Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/34352e3136352e302e302f32322d3234203d3e20323638363635.roa
File: 34352e3136352e302e302f32322d3234203d3e20323638363635.roa (raw, json)
Hash identifier: tcMoMHnUL6aS9gr8zFqCgWkbacPC0eAz3xpP+G4hJ3w=
Subject key identifier: 5E:F9:D7:E0:BA:8C:A5:AD:04:65:85:F8:0E:41:24:64:4B:C7:68:D2
Certificate issuer: /CN=57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2
Certificate serial: 5BD42019C82FE1E7C2D0E3FFCF7B9D06500CCBEF
Authority key identifier: 57:E5:BC:40:3D:FD:7B:11:DB:E0:DF:23:AD:FB:0A:0C:FE:55:AE:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/34352e3136352e302e302f32322d3234203d3e20323638363635.roa
Signing time: Thu 09 Jan 2025 12:06:42 +0000
ROA not before: Thu 09 Jan 2025 12:01:42 +0000
ROA not after: Thu 08 Jan 2026 12:06:42 +0000
asID: 268665
IP address blocks: 45.165.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d4:20:19:c8:2f:e1:e7:c2:d0:e3:ff:cf:7b:9d:06:50:0c:cb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2
Validity
Not Before: Jan 9 12:01:42 2025 GMT
Not After : Jan 8 12:06:42 2026 GMT
Subject: CN=5EF9D7E0BA8CA5AD046585F80E4124644BC768D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:2d:1f:8b:6a:62:ef:1c:ea:cb:69:0d:81:
47:a2:7b:1c:84:31:74:92:40:ec:07:c8:2e:a1:f4:
4c:e6:1f:eb:ea:47:19:2a:8b:e0:06:95:82:b4:a5:
56:9c:c3:ce:97:03:b4:35:b0:d6:87:e3:6c:d0:64:
19:8d:02:c4:0d:6c:37:6c:b6:81:e6:3c:11:bc:ba:
02:70:f1:7a:07:75:72:4c:b2:8e:3b:5b:bb:0e:92:
9a:88:be:a2:a1:fb:dc:72:6a:ff:ec:47:26:12:58:
bf:4e:03:cd:45:95:58:fd:80:26:bc:af:b7:08:bb:
c3:7b:24:d4:2c:83:08:8c:ec:a5:0b:f9:10:e0:bd:
78:bc:0e:e5:85:7b:ae:01:24:4a:6c:e8:54:9e:fc:
7b:06:2e:82:0c:a0:a4:2b:dc:4f:74:b8:04:46:db:
cd:42:7c:ac:d6:55:3c:53:6f:77:07:4d:7a:c6:4f:
16:c3:b3:7f:5d:55:ce:47:d9:c2:c6:40:1b:f8:61:
88:ed:22:2c:97:0d:66:d8:1f:58:66:ad:6e:5c:af:
7f:9c:96:55:9c:22:09:5d:11:5a:19:48:bc:95:d9:
07:fd:43:67:38:74:0b:d7:1e:e9:52:04:80:12:88:
d6:ef:69:79:a6:eb:1f:d6:b0:81:30:b2:bf:d9:7e:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F9:D7:E0:BA:8C:A5:AD:04:65:85:F8:0E:41:24:64:4B:C7:68:D2
X509v3 Authority Key Identifier:
keyid:57:E5:BC:40:3D:FD:7B:11:DB:E0:DF:23:AD:FB:0A:0C:FE:55:AE:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/34352e3136352e302e302f32322d3234203d3e20323638363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:2b:da:9a:d6:34:b7:71:e3:22:4a:ef:84:f3:df:bc:a7:80:
28:ac:58:d6:f6:17:c0:fc:73:eb:86:11:24:95:76:5a:9b:21:
f5:25:e9:55:34:06:3a:b9:c8:72:2c:c7:9e:b0:c9:06:67:3f:
0c:49:6f:df:92:15:65:70:c3:c4:2a:88:76:ec:ba:95:0b:fe:
37:c1:08:84:9f:fb:1f:45:d9:7c:5d:23:e2:1e:23:ac:32:a2:
3b:bf:69:49:f6:93:37:94:ea:24:be:14:f2:90:38:e7:02:ef:
e7:40:1e:6e:14:04:7b:a5:ec:79:95:d7:b3:ee:72:fb:7f:c3:
36:bc:f3:7c:c5:e3:42:69:6f:62:d3:50:2d:1e:b4:99:15:a7:
52:8c:4b:ca:30:71:ba:ce:50:83:d5:32:bc:f8:f3:d5:60:75:
b0:a9:8e:09:6c:36:a7:3e:8e:a1:97:eb:d9:86:bd:d0:bc:ef:
2c:a7:a2:0e:d6:04:2c:8b:15:c7:db:25:91:61:39:07:08:1b:
83:d2:a8:0a:16:3f:75:b4:93:a9:b6:88:ea:06:7b:76:c4:d8:
fc:70:88:0b:20:e7:26:8f:76:60:d6:72:da:70:92:e0:f6:fd:
0d:50:7e:ba:8a:76:d8:c7:d5:51:86:42:ab:9c:d2:55:94:a9:
d5:f8:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 25 03:42:53 2025 by rpki-client on console.sobornost.net