Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32342d3234203d3e2030.roa
File: 34352e3233312e3137322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: aoG/aE2FYVDwlyl85DjzRxrr9HUexjMLYgnAXAECjHU=
Subject key identifier: 20:8E:AF:08:E2:97:57:A3:26:DA:D5:77:88:95:BF:13:0E:EC:B0:99
Certificate issuer: /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial: 2ED8142D5D43CCECE41E70E684B4759723C32775
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32342d3234203d3e2030.roa
Signing time: Mon 03 Feb 2025 20:56:45 +0000
ROA not before: Mon 03 Feb 2025 20:51:45 +0000
ROA not after: Mon 02 Feb 2026 20:56:45 +0000
asID: 0
IP address blocks: 45.231.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d8:14:2d:5d:43:cc:ec:e4:1e:70:e6:84:b4:75:97:23:c3:27:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Validity
Not Before: Feb 3 20:51:45 2025 GMT
Not After : Feb 2 20:56:45 2026 GMT
Subject: CN=208EAF08E29757A326DAD5778895BF130EECB099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:3f:a7:46:89:5c:e8:28:3e:f5:ab:63:c0:
26:95:f0:1e:48:63:6a:90:7a:0e:48:11:05:b1:d7:
4d:6d:f9:13:9e:04:61:48:60:b6:07:0c:ce:f4:b1:
fd:85:4a:7b:3b:23:05:1d:f6:b1:fb:d7:4e:7c:09:
ae:ce:76:9b:c5:da:7c:e6:5b:0f:da:0a:f9:d2:70:
ec:85:a5:dd:5d:81:65:f8:2c:33:fe:c6:0a:38:24:
f3:10:80:c8:a5:21:d6:d6:2e:0c:d8:05:8e:17:07:
80:49:74:90:00:28:47:c9:24:22:f2:fb:5c:7c:0b:
18:0a:66:ac:e3:aa:9d:6f:53:53:21:de:36:75:70:
85:30:d2:e9:5f:cb:2c:90:d0:9c:ac:1e:2d:0f:cb:
3a:08:ba:7b:a0:dc:96:97:62:79:95:65:9a:b4:ee:
8b:3d:13:19:f7:0e:c8:05:b6:71:e1:7e:14:91:cf:
e4:4c:83:50:0e:1c:4c:7a:2d:31:f0:30:57:71:d6:
06:75:c2:b9:1e:26:50:77:40:a7:b5:81:a2:5a:ba:
85:8f:b5:0f:97:7d:e0:ab:3b:fa:6c:a3:8a:73:69:
dd:50:54:3f:45:ba:24:e4:be:3e:f8:52:c3:b7:00:
ed:99:ce:7f:90:74:aa:e6:84:ea:5c:1e:f8:6d:86:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8E:AF:08:E2:97:57:A3:26:DA:D5:77:88:95:BF:13:0E:EC:B0:99
X509v3 Authority Key Identifier:
keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.172.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:00:14:6b:25:60:65:a3:d9:8e:3c:82:31:70:4b:9f:5e:61:
bc:38:a0:2c:2f:b5:d8:37:3f:78:72:b7:57:12:26:09:52:e3:
52:a1:eb:16:0d:e2:a3:39:a9:1a:2d:55:a5:db:55:84:5e:d8:
15:1d:93:9f:69:40:a2:c9:c6:f2:18:2e:5f:4d:ec:bd:bf:ae:
f0:1c:d3:a5:59:49:64:c5:01:ce:f9:bf:5a:16:ed:77:43:a8:
d0:dc:b6:6e:a0:94:f3:f3:81:9d:e5:4f:f9:27:70:71:2d:9e:
57:3c:08:3e:f3:30:86:74:0d:22:c7:47:b6:0a:d0:e5:b6:b6:
b3:87:86:25:de:74:76:cd:89:40:07:72:72:84:90:53:cd:1a:
67:ae:5e:21:08:d1:d3:bb:b6:d7:da:c6:ba:c1:90:ef:66:f9:
76:cb:90:0d:1f:39:bc:4f:e1:b0:c9:32:89:6d:13:ad:d1:3a:
1b:44:1d:ff:de:15:35:a9:c2:f1:e2:79:36:7b:35:d2:51:f2:
85:8a:31:c3:3b:d8:6c:61:f3:8e:22:5e:45:47:24:f5:f4:7b:
4a:8e:e4:e1:04:4c:40:56:dd:d7:4a:e2:b7:d0:78:02:55:db:
b1:42:9c:c7:3b:39:cb:d9:8a:2c:1c:ae:5c:d3:74:1f:d8:34:
e3:a6:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:18:42 2025 by rpki-client