Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137342e302f32332d3233203d3e2030.roa
File: 34352e3233312e3137342e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: CdfZ9D4zUMkQALnBMwqnpx65lFjOBegzlvSIhySvkUk=
Subject key identifier: 50:CB:DE:F9:02:6C:3D:50:D4:02:07:46:40:DF:F0:A0:75:DD:41:0E
Certificate issuer: /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial: 0803D9F93AD4767829088F7FE5D074F0E0434999
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137342e302f32332d3233203d3e2030.roa
Signing time: Tue 04 Feb 2025 00:32:43 +0000
ROA not before: Tue 04 Feb 2025 00:27:43 +0000
ROA not after: Tue 03 Feb 2026 00:32:43 +0000
asID: 0
IP address blocks: 45.231.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:03:d9:f9:3a:d4:76:78:29:08:8f:7f:e5:d0:74:f0:e0:43:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Validity
Not Before: Feb 4 00:27:43 2025 GMT
Not After : Feb 3 00:32:43 2026 GMT
Subject: CN=50CBDEF9026C3D50D402074640DFF0A075DD410E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:fe:ec:3a:d6:58:1f:55:9e:33:c2:7b:2c:
6b:3c:89:77:fa:23:8f:61:65:ec:e9:40:bd:14:71:
42:b7:f0:cb:15:9d:be:36:fe:4f:44:6d:d0:fc:8e:
0c:86:59:5a:6b:e0:7c:74:5a:c1:5e:0f:8c:74:a4:
9f:cd:2f:f3:da:b2:cd:35:15:e3:72:18:51:ee:8a:
c4:ab:50:17:2a:49:26:21:9c:ac:76:06:6c:03:02:
b1:c9:76:d2:1d:68:dd:8b:87:7c:00:ce:e8:8b:78:
eb:48:06:0e:6f:5c:3e:6a:b2:d2:21:f0:8f:7b:cc:
93:4e:f9:b7:56:8f:a9:d7:11:79:ec:46:a0:be:34:
58:b4:19:4e:8a:66:f3:8f:08:f4:0f:d2:f0:90:63:
5d:89:f2:5d:60:22:e7:d9:fb:f4:f3:40:8b:ea:a0:
0b:ba:d0:6d:21:c5:a8:78:05:b8:b4:e4:d2:c4:74:
65:2b:a3:de:58:93:2b:60:6c:54:c2:dc:db:97:14:
df:a1:11:ad:62:7d:92:da:a1:e9:8c:15:5e:46:17:
d0:3b:94:d3:10:9b:01:49:ca:8b:c3:d9:c7:0e:7c:
05:90:a2:b2:24:6a:0d:a8:15:7b:33:72:95:6e:e9:
d0:6f:b0:ea:ec:15:d1:0a:99:e6:26:9f:26:27:01:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CB:DE:F9:02:6C:3D:50:D4:02:07:46:40:DF:F0:A0:75:DD:41:0E
X509v3 Authority Key Identifier:
keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137342e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:3d:e2:fe:6d:c5:3d:29:3d:b7:85:9f:c8:c4:95:65:d3:f3:
0f:e7:38:4f:d5:a3:6b:ef:97:89:da:a8:22:03:91:af:6e:aa:
68:41:70:16:84:ff:d9:0a:40:53:97:c7:05:67:4e:96:f9:3d:
c4:96:34:61:90:a5:3c:93:e8:f6:9d:d8:0f:2d:a0:4c:19:32:
0c:2f:f7:8b:bb:53:79:37:ea:aa:7c:c4:75:e5:87:66:3f:d9:
5c:3f:64:99:6c:d8:a9:4b:24:e3:21:0b:31:37:9d:88:bd:53:
36:bf:39:5e:44:c2:3d:37:2a:ae:48:22:25:d0:ee:f6:2e:bb:
4f:73:fa:d2:d6:07:df:07:90:10:5f:bb:c6:c3:89:d6:ff:30:
4e:3c:6d:03:9c:db:02:8b:33:71:c2:4b:39:01:7f:8a:ad:52:
70:92:9f:68:ac:30:92:d4:cd:10:b0:fa:cb:51:66:21:a4:94:
d5:f5:c8:be:5a:d1:da:83:c5:3e:79:b4:42:a5:8b:82:83:bb:
2e:ab:03:4c:b8:c1:a5:7f:e3:55:cf:88:fb:c6:96:ee:91:f6:
36:ca:82:48:68:80:fd:c4:b0:30:9f:5c:62:a0:b4:a8:59:41:
82:1a:4c:37:64:e5:f0:5e:99:c0:ef:49:d1:1f:c0:24:83:eb:
5f:c2:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:27:31 2025 by rpki-client