Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32322d3232203d3e20323638363932.roa
File: 34352e3136352e3230382e302f32322d3232203d3e20323638363932.roa (raw, json)
Hash identifier: 07ZXUlHyf6/2hPIukAn+vG9vLKwb4HQRmQ/L5g0ojtk=
Subject key identifier: 1A:53:1A:BD:74:79:8C:33:3D:4C:A4:CE:42:FF:2D:CF:6D:FB:09:B8
Certificate issuer: /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial: 1FE70A9E53AD29B8FF36D391F06136BBA1E7D624
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32322d3232203d3e20323638363932.roa
Signing time: Fri 20 Sep 2024 18:57:37 +0000
ROA not before: Fri 20 Sep 2024 18:52:37 +0000
ROA not after: Fri 19 Sep 2025 18:57:37 +0000
asID: 268692
IP address blocks: 45.165.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e7:0a:9e:53:ad:29:b8:ff:36:d3:91:f0:61:36:bb:a1:e7:d6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Validity
Not Before: Sep 20 18:52:37 2024 GMT
Not After : Sep 19 18:57:37 2025 GMT
Subject: CN=1A531ABD74798C333D4CA4CE42FF2DCF6DFB09B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c0:ad:28:f2:c3:70:81:9e:50:8f:41:12:00:
f2:4f:c3:f3:28:4a:22:0b:b2:62:bb:f3:67:c4:be:
a8:98:5f:76:fa:7f:10:5c:4c:8d:9a:b8:7e:81:4c:
82:33:d1:b0:08:89:20:78:b0:b2:e7:50:33:5c:09:
94:4a:b8:74:5d:f5:82:64:33:1d:3c:fb:6f:69:a7:
3d:a3:e7:fd:aa:5f:fb:4b:e2:f0:5b:b0:7e:43:18:
0a:b9:3e:aa:67:c4:a9:b5:f8:e5:aa:b8:65:55:4b:
3d:51:44:35:68:f6:46:22:1e:b4:64:c7:bc:05:08:
b3:39:96:4f:eb:4b:e5:b5:d1:f1:04:ec:f7:9f:00:
45:0c:13:30:0c:54:9f:81:43:48:7c:e9:c8:68:30:
b0:e1:e2:b9:26:03:7b:38:35:70:c8:73:ab:46:8d:
08:c7:36:37:aa:0f:8a:c1:1c:13:19:54:4a:01:0f:
00:ae:a9:19:b8:bd:f3:b8:a0:2f:e8:22:b9:61:aa:
42:5a:e4:c0:85:22:54:ee:6d:37:8e:1c:fd:8d:09:
b7:5a:7e:a0:0d:ab:0b:ab:60:04:d1:32:cd:2e:ee:
00:ec:42:5e:9f:ac:1a:12:cb:53:eb:a8:4b:5a:e7:
49:82:ab:dc:f6:ef:07:bd:cd:8d:20:4a:20:3e:f5:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:53:1A:BD:74:79:8C:33:3D:4C:A4:CE:42:FF:2D:CF:6D:FB:09:B8
X509v3 Authority Key Identifier:
keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32322d3232203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.208.0/22
Signature Algorithm: sha256WithRSAEncryption
68:7c:fb:80:a4:8d:ee:01:d0:7a:d3:5e:96:8f:ba:66:82:e2:
0d:7f:41:0f:33:ce:53:f4:b6:3d:99:30:20:37:b2:0d:b4:6e:
e6:c7:a2:c0:2d:31:15:bf:ad:82:22:e1:74:5c:0e:95:00:f5:
14:0e:2c:71:f0:87:08:5e:a4:da:1c:e8:6e:b9:15:e6:33:68:
b4:02:3c:83:64:19:26:c9:c0:0f:13:28:e7:fc:7c:71:b7:d1:
4e:63:f5:af:c9:45:06:e8:03:68:f9:5b:81:c3:f2:75:91:78:
57:83:a4:ea:23:14:4c:80:2b:67:34:77:dc:5b:30:73:77:8c:
c7:33:63:2e:6f:52:b9:0f:b5:8a:a8:65:54:cd:4b:3a:9e:71:
74:c9:88:88:6a:97:3b:9d:74:c0:09:7c:13:e6:80:e1:e7:24:
56:2b:8d:04:71:f9:f8:58:54:36:79:f1:12:ba:01:1c:50:9b:
40:52:4b:c3:9c:e1:6e:1b:f2:c3:66:77:5b:a2:11:2d:c6:0e:
cb:da:98:67:7f:1c:e4:9f:7f:80:20:de:9e:31:d8:6b:15:e5:
33:7f:77:d4:de:ef:58:94:9d:bb:0f:af:49:70:88:46:a2:f4:
d9:e7:bb:63:d5:f2:1f:92:a2:39:71:2e:c1:cd:db:f5:41:e7:
92:3a:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:51 2025 by rpki-client