Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32322d3232203d3e20323639333931.roa
File: 34352e3138352e3137322e302f32322d3232203d3e20323639333931.roa (raw, json)
Hash identifier: 4xKyw0xgppVnq/IBbgm3RDUWYC222rs2esTq3OPU014=
Subject key identifier: F0:F0:9C:2E:D8:B9:B1:38:E3:B3:24:3A:0B:C8:88:57:98:E6:85:45
Certificate issuer: /CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
Certificate serial: 70255A6D7EAAAC04AC35CD4B01E5A528B4FFD6B0
Authority key identifier: 5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32322d3232203d3e20323639333931.roa
Signing time: Mon 15 May 2023 16:11:09 +0000
ROA not before: Mon 15 May 2023 16:06:09 +0000
ROA not after: Mon 13 May 2024 16:11:09 +0000
asID: 269391
IP address blocks: 45.185.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:25:5a:6d:7e:aa:ac:04:ac:35:cd:4b:01:e5:a5:28:b4:ff:d6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9
Validity
Not Before: May 15 16:06:09 2023 GMT
Not After : May 13 16:11:09 2024 GMT
Subject: CN=F0F09C2ED8B9B138E3B3243A0BC8885798E68545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:df:a7:ea:f8:8c:f4:86:90:ef:2b:0e:54:
3b:13:90:f6:cb:50:28:2c:30:00:9e:ae:52:db:5a:
73:ce:00:7c:42:6a:4a:2c:24:21:e3:e2:85:fe:96:
98:00:ac:03:ac:5b:f1:9b:4e:f4:5e:24:e6:c7:21:
e4:49:15:a5:cf:4a:72:cc:f9:73:7d:79:d5:c0:ed:
c0:3c:9f:f7:b7:0c:1c:cd:0c:bf:49:43:49:2a:ae:
97:10:71:f9:cb:b8:57:f4:1d:00:66:e8:55:a3:77:
93:f2:60:f7:7a:03:e4:bc:69:e4:70:9e:e1:0e:4e:
33:83:c2:39:ca:e9:c1:f4:09:b2:dc:8f:0d:eb:89:
64:45:30:e0:2a:9d:4c:09:b9:f1:d9:e5:9d:93:3b:
4a:cd:e9:56:35:65:62:6a:4a:7a:fa:5e:93:d1:92:
4c:7c:3d:be:e8:87:95:e3:40:d2:ef:83:f1:df:54:
b5:2b:e2:d0:d3:52:a8:23:e3:77:b1:c6:be:63:4d:
0a:30:45:59:e9:67:82:fd:fd:46:a0:70:37:36:ca:
77:5a:1a:dc:fc:62:05:ae:8f:75:10:4f:c2:41:a4:
30:35:0c:e5:7f:12:e8:e1:5a:90:be:e1:22:27:36:
5d:57:4e:b9:4c:3a:c7:2b:bf:cc:e6:5c:61:1f:1e:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F0:9C:2E:D8:B9:B1:38:E3:B3:24:3A:0B:C8:88:57:98:E6:85:45
X509v3 Authority Key Identifier:
keyid:5E:CF:CC:A7:2C:07:7D:A2:71:78:AF:AC:08:44:B3:A0:6F:72:C7:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5ECFCCA72C077DA27178AFAC0844B3A06F72C7F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8cbJyQKPVdsajinWbr9HQTShvgBrnq6okkzWxWrxuoX/0/34352e3138352e3137322e302f32322d3232203d3e20323639333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.172.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:8b:71:31:9c:fe:83:ae:41:10:84:5c:2e:4c:64:03:3b:80:
c8:b2:e6:8c:e4:d0:ac:03:1d:59:c6:6c:ab:e4:50:3b:bc:be:
29:fa:c4:4c:6d:2e:c0:e6:0a:0f:42:f6:50:41:23:77:fd:47:
49:26:05:2b:31:fb:a0:e3:c2:34:16:3f:5a:18:04:02:9e:8b:
40:cf:c5:3a:8b:c0:50:ca:ce:70:41:bb:7a:c0:1e:5d:7d:51:
56:46:ae:fb:87:57:d4:d1:2c:75:20:ed:cb:87:07:3c:c1:14:
0c:89:1a:c8:d9:86:c4:44:5b:6c:5b:b7:e4:60:85:9a:63:d4:
66:e7:83:04:7d:1d:b7:57:4a:20:03:49:99:ec:0e:c0:c2:f6:
a9:06:b3:28:93:9c:2e:5f:15:25:1d:ce:5a:11:e0:65:9c:90:
04:be:54:34:94:e8:22:6f:1a:2a:d8:fa:00:1c:28:e6:19:4b:
a6:01:f6:39:ec:00:9d:17:7f:fc:c2:f4:fb:a8:48:1a:0c:8f:
d0:dc:a9:b1:38:d5:27:39:e5:ff:02:0b:2c:f5:5f:80:af:f3:
92:95:ee:d9:2e:64:f1:98:56:88:1b:05:00:52:f8:cf:d5:46:
75:40:ef:cf:0b:ea:dc:01:33:c7:18:b6:c5:2d:5f:52:31:a3:
11:bf:d7:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcCVabX6qrASsNc1LAeWlKLT/1rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVDRkNDQTcyQzA3N0RBMjcxNzhBRkFDMDg0NEIzQTA2
RjcyQzdGOTAeFw0yMzA1MTUxNjA2MDlaFw0yNDA1MTMxNjExMDlaMDMxMTAvBgNV
BAMTKEYwRjA5QzJFRDhCOUIxMzhFM0IzMjQzQTBCQzg4ODU3OThFNjg1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUN+n6viM9IaQ7ysOVDsTkPbL
UCgsMACerlLbWnPOAHxCakosJCHj4oX+lpgArAOsW/GbTvReJObHIeRJFaXPSnLM
+XN9edXA7cA8n/e3DBzNDL9JQ0kqrpcQcfnLuFf0HQBm6FWjd5PyYPd6A+S8aeRw
nuEOTjODwjnK6cH0CbLcjw3riWRFMOAqnUwJufHZ5Z2TO0rN6VY1ZWJqSnr6XpPR
kkx8Pb7oh5XjQNLvg/HfVLUr4tDTUqgj43exxr5jTQowRVnpZ4L9/UagcDc2ynda
Gtz8YgWuj3UQT8JBpDA1DOV/EujhWpC+4SInNl1XTrlMOscrv8zmXGEfHpAXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8PCcLti5sTjjsyQ6C8iIV5jmhUUwHwYDVR0j
BBgwFoAUXs/MpywHfaJxeK+sCESzoG9yx/kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhjYkp5UUtQVmRzYWppbldicjlIUVRTaHZnQnJucTZva2t6V3hXcnh1
b1gvMC81RUNGQ0NBNzJDMDc3REEyNzE3OEFGQUMwODQ0QjNBMDZGNzJDN0Y5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVFQ0ZDQ0E3MkMwNzdEQTI3
MTc4QUZBQzA4NDRCM0EwNkY3MkM3RjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4Y2JKeVFLUFZkc2FqaW5XYnI5SFFUU2h2Z0JybnE2b2treld4V3J4dW9YLzAv
MzQzNTJlMzEzODM1MmUzMTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMzM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuawwDQYJKoZIhvcNAQELBQADggEBAKeLcTGc
/oOuQRCEXC5MZAM7gMiy5ozk0KwDHVnGbKvkUDu8vin6xExtLsDmCg9C9lBBI3f9
R0kmBSsx+6DjwjQWP1oYBAKei0DPxTqLwFDKznBBu3rAHl19UVZGrvuHV9TRLHUg
7cuHBzzBFAyJGsjZhsREW2xbt+RghZpj1GbngwR9HbdXSiADSZnsDsDC9qkGsyiT
nC5fFSUdzloR4GWckAS+VDSU6CJvGirY+gAcKOYZS6YB9jnsAJ0Xf/zC9PuoSBoM
j9DcqbE41Sc55f8CCyz1X4Cv85KV7tkuZPGYVogbBQBS+M/VRnVA788L6twBM8cY
tsUtX1IxoxG/104=
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:35:29 2025 by rpki-client