Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/34352e3138382e32342e302f32322d3332203d3e20323633393435.roa
File: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (raw, json)
Hash identifier: D66J2ZSbcKjsJfSeJ7CxCPTndvslU6KhPqCQ8nJPICs=
Subject key identifier: FA:C3:76:59:B2:5B:B7:C8:2D:33:5D:CC:25:33:4A:DC:10:DC:B2:94
Certificate issuer: /CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Certificate serial: 069552264E5FDCC6FDD71B95C93083C146531E84
Authority key identifier: AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/34352e3138382e32342e302f32322d3332203d3e20323633393435.roa
Signing time: Mon 11 Mar 2024 20:48:08 +0000
ROA not before: Mon 11 Mar 2024 20:43:08 +0000
ROA not after: Mon 10 Mar 2025 20:48:08 +0000
asID: 263945
IP address blocks: 45.188.24.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:95:52:26:4e:5f:dc:c6:fd:d7:1b:95:c9:30:83:c1:46:53:1e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Validity
Not Before: Mar 11 20:43:08 2024 GMT
Not After : Mar 10 20:48:08 2025 GMT
Subject: CN=FAC37659B25BB7C82D335DCC25334ADC10DCB294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:2f:8c:6d:d9:39:aa:34:84:db:ee:21:d0:
ce:ed:85:ff:9b:f6:7d:11:94:ef:f1:a1:2b:c8:a8:
49:e2:79:1b:27:bb:22:55:a4:21:93:95:11:53:1d:
cc:f1:52:7b:9c:21:dd:10:54:12:07:08:b3:3f:bc:
0d:4b:ef:71:02:7a:44:6c:e0:b4:31:e5:9b:54:15:
91:62:07:1f:f2:fb:72:3c:7d:6d:e2:b7:d9:dd:02:
3e:bd:03:49:25:08:9d:2b:54:ee:5b:a1:35:53:22:
bc:be:b3:81:dc:ac:02:dd:9e:18:cc:89:fc:4f:f1:
f5:8d:e5:06:3a:ec:d4:f2:35:84:0c:80:02:f7:70:
62:88:4d:2f:68:04:2b:cb:3d:14:9a:a4:f2:12:80:
eb:7f:32:a1:d5:b3:b7:e4:97:5a:d1:0f:a3:8f:58:
64:bd:f8:89:bd:49:4a:3a:34:c0:90:0f:9c:65:8f:
c5:b2:83:8e:bd:13:d9:98:23:85:e4:bb:65:09:74:
98:63:de:83:0d:43:75:3f:3c:fc:86:a7:6a:87:ef:
12:b0:fe:14:28:1a:af:f3:6c:ee:45:2f:95:b7:8c:
40:6f:a2:1c:7f:c3:88:e8:93:25:03:8b:3b:52:61:
38:f5:20:ab:ff:7e:5d:8f:0a:d0:e3:b7:63:24:99:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:76:59:B2:5B:B7:C8:2D:33:5D:CC:25:33:4A:DC:10:DC:B2:94
X509v3 Authority Key Identifier:
keyid:AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/34352e3138382e32342e302f32322d3332203d3e20323633393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.24.0/22
Signature Algorithm: sha256WithRSAEncryption
44:bc:7a:20:7b:48:e3:7d:89:e3:f7:63:e9:cb:f0:5a:85:67:
26:2c:71:6d:47:c6:4e:58:ea:ed:b6:d4:7f:08:26:94:1b:73:
d8:9e:4b:d4:b9:76:20:02:e7:f1:82:15:05:9a:8d:be:73:3a:
50:4d:16:ac:39:5a:55:9f:3a:93:a1:bb:9d:6a:9c:22:7e:04:
44:92:76:4b:c1:89:cc:e2:ed:80:55:53:b3:3c:db:f9:f7:ff:
8d:33:79:ff:5a:7e:ec:38:2b:f8:bd:5d:d6:a9:07:27:a5:b3:
a5:be:57:6b:51:d5:b8:e2:cb:5e:6f:44:04:7c:c5:46:ad:84:
e0:26:be:e5:f9:44:e1:ab:80:a7:10:75:35:b8:ee:dd:3d:b0:
46:63:0a:d7:aa:8f:92:e2:b2:b6:b3:6a:a4:34:86:64:cf:ba:
80:bc:98:98:16:0e:83:c6:c6:4e:f4:35:77:04:1a:42:7c:d0:
2e:f9:b8:2c:a1:9a:e8:0e:43:cc:4a:ce:15:a2:6a:5f:82:11:
77:b8:bb:70:5c:da:4a:20:bf:5e:22:80:27:df:23:05:fe:d8:
52:3d:0a:4b:71:64:a2:ee:e2:ed:d9:c5:6c:0d:db:81:80:02:
db:a1:91:34:c3:5f:06:d0:ce:6b:bc:80:32:36:a8:48:a0:0b:
20:6d:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org