Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3131302e302f32332d3233203d3e203631353839.roa
File: 34352e3233302e3131302e302f32332d3233203d3e203631353839.roa (raw, json)
Hash identifier: w92IuVAPg20JbZd0brF1kiGQnmnfraw6PgJTYueVRHs=
Subject key identifier: 35:4B:D1:67:E7:BD:6B:F2:20:0F:58:6D:CE:D4:FC:94:FD:E6:45:63
Certificate issuer: /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial: 0172C963D1E7CAB454495864D3A460AC7A5BEBE0
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3131302e302f32332d3233203d3e203631353839.roa
Signing time: Mon 24 Apr 2023 11:54:03 +0000
ROA not before: Mon 24 Apr 2023 11:49:03 +0000
ROA not after: Mon 22 Apr 2024 11:54:03 +0000
asID: 61589
IP address blocks: 45.230.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:72:c9:63:d1:e7:ca:b4:54:49:58:64:d3:a4:60:ac:7a:5b:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Validity
Not Before: Apr 24 11:49:03 2023 GMT
Not After : Apr 22 11:54:03 2024 GMT
Subject: CN=354BD167E7BD6BF2200F586DCED4FC94FDE64563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:98:4f:e6:63:64:ff:ac:bc:1a:78:19:f0:
03:e6:41:ef:4b:1f:0a:89:e9:bd:41:3e:e5:7a:54:
c1:ef:b7:f6:a8:24:1d:57:03:76:77:ee:93:4b:83:
34:96:25:ea:f1:92:f2:9c:23:c7:ca:96:65:e9:b9:
f6:8f:24:8b:82:78:bb:8f:15:24:f1:6f:39:ce:7a:
80:87:82:2d:b1:00:b9:b1:6c:9e:7f:17:6e:a7:ff:
bf:24:75:1d:54:4c:a5:6f:c0:8e:16:44:c6:c7:f6:
5b:d7:e2:f9:21:e1:9e:87:55:06:0c:7c:99:90:65:
86:8d:d9:9a:71:f3:d4:97:af:60:e8:5f:de:0d:34:
0c:a1:67:2c:95:da:13:7b:91:00:ac:af:fb:be:7f:
32:d3:21:6d:71:e3:44:ba:fc:c3:ab:e1:c5:0d:31:
37:a7:fe:c5:50:ba:5e:84:cd:b6:09:1b:5a:61:0c:
3b:76:9c:ed:3d:61:bf:45:c9:5e:7a:87:a2:a2:32:
d6:fb:61:e0:a8:af:51:d0:df:bb:da:7c:cd:07:56:
21:da:5e:12:43:81:52:83:e6:7c:74:bc:5d:78:e7:
27:e2:9c:a1:67:30:33:23:e3:0a:27:0e:c5:09:e7:
93:aa:5e:90:14:20:cd:f6:46:0d:1f:cb:f1:44:bb:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4B:D1:67:E7:BD:6B:F2:20:0F:58:6D:CE:D4:FC:94:FD:E6:45:63
X509v3 Authority Key Identifier:
keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/34352e3233302e3131302e302f32332d3233203d3e203631353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.110.0/23
Signature Algorithm: sha256WithRSAEncryption
e3:c0:52:14:23:f5:a5:97:60:e3:86:8e:9d:19:57:11:5c:3a:
50:aa:3b:48:47:5d:cb:bf:cc:b1:75:8c:a8:13:de:9e:17:aa:
dd:de:61:c3:97:ec:eb:db:43:43:88:4b:4d:01:72:49:00:f1:
08:93:d7:d8:95:02:a5:78:dc:1a:f7:f4:11:ff:0b:b8:2f:f8:
f2:fc:63:50:b2:7c:8b:a6:1b:51:91:74:63:b0:f8:ed:56:97:
17:5a:33:83:c0:d8:27:15:db:8e:ea:0f:6d:ea:b4:b7:77:40:
7f:6b:7d:b8:67:6c:c9:4c:ed:a2:57:84:16:77:d7:96:d9:de:
c2:70:0c:7c:8d:df:38:75:f3:2f:2e:2f:06:6f:7c:93:ce:1e:
55:e4:f3:90:ca:93:f8:2f:f7:ff:9f:7d:4e:15:98:31:cd:7a:
df:e4:a3:57:1a:a7:cb:5b:25:53:bf:50:9e:e5:5a:6f:92:e2:
8f:93:b0:16:6e:40:82:28:cf:be:01:3d:aa:56:12:6f:83:54:
dc:8b:c8:31:71:ff:3e:cb:eb:dc:e8:37:49:a9:29:c0:70:92:
aa:13:8f:00:11:5a:12:8c:15:13:d9:75:63:29:a7:8d:bc:6a:
9d:31:82:87:1c:23:c5:76:7e:8a:c3:be:92:6a:ad:9d:53:37:
f3:c6:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:59 2024 by rpki-client on console-ams.rpki-client.org