Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32332d3233203d3e2030.roa
File: 34352e3233312e3137322e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: kzyoQ2slq6AnVyYTRGa9wERS6rMveOJdL1UNvadURuY=
Subject key identifier: 86:00:25:A0:9D:00:7E:68:57:84:55:44:FA:91:49:73:FA:DA:36:9C
Certificate issuer: /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial: 749E85AE40893C43DB6328B9E1B64CAB55E6379F
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32332d3233203d3e2030.roa
Signing time: Tue 04 Feb 2025 00:32:05 +0000
ROA not before: Tue 04 Feb 2025 00:27:05 +0000
ROA not after: Tue 03 Feb 2026 00:32:05 +0000
asID: 0
IP address blocks: 45.231.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:9e:85:ae:40:89:3c:43:db:63:28:b9:e1:b6:4c:ab:55:e6:37:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Validity
Not Before: Feb 4 00:27:05 2025 GMT
Not After : Feb 3 00:32:05 2026 GMT
Subject: CN=860025A09D007E6857845544FA914973FADA369C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:ae:cf:69:aa:fb:b3:66:d5:5d:0d:b4:05:
aa:43:f9:39:da:e0:cf:bc:15:cf:27:ea:60:cf:4f:
fa:33:24:03:a1:8b:6a:ac:f5:92:ea:00:ee:3e:f5:
58:d7:6c:f1:87:9c:6b:6c:70:e6:85:b0:3b:ac:2e:
4f:f0:ae:1f:b3:53:f6:46:96:8c:0d:d5:3c:90:98:
51:72:3a:37:42:30:5d:bb:d4:0a:c6:7e:42:b1:9e:
9c:3c:21:66:a0:95:66:8c:76:84:42:b5:42:af:23:
d7:c5:4e:30:2e:3f:9c:15:7e:94:01:1d:a9:e4:4b:
29:3c:d6:f8:45:e5:29:98:22:b0:9a:44:58:11:b5:
f4:e1:82:14:91:4c:0a:9f:a3:e0:9c:53:14:ee:8b:
8b:1a:b6:20:e8:9d:b7:65:0a:41:49:98:57:bf:a2:
7c:92:2b:8a:0a:02:51:78:83:65:f1:14:1a:49:9d:
ea:29:9a:f9:b6:62:da:80:a8:4c:c9:6a:df:8c:11:
40:35:94:40:b4:e3:23:9f:62:0f:be:8d:e8:09:19:
75:64:6e:6a:94:fc:a2:79:94:d3:4c:c0:71:cb:c4:
df:21:03:25:e0:fc:60:e8:6f:32:1f:fa:b3:d3:fc:
f6:c7:c6:b3:f1:cd:12:ab:e8:f3:98:b0:35:a3:00:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:25:A0:9D:00:7E:68:57:84:55:44:FA:91:49:73:FA:DA:36:9C
X509v3 Authority Key Identifier:
keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.172.0/23
Signature Algorithm: sha256WithRSAEncryption
44:aa:f0:3d:cc:d0:80:15:fc:68:26:2e:3d:fc:54:56:b2:43:
0d:61:72:df:51:9e:00:8b:8c:0f:7f:3c:0f:d4:b8:5c:ab:4d:
18:ff:39:4a:87:b7:cb:ef:af:7b:2d:57:03:28:5a:d4:29:9f:
4d:60:28:56:f5:4f:27:66:d4:d4:4e:2c:64:f4:3d:b0:05:e1:
f7:28:de:43:c5:38:d9:66:f1:35:84:63:3b:b4:fb:64:0e:85:
8b:a4:cc:e5:b0:dd:86:a7:c5:0b:c4:19:20:b7:69:f3:a8:da:
6f:a9:d4:e5:91:c1:2d:f0:a3:4a:a0:f2:1b:48:c3:b1:57:d8:
3c:8a:59:78:ca:ab:82:5a:12:22:b4:a2:fd:be:75:f9:67:c6:
23:90:95:43:8d:d7:5e:25:03:06:c0:2d:46:20:5d:2b:7f:44:
25:32:40:84:fc:7c:e6:08:d9:7c:47:70:35:f8:8b:dc:9a:2e:
13:0e:b2:8d:88:6c:2c:e3:5f:f7:65:13:cd:25:b0:a1:f1:51:
d7:fa:e8:c6:e6:a4:32:18:b7:23:28:20:a7:44:95:5b:aa:ce:
03:d4:d1:01:31:94:db:b5:1c:a0:b5:52:d8:18:be:13:e9:53:
7d:e0:a7:49:b3:b9:d4:ae:c3:8a:44:ce:4b:38:f9:50:71:a0:
13:a9:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:08:42 2025 by rpki-client