Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32332d3233203d3e20323638313133.roa
File: 34352e3136392e33322e302f32332d3233203d3e20323638313133.roa (raw, json)
Hash identifier: VqsTrXTnPBC+QXdkJPbKOCpYRECjlE4xkM51XMcaMKg=
Subject key identifier: 97:34:F6:95:E3:AC:A3:5F:54:3C:FB:74:2C:52:26:2F:7D:C1:49:45
Certificate issuer: /CN=FA921E7C3C9FDC4F96D45614C07E02367A255860
Certificate serial: 49E88D1EF7A315FA79075B9C7D3260D9D6419721
Authority key identifier: FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA921E7C3C9FDC4F96D45614C07E02367A255860.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32332d3233203d3e20323638313133.roa
Signing time: Tue 16 Apr 2024 23:17:37 +0000
ROA not before: Tue 16 Apr 2024 23:12:37 +0000
ROA not after: Tue 15 Apr 2025 23:17:37 +0000
asID: 268113
IP address blocks: 45.169.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e8:8d:1e:f7:a3:15:fa:79:07:5b:9c:7d:32:60:d9:d6:41:97:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA921E7C3C9FDC4F96D45614C07E02367A255860
Validity
Not Before: Apr 16 23:12:37 2024 GMT
Not After : Apr 15 23:17:37 2025 GMT
Subject: CN=9734F695E3ACA35F543CFB742C52262F7DC14945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:17:44:51:0b:31:dd:69:ec:ff:9b:fa:f2:
e3:f7:ac:ed:8c:3e:74:37:23:03:53:a9:bd:fc:6c:
80:e6:0c:2d:5f:fa:2e:05:7f:0d:85:82:81:7e:6d:
da:1a:a1:58:33:24:dd:57:25:16:1b:43:62:e7:73:
9b:86:a0:a2:b4:81:6d:92:dc:e9:2e:37:08:d9:58:
ac:f5:dd:87:59:24:3e:42:e8:6f:98:6e:95:3f:e6:
64:e9:c1:cb:60:5f:99:0f:33:32:22:c8:6a:7a:17:
38:96:aa:40:3d:80:7b:64:d1:4d:e7:c5:47:1f:c6:
34:3a:2c:93:a4:79:17:bd:7e:ff:64:fb:81:62:89:
48:79:b3:d3:60:fa:58:96:39:72:e8:1f:d3:cd:ea:
25:60:f4:30:2e:e8:ae:bb:12:e3:aa:af:43:ee:01:
7a:a9:6f:1f:27:ff:66:7e:24:68:82:4e:2d:08:61:
4a:47:9d:d7:1f:29:e8:33:be:e5:45:51:2c:fc:cf:
18:6c:b4:b1:20:e2:cc:4e:1f:84:84:86:1c:20:e2:
68:69:fa:26:60:0d:24:03:b1:98:37:f3:c2:e6:9a:
5a:a9:e0:43:e8:a9:86:66:b9:f2:f6:9e:95:d7:01:
58:6d:90:21:fb:17:03:b9:45:07:16:73:1c:6d:4e:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:F6:95:E3:AC:A3:5F:54:3C:FB:74:2C:52:26:2F:7D:C1:49:45
X509v3 Authority Key Identifier:
keyid:FA:92:1E:7C:3C:9F:DC:4F:96:D4:56:14:C0:7E:02:36:7A:25:58:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/FA921E7C3C9FDC4F96D45614C07E02367A255860.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA921E7C3C9FDC4F96D45614C07E02367A255860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32332d3233203d3e20323638313133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.32.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:85:19:e5:87:f5:19:50:31:a0:75:ce:d1:5a:6c:c9:0e:50:
62:35:e7:1b:72:26:23:8f:d6:55:3c:45:0d:88:f0:54:04:ca:
66:a4:90:52:55:e5:d5:8b:14:90:de:9a:6e:5e:d0:e5:72:f2:
f9:08:48:40:72:e6:66:5a:fa:17:2a:b4:d1:3a:01:4c:c5:44:
7b:b4:ba:54:b4:d2:e5:ec:dc:64:27:db:a6:d6:5f:b0:00:6f:
99:8e:16:91:b5:04:2d:d5:7d:5f:47:a3:e1:6f:f8:83:81:84:
0a:4f:63:7b:ae:bf:8c:e8:90:4c:a1:01:be:f7:0d:14:33:21:
f2:d7:f0:21:c1:40:30:68:49:43:d3:9d:b4:22:13:3f:11:f5:
f6:8e:a7:04:ea:03:d3:7c:bb:37:4a:a6:a0:11:eb:d9:54:cb:
66:eb:c2:b3:cd:64:a7:01:02:25:87:fb:ee:6c:7a:20:e2:fe:
11:b1:27:83:f6:84:54:f8:ba:65:a2:92:2c:48:fa:56:f5:30:
9a:a0:58:ef:94:d1:1c:96:dd:ab:b1:74:b6:af:83:9e:40:be:
fb:d9:de:e1:7e:af:9a:82:94:f3:e5:32:a3:8f:1c:a1:de:3c:
74:b7:0d:bd:66:c8:45:a5:69:d9:92:d9:63:91:ed:d6:66:ae:
55:03:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:24 2025 by rpki-client