Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/1/34352e3232352e31372e302f32342d3234203d3e20323636393230.roa
File: 34352e3232352e31372e302f32342d3234203d3e20323636393230.roa (raw, json)
Hash identifier: trcEYUTtEXxmYUHGxXWTgJsNjM9OuB0/I/DKifos7a0=
Subject key identifier: AF:D3:AA:1D:E1:AF:46:76:14:A0:5A:58:39:36:11:68:50:BE:F1:D2
Certificate issuer: /CN=FCA52310B4AD5095E04BE220F9C1451383E29EB9
Certificate serial: 52E1C8A87D0E6860501638E513054096E7BE25AB
Authority key identifier: FC:A5:23:10:B4:AD:50:95:E0:4B:E2:20:F9:C1:45:13:83:E2:9E:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCA52310B4AD5095E04BE220F9C1451383E29EB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/1/34352e3232352e31372e302f32342d3234203d3e20323636393230.roa
Signing time: Thu 28 Mar 2024 18:53:49 +0000
ROA not before: Thu 28 Mar 2024 18:48:49 +0000
ROA not after: Thu 27 Mar 2025 18:53:49 +0000
asID: 266920
IP address blocks: 45.225.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e1:c8:a8:7d:0e:68:60:50:16:38:e5:13:05:40:96:e7:be:25:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCA52310B4AD5095E04BE220F9C1451383E29EB9
Validity
Not Before: Mar 28 18:48:49 2024 GMT
Not After : Mar 27 18:53:49 2025 GMT
Subject: CN=AFD3AA1DE1AF467614A05A583936116850BEF1D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:c6:b4:ed:c2:33:e6:b7:75:fe:54:9a:1d:
09:87:66:25:bb:2b:23:13:8b:36:c8:29:08:77:54:
17:b0:06:25:30:dc:16:c9:d5:99:d3:d0:75:eb:84:
80:b0:72:48:cb:e6:4b:77:9b:0a:53:7f:81:92:12:
1f:28:35:a7:d3:c5:6b:ef:03:b1:14:74:35:34:f8:
72:ce:3e:aa:f5:39:35:04:dd:e1:3b:76:f1:9d:fa:
5b:4c:b1:f3:59:0f:9c:f7:6e:42:e3:d8:f3:ac:b2:
c0:85:2e:32:a9:7a:8c:c1:62:49:d6:8e:ba:cd:16:
9d:9f:65:0f:ed:5c:09:44:8f:d8:67:ca:db:f0:42:
b0:d6:20:6e:07:bc:39:f8:0f:7e:94:5a:0c:7d:55:
ba:61:8b:73:68:f5:a4:26:ed:f4:12:04:0e:2c:d9:
bb:1a:09:06:c7:e6:f1:92:70:e6:80:50:83:62:56:
99:24:7b:f2:3c:36:54:89:57:87:20:2f:dc:d7:d1:
29:a4:3c:40:86:f9:32:d0:cb:73:f0:b8:61:09:c6:
f2:0d:74:d7:10:ba:c5:cd:f1:bf:6f:00:55:48:f6:
72:de:b2:18:7a:01:97:1a:ff:5b:1b:9a:4c:1d:bb:
7a:d7:33:c9:6c:8d:1d:c4:eb:31:7e:57:c1:34:07:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:AA:1D:E1:AF:46:76:14:A0:5A:58:39:36:11:68:50:BE:F1:D2
X509v3 Authority Key Identifier:
keyid:FC:A5:23:10:B4:AD:50:95:E0:4B:E2:20:F9:C1:45:13:83:E2:9E:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/1/FCA52310B4AD5095E04BE220F9C1451383E29EB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCA52310B4AD5095E04BE220F9C1451383E29EB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/1/34352e3232352e31372e302f32342d3234203d3e20323636393230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5f:8e:63:ce:2d:a9:b0:76:6c:fb:49:15:bb:4f:ca:34:31:
24:ff:39:fd:03:52:9f:36:51:90:9d:06:e9:6b:f4:98:c8:c4:
35:d3:d9:ef:18:48:49:41:79:3f:8b:84:e4:57:01:52:7b:a3:
09:47:74:3f:24:26:26:96:56:90:ba:d5:3a:e8:1b:53:05:83:
a0:5f:65:a7:73:0c:63:44:48:93:58:cb:50:f0:21:a8:a9:c0:
a1:12:11:81:57:a3:9f:81:23:08:b9:8b:00:84:91:f5:d7:7a:
ae:b8:70:be:53:43:70:71:c9:88:a3:a9:4b:40:5b:0b:89:62:
f6:42:24:64:6c:ca:68:87:81:fd:de:1b:c9:b8:50:9e:44:83:
47:06:fb:be:0b:f1:85:2a:44:13:05:33:16:4b:60:a9:89:88:
24:9e:5a:c7:30:18:66:1a:85:88:b8:04:ec:08:c3:dc:c1:59:
ad:fe:86:a8:97:01:8f:88:57:ef:76:8f:c2:5f:d9:59:27:79:
c0:db:03:7c:82:4e:12:c3:e0:f5:71:a3:b9:4f:d3:6f:6f:0c:
e1:b5:80:60:20:14:1a:87:03:c9:5f:61:ab:46:9d:c5:1f:61:
1c:82:a4:0b:67:f9:d7:be:0a:12:5d:34:9c:64:e5:99:85:a4:
71:e2:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org