Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/34352e37312e3232302e302f32322d3234203d3e20323637363433.roa
File: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (raw, json)
Hash identifier: pQ54n2s1PFTCrnFfzYXbZZsqU2CUDg+UUV2L4Qqfcl4=
Subject key identifier: C6:B7:87:39:25:B0:0B:69:CB:81:E6:6D:6C:20:CD:2C:43:F1:6F:74
Certificate issuer: /CN=8A60A1D51D94FF013FFF7A8A96E75406CB8D4354
Certificate serial: 0325E4F3373D44C56D2670BA0C300DFCE9FF88FC
Authority key identifier: 8A:60:A1:D5:1D:94:FF:01:3F:FF:7A:8A:96:E7:54:06:CB:8D:43:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/34352e37312e3232302e302f32322d3234203d3e20323637363433.roa
Signing time: Thu 10 Aug 2023 11:52:52 +0000
ROA not before: Thu 10 Aug 2023 11:47:52 +0000
ROA not after: Thu 08 Aug 2024 11:52:52 +0000
asID: 267643
IP address blocks: 45.71.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:25:e4:f3:37:3d:44:c5:6d:26:70:ba:0c:30:0d:fc:e9:ff:88:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A60A1D51D94FF013FFF7A8A96E75406CB8D4354
Validity
Not Before: Aug 10 11:47:52 2023 GMT
Not After : Aug 8 11:52:52 2024 GMT
Subject: CN=C6B7873925B00B69CB81E66D6C20CD2C43F16F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:b6:95:b5:10:36:47:77:08:a3:a9:5e:b4:
d7:6c:6d:bb:24:c7:da:ec:af:46:71:2c:e7:e2:fe:
c5:f0:d5:e0:a3:73:cd:48:f7:d0:36:29:cc:9b:8d:
21:14:fa:4d:ed:3c:d5:5d:ea:78:7d:b6:cb:b7:3c:
0c:94:5e:cc:5d:70:ec:37:99:69:76:29:09:08:da:
ca:2e:da:77:aa:3a:4d:85:e8:21:21:b2:1a:2a:9d:
ff:b3:81:6a:41:62:ea:71:d0:63:9d:19:83:ff:c5:
b2:80:bf:6e:71:ae:a3:b4:62:f2:86:2a:d8:66:f4:
2d:76:37:d9:e5:23:f6:14:e1:85:f1:ac:8b:ee:5f:
88:72:e7:6f:7e:89:c0:bc:5b:c4:cd:2c:63:60:b9:
c3:ca:85:95:88:c2:24:09:12:8a:92:ef:8b:45:48:
e7:e9:dd:8c:99:77:1e:ae:89:11:63:b2:8f:1d:8f:
42:f8:22:7b:ae:dc:e0:a5:b6:ba:c0:e6:ac:79:27:
da:eb:d7:0a:f9:7d:08:ce:84:a9:ae:75:b5:c5:45:
91:b1:fd:98:d1:5b:df:6f:7a:ab:ea:86:30:4e:1f:
e5:fa:16:fc:c4:1c:1d:1c:3a:1d:73:44:34:3d:ff:
26:b5:64:0c:eb:31:81:cb:73:2e:cd:38:f4:b1:08:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B7:87:39:25:B0:0B:69:CB:81:E6:6D:6C:20:CD:2C:43:F1:6F:74
X509v3 Authority Key Identifier:
keyid:8A:60:A1:D5:1D:94:FF:01:3F:FF:7A:8A:96:E7:54:06:CB:8D:43:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A60A1D51D94FF013FFF7A8A96E75406CB8D4354.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/0/34352e37312e3232302e302f32322d3234203d3e20323637363433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:5d:13:d2:1b:ee:11:ad:65:38:cb:50:de:c7:79:a1:eb:b7:
5b:d3:32:d2:14:0e:f0:ab:b0:0c:7d:60:6b:5e:43:38:c8:95:
0a:60:53:7c:c4:f5:c1:7f:34:6c:a0:50:57:82:22:72:0d:38:
e8:b4:02:32:10:e4:bd:45:36:cb:c4:b5:8d:2a:9e:ab:88:15:
a4:b7:fc:fb:1c:61:a5:b7:ce:fd:d8:2c:6b:8b:9e:e0:97:0b:
e4:ab:72:bb:46:63:6f:cf:a1:54:ce:81:f8:02:27:bd:7d:1d:
1d:d5:60:91:e6:d5:03:b3:70:92:f9:95:8f:a9:24:ea:98:f5:
24:f7:8e:2d:4f:0a:20:2a:61:58:f4:c3:99:88:4c:c4:0a:f8:
9a:94:f1:87:16:9d:a9:c8:fe:1e:72:fb:67:86:7b:8a:f6:a6:
8b:60:1f:3c:5e:77:e3:74:e4:58:af:72:25:b6:0f:ac:73:0d:
ed:aa:a9:04:8b:ca:e1:c9:9e:ce:f5:41:a1:92:85:0d:82:33:
7d:8f:22:e4:60:5a:6a:6e:ea:39:18:30:53:08:c6:3f:2f:1d:
8a:1f:bb:1d:b7:cf:8f:0b:33:9a:25:ea:32:dc:03:17:5e:d6:
55:af:61:f9:65:ee:58:86:2e:21:6e:0f:c5:38:ac:6d:1d:f4:
27:70:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:14:27 2025 by rpki-client