Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/34352e3137302e3230382e302f32332d3233203d3e20323638313730.roa
File: 34352e3137302e3230382e302f32332d3233203d3e20323638313730.roa (raw, json)
Hash identifier: letxp2YzpH1/m0ClUwQutE6PBKsJf3kknDmVV2xXueE=
Subject key identifier: C8:E4:C7:45:DF:9C:60:5D:F6:7F:CA:FF:76:1F:41:7A:89:FD:E5:A2
Certificate issuer: /CN=7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D
Certificate serial: 386E193DB13279E5A706D9ED3369A3365F3858C8
Authority key identifier: 7A:8A:52:E1:0C:E2:8F:02:16:87:2E:59:AD:50:CA:6A:E4:BC:4A:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/34352e3137302e3230382e302f32332d3233203d3e20323638313730.roa
Signing time: Tue 10 Jan 2023 00:21:55 +0000
ROA not before: Tue 10 Jan 2023 00:16:55 +0000
ROA not after: Tue 09 Jan 2024 00:21:55 +0000
asID: 268170
IP address blocks: 45.170.208.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:6e:19:3d:b1:32:79:e5:a7:06:d9:ed:33:69:a3:36:5f:38:58:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D
Validity
Not Before: Jan 10 00:16:55 2023 GMT
Not After : Jan 9 00:21:55 2024 GMT
Subject: CN=C8E4C745DF9C605DF67FCAFF761F417A89FDE5A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:de:cc:09:68:99:5b:42:9c:4e:15:26:ee:
4a:76:23:5b:8f:2d:cb:02:e3:a7:56:6f:42:9e:6c:
bf:eb:19:2c:c7:db:e2:6a:3a:81:24:a9:1b:8e:fc:
e9:7d:b8:a2:48:7f:f7:4d:da:01:30:79:8e:49:ed:
ed:cb:30:f1:a1:00:dd:d6:0b:d9:7b:6b:e7:4b:0a:
20:6e:17:f3:04:d3:29:32:08:32:58:48:4f:2d:fb:
eb:00:c7:83:2b:1e:f6:90:3a:ef:f2:d0:44:d7:b7:
96:75:d6:d5:43:8d:c9:68:7d:d4:b9:93:6e:30:fe:
33:69:86:d5:7b:73:3e:3b:23:bf:a8:52:e3:c7:8a:
2e:8e:36:54:76:35:b3:f3:6a:4c:da:03:a8:30:c8:
70:82:ed:ca:df:58:04:27:bb:f9:2c:1c:a6:ba:80:
db:81:10:52:27:a3:0b:91:3d:10:e7:71:89:44:b6:
5a:99:f4:fd:17:8a:da:63:ed:32:da:b8:b4:83:b0:
14:8e:25:e3:b8:28:fd:40:5a:ec:ac:07:9b:7a:a8:
b9:b3:d0:30:b7:2e:a1:70:d9:96:88:dd:68:57:91:
69:73:77:e0:f8:6a:ca:fe:2d:59:50:cd:08:28:3f:
00:d0:75:33:08:5a:22:37:21:d0:3b:0c:67:2e:a0:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E4:C7:45:DF:9C:60:5D:F6:7F:CA:FF:76:1F:41:7A:89:FD:E5:A2
X509v3 Authority Key Identifier:
keyid:7A:8A:52:E1:0C:E2:8F:02:16:87:2E:59:AD:50:CA:6A:E4:BC:4A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/34352e3137302e3230382e302f32332d3233203d3e20323638313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.208.0/23
Signature Algorithm: sha256WithRSAEncryption
16:30:f4:46:7b:90:7b:36:2d:7a:6d:68:4d:62:a4:40:58:8f:
86:3d:0d:c4:0a:9f:40:77:a9:04:b2:1e:8b:8a:56:b2:f4:62:
04:8a:a6:86:5f:bd:93:f4:e3:75:bf:42:4d:63:0f:9b:df:d7:
74:35:8f:4f:ef:d6:12:7e:2b:a0:86:25:e0:d4:fd:52:67:2d:
04:0d:bd:cf:52:9a:90:dc:b6:f2:f1:06:af:0f:f7:b0:b3:17:
ee:65:90:6c:31:d7:0c:eb:2b:c3:e9:16:d0:64:09:43:d4:ed:
3c:c4:74:b2:f1:5c:6c:2e:1a:e0:7d:74:ed:79:34:7c:55:be:
f2:d0:91:06:70:ee:43:1a:fc:4d:cf:fb:9a:ac:b0:a2:3f:a1:
ef:75:f8:0a:38:9b:f9:74:c5:f8:18:2a:71:c5:7b:f6:60:a0:
d4:64:c3:bd:7d:93:6a:c0:89:a9:64:60:bc:66:fd:e0:d3:ad:
48:b7:ba:42:60:38:1a:26:0c:76:47:27:79:33:92:50:35:47:
bb:0e:cd:26:55:d5:78:a1:36:4f:a4:7d:18:7c:21:6e:62:08:
73:a8:f5:a6:8b:a9:b7:a5:40:b7:d2:9d:07:f5:f4:c6:7d:4c:
6c:18:2d:2d:d0:9b:58:7d:c0:0b:59:20:00:4d:b0:9f:70:b5:
25:5a:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:31 2025 by rpki-client