Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137352e302f32342d3234203d3e2030.roa
File: 34352e3233312e3137352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: QoFbyAA4WxrEvwaLRndlderVGm4qnHPUpWpG585GrLg=
Subject key identifier: 02:50:60:F4:C5:EE:29:E5:F6:6E:9A:5C:72:2E:9A:64:C6:04:6C:0B
Certificate issuer: /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial: 779F7376D4145D8DE5F565544A1B7F6052E87775
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137352e302f32342d3234203d3e2030.roa
Signing time: Mon 03 Feb 2025 20:57:15 +0000
ROA not before: Mon 03 Feb 2025 20:52:15 +0000
ROA not after: Mon 02 Feb 2026 20:57:15 +0000
asID: 0
IP address blocks: 45.231.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:9f:73:76:d4:14:5d:8d:e5:f5:65:54:4a:1b:7f:60:52:e8:77:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Validity
Not Before: Feb 3 20:52:15 2025 GMT
Not After : Feb 2 20:57:15 2026 GMT
Subject: CN=025060F4C5EE29E5F66E9A5C722E9A64C6046C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:61:4e:a4:34:68:0c:e2:1e:a7:ce:ba:58:
05:03:ea:49:f7:e1:d1:59:07:90:c0:bf:55:b1:c4:
a8:46:6b:e6:65:d2:7f:a7:3c:e1:27:26:74:99:9d:
1d:14:07:ec:23:b2:7f:31:16:6c:98:79:f4:36:d1:
dd:ad:64:4d:68:eb:34:6a:e0:bd:16:3b:95:34:74:
4c:a4:1e:37:13:3f:d2:54:90:70:a6:e4:34:0f:e9:
be:b3:ec:69:c4:b4:20:f4:04:d3:d3:3a:ad:cc:31:
07:78:3a:06:4e:e3:5b:39:4a:43:10:0b:bb:de:3d:
4b:88:17:bf:3d:fe:e6:0e:e6:19:1e:52:29:cc:0e:
ee:de:ca:4e:77:3b:2d:8e:13:70:88:4b:97:03:4b:
d7:75:59:0c:02:79:85:64:49:dc:62:48:a1:86:70:
01:94:5b:5e:dc:ab:fe:24:84:6d:65:45:e6:17:06:
3d:80:67:d2:f7:aa:a8:1e:a7:8b:ab:90:c8:f5:af:
ce:43:ef:68:28:b9:e6:43:ab:d8:c9:95:a1:12:29:
3d:cd:50:97:20:9b:70:42:33:82:fb:27:b9:f1:d8:
f1:40:77:d6:36:63:e5:6f:bb:72:84:66:72:5a:32:
8f:e6:98:f5:72:c1:a6:9f:84:52:b5:05:73:6e:b2:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:60:F4:C5:EE:29:E5:F6:6E:9A:5C:72:2E:9A:64:C6:04:6C:0B
X509v3 Authority Key Identifier:
keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:19:60:c6:6e:2e:f4:83:4c:30:0d:51:5b:23:24:b1:9f:79:
30:26:c6:ff:a7:50:b3:81:2c:d3:83:66:f7:43:47:22:83:b6:
8e:13:ab:0d:76:8d:a4:c6:84:0c:15:39:9c:70:97:b8:40:e8:
32:f7:07:57:51:85:79:56:c2:63:2c:c7:a0:83:0d:91:dc:d8:
82:50:db:1a:ca:31:e2:ec:41:ca:0c:60:d9:3d:33:e8:af:02:
8e:a0:3e:2f:d1:e9:95:42:b8:46:f0:d2:95:d9:6c:15:2f:ee:
6a:d2:e2:07:70:28:8f:b2:29:1e:b1:f5:29:eb:95:80:d8:ef:
bf:33:be:cc:af:0a:45:32:c2:61:34:66:cf:4a:74:bb:2b:12:
20:66:20:b3:5a:30:b6:6b:b5:79:50:f4:3b:1e:30:3b:b1:44:
ea:bc:77:5b:b8:05:f5:d3:be:1c:22:3e:cc:63:b2:d1:75:f6:
fd:fc:2e:4c:2b:ca:f7:f8:05:69:7c:49:e4:96:a3:1e:34:c7:
cb:16:1d:d0:07:e7:6b:5d:c8:97:0d:f4:cd:5d:31:83:2a:71:
99:21:82:66:f8:c7:71:41:1b:4c:12:77:e3:41:8f:b6:50:49:
bb:d8:9d:d0:19:d7:33:58:bb:c8:bf:8f:bd:12:43:78:d7:72:
2a:27:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:40 2025 by rpki-client