Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e37302e36302e302f32322d3234203d3e20323637353532.roa
File: 34352e37302e36302e302f32322d3234203d3e20323637353532.roa (raw, json)
Hash identifier: 9+dxFBSBgOA9skyX9fynrwKJTCfM2j2ptnSEpqNE+QI=
Subject key identifier: 82:F1:80:DA:75:85:1F:44:D4:94:17:6C:6D:CF:BF:4C:65:08:41:46
Certificate issuer: /CN=860668C5CBAB1C59B308B18605B1B2A88FAB05F1
Certificate serial: 62624B0C41C0F49236C57F320056F0FD105CC9D4
Authority key identifier: 86:06:68:C5:CB:AB:1C:59:B3:08:B1:86:05:B1:B2:A8:8F:AB:05:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e37302e36302e302f32322d3234203d3e20323637353532.roa
Signing time: Fri 24 Jan 2025 12:34:53 +0000
ROA not before: Fri 24 Jan 2025 12:29:53 +0000
ROA not after: Fri 23 Jan 2026 12:34:53 +0000
asID: 267552
IP address blocks: 45.70.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:62:4b:0c:41:c0:f4:92:36:c5:7f:32:00:56:f0:fd:10:5c:c9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860668C5CBAB1C59B308B18605B1B2A88FAB05F1
Validity
Not Before: Jan 24 12:29:53 2025 GMT
Not After : Jan 23 12:34:53 2026 GMT
Subject: CN=82F180DA75851F44D494176C6DCFBF4C65084146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:a7:38:1f:a2:f5:83:b8:88:1f:f5:80:c8:
42:a1:70:8d:7b:41:0d:7e:00:44:72:ba:ba:fe:16:
65:7f:1a:f1:69:37:3e:04:bc:1f:33:e3:8c:f9:3e:
48:94:de:ab:2c:bd:a1:71:74:c7:bb:7d:95:61:3f:
c0:76:33:e3:de:41:0a:6e:15:13:10:56:99:bd:4a:
ec:31:21:e6:ff:cf:40:64:d7:ae:40:be:a8:2f:19:
86:95:dc:cb:e2:69:d0:1e:67:40:ed:99:15:88:e3:
cc:da:04:0a:9d:b8:28:ab:d1:c8:f0:29:e6:a8:7e:
69:e5:64:f2:c7:8c:aa:8d:99:26:26:33:08:0a:d6:
d7:a0:3a:a5:b7:70:dd:b2:98:5b:e7:d1:16:f0:8a:
d3:f1:5e:0a:a5:08:8a:27:64:01:55:5a:5d:20:e9:
e8:5c:23:70:5d:96:85:f0:91:72:96:db:4e:56:ab:
ad:e4:4b:73:62:f6:11:9a:41:e7:44:da:a9:9f:0a:
1a:57:c3:d9:90:ab:b5:c2:46:ee:8d:a3:5a:2e:7a:
f5:6b:fc:db:73:2e:e3:59:bf:b5:54:3c:22:c5:7c:
09:eb:9e:9a:52:37:35:7d:be:a6:22:91:1e:89:7b:
fc:12:e4:29:dd:7b:52:0e:5b:05:d1:67:d5:3d:59:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F1:80:DA:75:85:1F:44:D4:94:17:6C:6D:CF:BF:4C:65:08:41:46
X509v3 Authority Key Identifier:
keyid:86:06:68:C5:CB:AB:1C:59:B3:08:B1:86:05:B1:B2:A8:8F:AB:05:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/860668C5CBAB1C59B308B18605B1B2A88FAB05F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/34352e37302e36302e302f32322d3234203d3e20323637353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:5a:87:70:72:a7:31:9e:dc:2f:da:0f:0d:a9:20:89:f7:4f:
71:55:88:23:de:75:13:2f:78:32:f9:73:6c:91:c3:aa:3e:98:
e8:7b:04:98:89:0a:a6:43:ce:d4:2d:1a:05:cf:13:f5:c8:12:
41:95:07:b0:fa:46:11:7a:ef:e1:99:36:df:71:be:7a:8a:6d:
ac:7c:ce:7a:5f:3d:6e:86:70:ff:8e:f9:24:d0:3e:ac:79:06:
da:38:7f:8c:07:71:d8:65:5d:c2:7f:9c:eb:0d:46:aa:58:e5:
4f:a8:1e:22:86:85:05:c2:f7:64:92:23:ef:c4:97:95:56:8b:
d3:b4:26:2d:ee:07:37:42:24:99:d8:02:e4:a2:3c:11:cd:d6:
72:d6:32:36:03:67:bf:de:d8:1b:f7:b7:be:be:26:c5:8d:31:
90:ef:c5:a7:40:64:8e:03:4b:21:19:01:d6:82:c1:be:26:61:
4f:b2:7c:fa:b5:20:de:b4:76:47:1e:45:4b:4c:cf:ad:fa:8a:
9e:82:82:3d:24:72:0b:f1:24:37:48:57:79:04:2d:e3:0e:b6:
74:32:f2:ed:bd:01:77:b7:09:7a:ae:6b:17:51:81:45:86:45:
31:f6:87:95:a4:25:63:fa:78:41:ab:56:40:21:cf:69:38:14:
98:ff:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:25:00 2025 by rpki-client