b2:08:3c:ab:fa:d8:
dd:a0:e4:8c:be:a1:92:e2:51:f8:38:2c:d7:bd:9c:c6:33:b6:
ce:22:e3:25:47:8e:3e:e5:31:00:56:60:27:f4:96:02:e7:84:
31:f2:5c:ff:93:dc:1b:f1:25:9e:19:95:39:1a:92:26:e4:c7:
ae:1e:0c:25:80:27:03:96:33:58:cd:62:bd:58:53:fb:81:d4:
b5:cf:6f:aa:49:1d:b4:a4:3d:9a:91:39:34:3c:23:fa:f5:44:
49:d9:76:e7:77:0f:26:5e:75:34:59:74:49:5c:d7:61:e6:e7:
cd:9f:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:34:25 2025 by rpki-client