Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233382e302f32342d3234203d3e20323638333930.roa
File: 34352e3233392e3233382e302f32342d3234203d3e20323638333930.roa (raw, json)
Hash identifier: QqVdXiJuR5FVnGWGIfO4e4GhfIJcXWWPu1P4U64D/jg=
Subject key identifier: EB:B1:23:33:0A:08:F5:49:8B:EE:41:8C:7F:D6:1D:63:D5:E9:0D:0A
Certificate issuer: /CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
Certificate serial: 799D98173553FE4FB2726A00EC6BFF256EAE9D3C
Authority key identifier: 98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233382e302f32342d3234203d3e20323638333930.roa
Signing time: Mon 03 Feb 2025 14:29:13 +0000
ROA not before: Mon 03 Feb 2025 14:24:13 +0000
ROA not after: Mon 02 Feb 2026 14:29:13 +0000
asID: 268390
IP address blocks: 45.239.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9d:98:17:35:53:fe:4f:b2:72:6a:00:ec:6b:ff:25:6e:ae:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
Validity
Not Before: Feb 3 14:24:13 2025 GMT
Not After : Feb 2 14:29:13 2026 GMT
Subject: CN=EBB123330A08F5498BEE418C7FD61D63D5E90D0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:ef:24:46:7a:83:30:22:5e:e8:27:a4:a6:
5e:59:59:27:98:be:6f:b7:df:3d:97:66:59:60:d3:
b3:bf:3e:16:6f:26:30:8a:ab:a4:62:c2:41:db:51:
a3:86:b4:ac:2b:dc:52:8e:f8:66:cc:ab:45:5e:8e:
57:a0:9c:09:c0:83:d7:4a:d8:80:23:5b:24:38:5e:
ae:2e:57:d8:c7:be:4a:60:fc:33:61:8a:dd:c1:b0:
0e:39:a7:9c:69:8c:bc:30:ea:21:eb:8e:98:40:73:
df:90:e3:dd:06:14:af:2e:a5:69:53:57:98:cd:8d:
e6:36:5d:03:af:c9:f4:cb:ec:7c:ed:d0:c3:cb:5c:
9e:63:54:63:dc:de:a0:ac:3d:ee:98:60:a7:2e:8a:
7d:91:92:cb:bd:a2:b0:ec:42:1c:8a:57:ac:54:a7:
65:46:6c:82:21:04:2a:95:78:4b:4e:98:36:3a:94:
4a:8e:1f:cb:2d:14:d3:a5:17:37:5e:fc:8b:97:22:
91:24:3b:34:96:30:7a:72:4d:ec:8b:d5:b3:75:62:
d1:21:d2:3a:cb:39:2c:66:39:63:2f:b6:04:26:72:
14:4e:98:27:c5:ca:81:47:2b:97:c4:5c:81:a5:0b:
75:76:ec:1c:c6:16:a1:cb:aa:be:19:46:35:99:af:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:23:33:0A:08:F5:49:8B:EE:41:8C:7F:D6:1D:63:D5:E9:0D:0A
X509v3 Authority Key Identifier:
keyid:98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233382e302f32342d3234203d3e20323638333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.238.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f6:0b:2c:ea:3f:26:d3:76:50:8b:ff:af:0c:7a:d4:82:56:
10:7d:0c:96:57:eb:39:ca:1c:ae:96:ea:73:3b:71:7b:27:73:
a9:da:d4:a8:dc:ae:80:77:02:25:05:a1:c0:c8:f5:25:01:58:
98:2e:be:8e:e3:99:21:38:d9:03:9a:0b:55:d7:66:bb:84:5d:
20:bd:3f:91:f8:f1:0c:af:8a:cb:04:2e:f1:43:95:8a:32:92:
20:e8:10:e6:c5:fd:b2:99:44:01:83:48:54:fc:c7:da:20:5b:
c6:3f:1f:a6:23:a1:91:92:ea:9b:3d:8b:e1:7e:4e:b7:49:53:
8c:6b:27:f2:3e:6f:36:8c:52:24:e5:7f:a3:4a:b7:90:b3:49:
4e:df:c9:f1:dd:6a:4e:9b:26:ca:f8:76:0e:d4:5e:3d:68:49:
5b:55:a1:3f:fa:0a:21:73:cd:50:0a:a1:a3:88:cf:8c:c2:53:
9e:bf:2d:dd:28:5e:fe:bf:fa:74:1f:dc:eb:50:eb:db:d1:33:
bd:00:df:7c:b6:52:cc:1e:9d:0e:1f:f5:38:cd:30:23:8c:2b:
fb:6d:7d:b9:b9:bf:31:98:a9:f7:10:a7:65:e3:df:c1:21:76:
dc:08:bc:1e:fe:38:35:24:29:32:7d:f1:6d:b3:08:ea:1e:49:
b0:a8:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:13:19 2025 by rpki-client