Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32322d3234203d3e20323638363932.roa
File: 34352e3136352e3230382e302f32322d3234203d3e20323638363932.roa (raw, json)
Hash identifier: dm9zTgP9DX7zXm9qqcWAcr4TjG7oWhxgL02tzL8V8eU=
Subject key identifier: AA:ED:2D:EA:D5:FA:40:97:05:91:0F:CC:1D:83:EB:91:B7:4E:6D:67
Certificate issuer: /CN=1107631FAB155A98AABEDD080C412F5515D96DEF
Certificate serial: 048417DAAF50A53E01F9194A1DC7AF552ACDA89B
Authority key identifier: 11:07:63:1F:AB:15:5A:98:AA:BE:DD:08:0C:41:2F:55:15:D9:6D:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1107631FAB155A98AABEDD080C412F5515D96DEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32322d3234203d3e20323638363932.roa
Signing time: Mon 04 Nov 2024 19:57:46 +0000
ROA not before: Mon 04 Nov 2024 19:52:46 +0000
ROA not after: Mon 03 Nov 2025 19:57:46 +0000
asID: 268692
IP address blocks: 45.165.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:84:17:da:af:50:a5:3e:01:f9:19:4a:1d:c7:af:55:2a:cd:a8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1107631FAB155A98AABEDD080C412F5515D96DEF
Validity
Not Before: Nov 4 19:52:46 2024 GMT
Not After : Nov 3 19:57:46 2025 GMT
Subject: CN=AAED2DEAD5FA409705910FCC1D83EB91B74E6D67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:3f:bc:0f:a5:e3:bb:df:d0:c6:31:c7:fb:
3b:3a:61:cb:88:af:ec:35:10:30:88:ca:8c:f0:f8:
ea:9b:e8:c0:ae:65:1f:81:3e:80:1c:e9:3f:21:49:
4a:87:0f:fe:89:9b:16:63:ce:28:74:f5:d8:7e:d5:
49:bd:c7:a9:5f:6d:ee:dc:8d:ae:1f:8a:1c:f0:3e:
97:e8:9b:5c:43:31:bc:86:29:dc:77:7e:34:99:4a:
4a:4f:ab:2b:73:75:1b:88:13:1b:b6:61:33:99:5f:
ee:5d:76:be:2d:bd:2a:52:c1:6c:2a:8d:ae:db:e0:
18:aa:04:8d:56:9e:28:da:12:f1:0d:a3:89:28:83:
34:01:ef:2c:32:cc:ed:40:41:6e:c5:46:be:09:e1:
3a:3a:64:ce:ed:f4:3f:55:1c:ed:b6:9c:fa:dd:5a:
4c:af:28:9e:6b:36:7a:d4:0d:d3:17:76:81:23:e8:
85:89:1e:76:8b:dd:5f:06:14:3a:68:e7:d6:0b:53:
2d:aa:4d:b8:83:21:c4:08:0a:f0:9a:c6:7a:fb:04:
36:d6:9c:27:7e:a3:28:63:de:c2:37:34:7d:13:1f:
d8:61:e8:ea:d4:ec:d5:d6:7e:21:c2:12:2b:a5:d6:
f7:31:3a:66:52:a7:8e:2f:35:b0:7e:47:ac:d0:df:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:ED:2D:EA:D5:FA:40:97:05:91:0F:CC:1D:83:EB:91:B7:4E:6D:67
X509v3 Authority Key Identifier:
keyid:11:07:63:1F:AB:15:5A:98:AA:BE:DD:08:0C:41:2F:55:15:D9:6D:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/1107631FAB155A98AABEDD080C412F5515D96DEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1107631FAB155A98AABEDD080C412F5515D96DEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32322d3234203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:1d:31:24:7e:a6:2b:91:5f:13:f3:b7:a7:7e:44:12:f5:c8:
bc:51:3d:51:8e:87:01:56:72:d3:a5:75:ae:ff:79:89:10:a2:
23:8b:23:f6:b1:c1:fa:d0:b6:4a:b6:55:82:c2:e2:78:9c:90:
0c:3f:c7:7b:79:7f:73:f5:16:b8:83:a2:dc:9a:0c:91:dc:db:
40:1c:d9:e4:da:ed:38:4b:35:28:ba:bc:d3:59:2e:b1:1b:72:
5f:01:05:3a:fa:85:d6:44:86:9e:d4:6f:d3:94:1a:a3:2e:6b:
c9:d6:67:1c:65:33:8f:f0:63:82:56:e3:f7:eb:3c:b2:76:0a:
d4:fe:eb:f3:17:d1:8b:17:46:0c:83:9d:0f:ca:2f:4e:f4:03:
71:ff:88:e4:4e:c4:f8:1d:52:1a:1f:54:3c:31:f1:ef:3d:4c:
c6:79:13:41:5a:ae:67:8d:33:0a:03:4b:54:4a:b8:32:d7:9e:
e5:f1:6d:2d:7f:e9:b6:f1:bf:2c:6d:68:7f:67:f6:39:8e:ea:
d2:eb:8d:77:96:54:79:4c:1d:a0:92:b2:7a:e4:27:c8:d9:0a:
c7:62:a4:e8:96:a5:3f:61:b0:da:72:8b:03:0c:87:7b:27:0f:
17:3c:29:5a:8f:8b:79:9b:c8:aa:cf:c8:af:45:a1:37:3c:92:
eb:db:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:04 2025 by rpki-client