Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
File: 34352e3233382e352e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier: QeErpg3nh/yqjB/epBOcOuJEa2S/OgwXYDKheMJj858=
Subject key identifier: 8C:79:19:64:8F:0D:E5:DB:A8:CC:55:16:11:79:2C:EA:05:31:DD:24
Certificate issuer: /CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Certificate serial: 697B2CCF471513D57C37F13C5210FB85428A9D71
Authority key identifier: 7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
Signing time: Mon 21 Aug 2023 14:42:29 +0000
ROA not before: Mon 21 Aug 2023 14:37:29 +0000
ROA not after: Mon 19 Aug 2024 14:42:29 +0000
asID: 268308
IP address blocks: 45.238.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7b:2c:cf:47:15:13:d5:7c:37:f1:3c:52:10:fb:85:42:8a:9d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Validity
Not Before: Aug 21 14:37:29 2023 GMT
Not After : Aug 19 14:42:29 2024 GMT
Subject: CN=8C7919648F0DE5DBA8CC551611792CEA0531DD24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:4a:59:8f:f6:88:67:a4:24:64:68:b2:4a:
6e:11:f6:1b:a5:c6:cd:7e:23:2b:f0:70:2e:60:68:
32:a5:f4:ef:ee:6b:92:71:5c:3b:dc:b3:2a:36:f7:
58:d7:1b:64:5c:3f:04:87:0d:00:4a:a2:46:5f:f9:
85:d9:ff:d3:ec:f6:f1:8d:a5:98:ed:be:be:0c:76:
5e:d7:b0:69:73:30:f3:17:6b:26:1b:27:70:9b:c0:
6d:03:c3:75:37:6a:5d:46:11:d1:5f:bc:d1:76:d5:
e2:f7:75:5b:a5:06:0c:33:86:bd:8f:32:6c:a8:10:
69:45:28:0c:3a:01:52:99:25:27:a0:1d:86:d4:74:
8d:cb:20:05:51:37:cc:74:31:a3:ef:68:8c:6c:f9:
b3:fc:c5:36:80:b0:d4:1e:c1:d6:25:2b:78:4e:44:
bc:01:f8:d9:b0:93:78:99:c1:1f:c6:ce:65:34:63:
e4:c6:06:38:3f:02:ae:80:38:4d:00:18:c5:3c:d1:
79:5c:d7:e9:40:a9:25:e2:59:5d:02:22:2e:11:f4:
51:1d:6c:a8:d4:b0:eb:5d:15:80:02:32:3f:e8:87:
e0:92:6a:cf:f2:9f:2e:c1:de:8d:36:0d:e6:98:7b:
d1:5c:b1:0c:56:b0:31:7b:34:da:69:54:3d:c7:d4:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:19:64:8F:0D:E5:DB:A8:CC:55:16:11:79:2C:EA:05:31:DD:24
X509v3 Authority Key Identifier:
keyid:7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/7E71CA6C0D976155FE8642D776AC920AA8929FA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e352e302f32342d3234203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.5.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f3:1c:f2:81:1b:d4:6e:55:a7:d9:13:4b:04:35:18:e3:62:
4d:5c:ab:e3:a6:7d:7a:e6:1b:a6:6a:39:7a:69:2d:47:ad:bf:
7f:63:7f:70:e5:13:38:dc:67:32:e0:c1:e9:54:90:c2:b3:16:
9c:c5:36:19:c1:27:46:64:29:2a:9b:bd:2a:83:0c:45:c5:0e:
c2:e8:c0:92:35:f5:6c:93:47:c0:fe:9e:a8:d5:f0:4f:a0:c3:
3b:e4:6f:14:c0:c2:b7:2a:21:07:81:fc:a7:fe:a5:1a:be:19:
5e:91:db:de:19:84:c3:df:d2:9a:44:b3:97:13:36:f2:9c:1b:
a2:34:d4:84:e6:e4:11:12:ba:4c:9c:80:a1:93:3b:49:c8:cc:
fe:80:0f:aa:e4:ad:eb:e6:a0:f0:e1:9d:ca:13:9f:98:13:35:
a6:f2:23:ac:35:57:f8:db:34:77:7b:f4:5b:50:cc:96:35:fe:
64:70:1c:2d:55:55:3a:05:23:98:65:98:cb:9f:31:a1:a8:f0:
86:f9:6b:af:28:e8:6d:ae:fd:ea:fa:fe:e8:a3:e7:88:58:2e:
17:fd:19:33:e2:6e:b4:45:b2:eb:42:ff:39:d1:54:c0:96:60:
e6:33:f0:7d:86:d7:e3:8b:46:ac:e9:b1:db:1c:5d:cf:a6:a9:
34:61:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net