Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3232302e302f32322d3232203d3e203533323137.roa
File: 3137372e37302e3232302e302f32322d3232203d3e203533323137.roa (raw, json)
Hash identifier: f7VxkXPU3bpVOFz84BmWyYHBqVa8sRo+9r+W4aRp40s=
Subject key identifier: 20:E2:18:C5:46:8B:C8:9D:5E:E1:AE:35:4E:60:24:C3:D5:C2:75:1C
Certificate issuer: /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial: 524948B4D7148CF47B623E97E9A7045FB9481918
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3232302e302f32322d3232203d3e203533323137.roa
Signing time: Sun 28 Jul 2024 18:53:51 +0000
ROA not before: Sun 28 Jul 2024 18:48:51 +0000
ROA not after: Sun 27 Jul 2025 18:53:51 +0000
asID: 53217
IP address blocks: 177.70.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:49:48:b4:d7:14:8c:f4:7b:62:3e:97:e9:a7:04:5f:b9:48:19:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Validity
Not Before: Jul 28 18:48:51 2024 GMT
Not After : Jul 27 18:53:51 2025 GMT
Subject: CN=20E218C5468BC89D5EE1AE354E6024C3D5C2751C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:b9:05:39:6e:ec:e3:c5:18:fd:e7:b3:a2:
87:fa:60:3e:a8:d7:4c:9d:98:12:3f:0f:1c:eb:22:
3c:0c:96:2a:a5:14:48:3f:07:ab:85:6d:80:43:b5:
c6:f6:07:ec:b1:d5:c4:fd:f7:22:c2:1e:a7:2c:bf:
85:52:50:5f:40:a2:a3:d8:8d:b8:6a:85:1a:4a:77:
06:ef:dc:ba:4b:2b:43:39:46:69:d5:a6:30:a3:88:
a8:aa:4a:05:a1:a5:14:b0:a5:29:2b:62:7e:6b:9c:
54:8c:3f:9a:d5:d8:e3:bd:89:32:37:9a:e6:59:b5:
56:ff:23:0a:67:08:d4:f4:fa:ff:b0:49:91:d9:c2:
a9:f7:0c:14:05:61:95:3c:1b:54:f5:ff:66:b4:db:
20:f8:2e:73:d3:c5:99:b8:b0:1c:98:26:ae:df:44:
32:33:9f:7a:b3:da:09:88:48:5e:b3:c0:77:25:97:
dd:c6:56:57:7a:e8:ee:0f:68:46:84:fe:cb:0f:32:
37:a2:c9:ad:31:80:6d:67:32:34:56:d8:f4:5a:75:
7f:1f:a5:69:fb:80:7f:ee:2c:f9:60:30:20:51:cc:
29:19:c8:1d:fd:fe:c5:ef:18:35:e1:3c:85:d5:1b:
ea:ea:b5:47:c4:1a:50:20:2a:70:29:37:c1:62:92:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:18:C5:46:8B:C8:9D:5E:E1:AE:35:4E:60:24:C3:D5:C2:75:1C
X509v3 Authority Key Identifier:
keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/3137372e37302e3232302e302f32322d3232203d3e203533323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.70.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:83:b4:26:9d:fc:c0:91:3a:04:bf:bf:70:c0:41:e6:bf:f2:
99:22:3a:0a:b8:89:b4:a6:c2:79:92:6a:83:57:76:d3:d5:63:
dd:d9:b3:bf:50:5d:43:32:97:e0:bb:2c:3c:30:e8:de:4f:fa:
b6:94:d0:de:e7:74:63:e5:b5:19:df:cd:05:b6:c7:02:13:08:
43:71:89:65:62:ec:ef:08:47:c1:a4:4f:6a:2b:b2:87:16:f4:
e0:09:09:c6:45:d5:0f:c3:65:4e:c4:54:40:bf:7e:30:e4:17:
bf:51:b5:d3:25:bc:c3:2f:19:7f:2f:89:ec:6a:80:54:62:89:
c0:7e:f1:e4:67:e0:ff:36:35:f4:92:e2:03:af:83:b2:96:6a:
9e:11:b0:74:54:62:a2:5b:a5:e2:0c:88:c4:5b:46:66:82:81:
3e:5d:28:07:3b:bf:b6:ed:b1:5b:c3:c5:b7:a0:e7:ac:82:0b:
30:4b:18:0e:ce:b1:21:bb:a4:96:75:d9:72:37:98:37:ec:bb:
3f:79:cb:10:c1:9c:d1:4c:50:f5:34:37:a7:c4:9f:d5:18:42:
f5:16:aa:cc:08:b0:f2:19:a8:eb:b3:ff:dc:04:fd:60:65:c7:
29:f4:44:8d:3c:43:c8:e0:9b:68:35:e5:79:82:f4:e7:95:34:
07:0b:17:9d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUklItNcUjPR7Yj6X6acEX7lIGRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIwQkQwNkZCMkQwNkY3NDdDNUIyNkZGRkI5RDdCQzgy
QUI4Nzc0NDAeFw0yNDA3MjgxODQ4NTFaFw0yNTA3MjcxODUzNTFaMDMxMTAvBgNV
BAMTKDIwRTIxOEM1NDY4QkM4OUQ1RUUxQUUzNTRFNjAyNEMzRDVDMjc1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLI7kFOW7s48UY/eezoof6YD6o
10ydmBI/DxzrIjwMliqlFEg/B6uFbYBDtcb2B+yx1cT99yLCHqcsv4VSUF9AoqPY
jbhqhRpKdwbv3LpLK0M5RmnVpjCjiKiqSgWhpRSwpSkrYn5rnFSMP5rV2OO9iTI3
muZZtVb/IwpnCNT0+v+wSZHZwqn3DBQFYZU8G1T1/2a02yD4LnPTxZm4sByYJq7f
RDIzn3qz2gmISF6zwHcll93GVld66O4PaEaE/ssPMjeiya0xgG1nMjRW2PRadX8f
pWn7gH/uLPlgMCBRzCkZyB39/sXvGDXhPIXVG+rqtUfEGlAgKnApN8FikhDTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIOIYxUaLyJ1e4a41TmAkw9XCdRwwHwYDVR0j
BBgwFoAUUgvQb7LQb3R8Wyb/+517yCq4d0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEFHY2ZyUXlvWm5iaHJKZ1h1TE1QeGJxQnJ3S3RSOWVNVjRYdWVidmFN
NjUvMC81MjBCRDA2RkIyRDA2Rjc0N0M1QjI2RkZGQjlEN0JDODJBQjg3NzQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyMEJEMDZGQjJEMDZGNzQ3
QzVCMjZGRkZCOUQ3QkM4MkFCODc3NDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hBR2NmclF5b1puYmhySmdYdUxNUHhicUJyd0t0UjllTVY0WHVlYnZhTTY1LzAv
MzEzNzM3MmUzNzMwMmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMz
MzIzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUbcMA0GCSqGSIb3DQEBCwUAA4IBAQBLg7QmnfzA
kToEv79wwEHmv/KZIjoKuIm0psJ5kmqDV3bT1WPd2bO/UF1DMpfguyw8MOjeT/q2
lNDe53Rj5bUZ380FtscCEwhDcYllYuzvCEfBpE9qK7KHFvTgCQnGRdUPw2VOxFRA
v34w5Be/UbXTJbzDLxl/L4nsaoBUYonAfvHkZ+D/NjX0kuIDr4OylmqeEbB0VGKi
W6XiDIjEW0ZmgoE+XSgHO7+27bFbw8W3oOesggswSxgOzrEhu6SWddlyN5g37Ls/
ecsQwZzRTFD1NDenxJ/VGEL1FqrMCLDyGajrs//cBP1gZccp9ESNPEPI4JtoNeV5
gvTnlTQHCxed
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:54:13 2025 by rpki-client