Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32322d3232203d3e20323638303335.roa
File: 34352e3136382e31322e302f32322d3232203d3e20323638303335.roa (raw, json)
Hash identifier: YLb6WJApVVz7oiNlwn4ROkT92U8V9oavMDJxialBGDw=
Subject key identifier: 05:08:EB:C4:08:4B:8B:FD:23:4D:4E:30:1D:BB:F1:80:5B:E8:1C:98
Certificate issuer: /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial: 38A360BBF4BFCAE4DC915622A2F06455B6356C50
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32322d3232203d3e20323638303335.roa
Signing time: Thu 06 Mar 2025 09:45:12 +0000
ROA not before: Thu 06 Mar 2025 09:40:12 +0000
ROA not after: Thu 05 Mar 2026 09:45:12 +0000
asID: 268035
IP address blocks: 45.168.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a3:60:bb:f4:bf:ca:e4:dc:91:56:22:a2:f0:64:55:b6:35:6c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Validity
Not Before: Mar 6 09:40:12 2025 GMT
Not After : Mar 5 09:45:12 2026 GMT
Subject: CN=0508EBC4084B8BFD234D4E301DBBF1805BE81C98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:e4:b5:f5:cd:69:e7:d8:44:35:7a:5b:63:
c2:e5:76:ef:5e:b0:a3:67:87:6c:85:c7:70:82:04:
f9:22:9f:bd:cc:8a:43:92:06:71:15:5e:49:4e:b1:
d0:57:74:b5:c8:3e:5a:22:bb:c2:e0:ba:a7:38:2c:
36:a4:89:56:59:ad:e6:51:bd:cf:a1:54:a4:2a:3b:
75:27:8f:dd:39:e9:a0:a1:c7:e6:a5:e5:7e:94:70:
9a:c8:55:96:56:98:c3:0b:c7:af:3e:4e:47:29:cd:
e5:e6:80:4b:e6:3f:0f:38:f8:76:76:aa:b3:f7:b1:
93:55:74:ad:9d:5d:77:51:74:1e:9a:94:0f:1d:2c:
da:dc:06:4a:5a:bb:95:53:29:06:ec:1e:76:17:59:
a9:0f:3c:9a:bd:06:a5:12:ce:1a:d4:2b:36:78:04:
74:06:71:7e:9e:65:e2:41:27:af:3c:aa:94:dd:ae:
23:46:6a:18:c5:0a:63:6a:76:83:65:ef:87:f5:46:
89:e3:ec:8b:d4:6e:b2:e5:45:35:c1:fb:c5:a5:c4:
4c:46:cf:0b:e1:bb:0b:7a:98:33:cd:ba:68:68:0f:
58:a7:d6:e5:f8:e7:42:e5:df:32:c1:4d:37:c1:fd:
7c:23:5f:bb:c2:10:d0:38:5d:86:ea:45:7d:c4:36:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:08:EB:C4:08:4B:8B:FD:23:4D:4E:30:1D:BB:F1:80:5B:E8:1C:98
X509v3 Authority Key Identifier:
keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32322d3232203d3e20323638303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.12.0/22
Signature Algorithm: sha256WithRSAEncryption
44:db:eb:63:74:2a:68:6b:35:90:14:3d:8f:50:44:05:5d:47:
dc:aa:6f:dc:3d:6b:58:42:b7:1b:04:0e:65:37:2d:6c:48:5f:
4a:d8:1b:5c:9a:d5:e2:b7:06:a8:0a:73:07:30:5a:9e:0e:aa:
7b:d5:ee:cd:86:a0:a7:74:fc:4d:16:e0:aa:9f:8d:91:79:2e:
9b:d6:cf:3c:f9:dd:b7:a5:2f:8b:2e:9e:9d:82:95:22:19:d1:
b4:3a:2d:74:78:26:11:57:a1:76:d3:0c:74:fd:08:c6:d3:b9:
ea:0f:ce:fe:ef:1a:fb:34:bd:69:b6:d4:3f:2c:88:79:a5:ae:
a9:5c:84:74:09:bc:61:34:d0:2a:3f:aa:bb:60:cf:8c:8a:7b:
7d:8d:e5:38:85:40:54:21:80:ba:94:18:b6:07:54:ba:ae:6a:
b3:03:6e:41:1c:59:84:d5:b8:6e:11:3a:11:4c:cb:ce:df:7b:
48:22:44:e1:04:d2:e7:cf:43:0b:4f:f7:db:80:1d:ef:76:93:
c7:86:b2:37:b7:20:79:e8:d7:50:1b:0e:57:1f:6f:0f:86:44:
bb:56:db:7d:b6:e8:46:be:24:35:86:a8:68:bc:54:b9:16:24:
7e:62:5d:df:46:a1:11:00:98:a1:08:2e:bf:eb:9d:44:f1:31:
5e:62:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:13:35 2025 by rpki-client on console.sobornost.net