Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32352d3235203d3e203631353839.roa
File: 34352e3233302e3130382e302f32352d3235203d3e203631353839.roa (raw, json)
Hash identifier: K2nL3iXj5I/UIRuRhdNDGALFg91mluMBYn0L/V7zaZs=
Subject key identifier: 49:68:5F:41:D0:65:C3:99:0C:91:1C:67:BD:66:48:CB:F1:09:1E:89
Certificate issuer: /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial: 18C727716BCAFC6854ED17245097A85BEB43F3EC
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32352d3235203d3e203631353839.roa
Signing time: Wed 10 Jan 2024 13:02:41 +0000
ROA not before: Wed 10 Jan 2024 12:57:41 +0000
ROA not after: Wed 08 Jan 2025 13:02:41 +0000
asID: 61589
IP address blocks: 45.230.108.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c7:27:71:6b:ca:fc:68:54:ed:17:24:50:97:a8:5b:eb:43:f3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Validity
Not Before: Jan 10 12:57:41 2024 GMT
Not After : Jan 8 13:02:41 2025 GMT
Subject: CN=49685F41D065C3990C911C67BD6648CBF1091E89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:e6:11:01:af:2b:16:66:f2:8d:53:b1:ac:
cd:e7:bb:79:2c:b5:39:9e:d0:a0:4e:bb:20:b8:e4:
b8:c6:9e:54:9d:77:ee:2f:9b:14:10:34:f6:2d:cd:
eb:2a:58:c3:90:e6:dc:92:4f:e7:99:83:af:79:9d:
96:41:be:83:7c:93:58:5f:5f:0a:3b:9c:69:3f:ff:
ab:12:40:c6:3f:fd:ed:51:43:9e:d6:67:c8:2d:99:
d7:a4:e3:98:05:3f:a0:4d:1d:bf:8c:fe:02:ec:a1:
ca:d1:c0:2c:83:17:0d:e9:c4:d8:16:9a:d8:9c:f8:
cb:7e:a6:ea:8a:b0:ea:80:0e:98:fe:a8:27:82:6c:
42:95:0f:9c:fb:26:7e:8f:f3:89:90:82:73:08:c2:
1d:ab:2c:0e:bf:7b:65:e3:6f:07:51:0a:3a:94:38:
48:9d:4e:de:9c:29:d6:8c:d7:41:1a:6e:15:ba:3d:
9a:d5:51:0c:83:60:6a:87:c1:59:36:8b:25:53:41:
82:9b:7e:a9:6f:f1:2e:54:72:35:8e:01:5d:96:cf:
19:51:63:ab:ea:1b:93:85:4b:8d:da:38:3a:8f:c6:
47:f8:60:08:3b:84:73:69:82:10:fe:d8:f4:cb:07:
5f:61:d0:36:4e:57:ad:69:9e:3e:9a:9e:3e:1f:fd:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:68:5F:41:D0:65:C3:99:0C:91:1C:67:BD:66:48:CB:F1:09:1E:89
X509v3 Authority Key Identifier:
keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3130382e302f32352d3235203d3e203631353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.108.0/25
Signature Algorithm: sha256WithRSAEncryption
07:97:65:0b:7f:07:ad:c1:83:3a:15:30:79:b2:05:37:35:01:
80:bd:ed:63:2b:64:c3:64:7e:8b:3a:02:cd:d4:83:80:3c:49:
1b:cc:c9:fd:a4:b6:74:39:a3:a7:7c:43:a3:56:19:72:9a:5c:
13:f8:6a:ef:ba:97:ac:42:cb:df:b5:21:3b:4b:cb:67:39:3e:
3d:95:b7:c4:d9:ca:00:21:26:ff:1a:73:56:0d:a3:83:b2:ec:
5d:dc:4b:47:05:43:ff:7c:66:fa:ca:62:4f:96:78:1c:11:6c:
9b:42:60:9b:d8:a2:e7:30:b3:8b:ef:17:bf:0a:5d:08:3f:51:
21:1e:a7:01:cf:eb:c8:21:cc:6c:19:7e:bd:bb:63:ff:34:97:
8f:3b:12:3c:4d:53:98:b1:6c:eb:93:7d:c1:ae:40:b4:03:b2:
2e:f5:62:8b:57:d5:ac:87:e2:bc:4b:3e:b4:5d:4d:fb:06:74:
4d:01:21:cd:c1:ad:a6:67:23:8f:15:f2:1e:f4:4e:8e:96:b4:
63:a5:13:60:6b:4e:86:c9:a1:15:82:05:88:0a:cc:0a:de:9d:
05:06:02:95:1a:b9:8d:f0:28:b5:61:3e:6f:55:bb:2f:b7:6a:
96:d2:1b:6a:e3:ba:e9:85:b2:ad:93:6c:ab:6f:f3:80:3d:7e:
49:bd:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:18 2025 by rpki-client