Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230392e302f32342d3234203d3e20323638363932.roa
File: 34352e3136352e3230392e302f32342d3234203d3e20323638363932.roa (raw, json)
Hash identifier: 04bVCZSN5nTITGkSQHTvrNMIoZuqjUIPcb+SVXgIrbA=
Subject key identifier: 2E:E9:0F:39:29:60:99:8F:E6:5F:8A:65:E4:06:0D:92:F5:69:56:D6
Certificate issuer: /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial: 60BDECF75A1D73A60921FA2F7890165F34732BFC
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230392e302f32342d3234203d3e20323638363932.roa
Signing time: Fri 20 Sep 2024 18:57:37 +0000
ROA not before: Fri 20 Sep 2024 18:52:37 +0000
ROA not after: Fri 19 Sep 2025 18:57:37 +0000
asID: 268692
IP address blocks: 45.165.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:bd:ec:f7:5a:1d:73:a6:09:21:fa:2f:78:90:16:5f:34:73:2b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Validity
Not Before: Sep 20 18:52:37 2024 GMT
Not After : Sep 19 18:57:37 2025 GMT
Subject: CN=2EE90F392960998FE65F8A65E4060D92F56956D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8c:4a:ca:a7:f0:11:bd:fc:0b:96:c2:28:41:
69:10:31:53:dd:d8:ae:70:b9:37:e5:b8:03:59:52:
08:87:ac:95:3f:d7:ae:c3:a0:51:9d:0c:d5:2d:d4:
54:89:7e:96:92:b5:ec:b5:fe:54:3d:67:43:29:ad:
eb:78:24:df:28:2e:69:59:2e:19:89:32:83:b8:be:
00:33:95:db:80:4e:83:37:bb:35:3d:1b:76:70:1d:
41:bc:d6:3d:4a:1f:c6:19:c0:6c:67:6b:4d:83:16:
07:32:b1:07:cb:11:2a:0e:61:b0:0e:72:1a:1c:20:
83:53:7d:1c:b6:6c:78:d5:0f:9d:e4:8f:06:20:93:
90:45:9a:cd:72:04:9b:9c:f0:ff:6c:5c:75:1b:70:
67:81:03:8c:ae:95:cc:ac:b7:64:a1:b7:de:dc:eb:
58:2f:e2:80:a3:07:4a:06:82:76:e0:a4:21:9d:75:
e4:cf:67:9e:61:34:f7:3f:9a:24:b1:01:d0:32:90:
16:20:d8:b9:9e:8d:79:0c:cf:95:e9:21:67:98:5d:
46:85:05:8c:3e:d0:85:d2:8f:51:0e:a8:ce:5c:22:
ab:60:a8:71:cf:b4:02:e6:b8:8c:a5:38:e6:df:20:
44:18:cc:90:82:9e:61:6c:d4:75:50:12:60:5a:3a:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:0F:39:29:60:99:8F:E6:5F:8A:65:E4:06:0D:92:F5:69:56:D6
X509v3 Authority Key Identifier:
keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230392e302f32342d3234203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.209.0/24
Signature Algorithm: sha256WithRSAEncryption
55:20:fd:ad:1c:27:10:ad:5d:db:fa:66:75:03:1b:13:64:15:
2f:37:4b:6a:4b:87:62:bb:3e:ea:db:2f:17:d4:c1:3c:a6:65:
24:91:b7:7c:21:20:eb:eb:f2:9d:d4:75:10:b6:3c:3e:0d:3b:
cd:e9:ce:fb:be:8e:3e:3f:34:22:26:88:ba:6f:5c:0b:ed:da:
8c:dd:91:7e:c6:2b:96:4e:3c:50:3e:03:55:c3:55:13:94:0b:
50:71:28:d4:d5:67:5d:e5:75:4e:c2:d1:23:e5:84:25:e4:9b:
51:8a:fd:9d:b8:bd:2c:43:5b:db:01:a0:44:ec:ba:af:ef:d0:
9e:80:2a:a4:00:6d:8e:df:95:6f:bf:4c:34:25:92:4a:1f:4d:
6b:dc:84:5e:0f:e7:c4:cc:e7:00:45:44:47:ae:c8:6c:78:45:
70:fb:d8:d3:23:6d:58:46:3d:83:fc:58:6c:a8:69:a3:37:36:
b9:6e:07:54:56:b9:9a:ec:62:23:96:34:f9:3b:a0:75:68:05:
fd:5b:fa:9c:ab:cb:a5:45:f1:6f:62:d3:0d:22:25:d5:0e:5d:
30:c6:d0:41:be:07:2e:7c:21:ae:5e:1b:7c:33:50:9d:14:96:
83:3d:41:da:01:58:55:2d:75:0e:6b:47:0e:ae:9a:e4:df:f7:
3b:81:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:58 2025 by rpki-client