Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS65421.roa
File: AS65421.roa (raw, json)
Hash identifier: 7Vbeor9m6+dzt12Qpm3uCT7kahvrt4HBovBC5ZDDDd4=
Subject key identifier: 36:A0:CB:11:97:94:E8:BD:6B:3A:96:1A:02:9F:47:20:E8:FC:BF:83
Certificate issuer: /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial: 78AF6D8F43022040D04884FE9E8DA8659D1D2E16
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS65421.roa
Signing time: Wed 26 Feb 2025 18:54:29 +0000
ROA not before: Wed 26 Feb 2025 18:49:29 +0000
ROA not after: Wed 25 Feb 2026 18:54:29 +0000
asID: 65421
IP address blocks: 187.61.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:af:6d:8f:43:02:20:40:d0:48:84:fe:9e:8d:a8:65:9d:1d:2e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Validity
Not Before: Feb 26 18:49:29 2025 GMT
Not After : Feb 25 18:54:29 2026 GMT
Subject: CN=36A0CB119794E8BD6B3A961A029F4720E8FCBF83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:94:3e:79:f9:16:50:c8:a6:a7:94:a9:5b:
8a:a8:f9:68:80:ec:c8:12:60:ce:de:a9:35:42:0f:
c3:f3:54:90:08:62:53:76:0e:ba:ad:49:98:87:c6:
68:fe:18:6b:df:1e:51:d7:5c:2f:00:40:38:9e:bc:
48:aa:36:59:a7:8d:59:07:dd:0d:8c:19:0a:0a:ae:
ec:26:c5:0f:dc:5a:01:c2:37:49:87:85:5b:df:57:
89:ad:8d:1d:c8:7e:ae:b0:36:29:dd:b9:dd:9d:50:
bf:75:2d:c1:e0:76:74:1e:e8:e7:e0:71:59:78:33:
aa:f4:ee:26:31:8d:e6:55:cd:13:a0:1b:e0:15:2b:
76:c2:8a:68:94:67:b1:63:22:3d:67:e4:43:3e:24:
1c:ca:d3:3e:b2:4b:c5:a1:e5:ad:0b:59:3e:81:b6:
d1:db:93:db:2c:bf:c9:0a:37:ae:11:42:fa:c4:49:
19:1e:6c:f0:50:80:33:cc:15:b5:ca:4a:26:85:07:
5e:fa:b0:d6:a0:f8:b3:4d:6c:65:cd:13:66:4b:c5:
89:fd:b8:e7:c8:a7:ce:65:cb:5b:4b:8b:96:bc:37:
33:7d:4e:9f:98:ef:c0:4d:3e:6d:d9:97:28:74:b4:
e5:9d:14:8c:71:bf:bd:cf:f4:c0:57:83:a9:eb:ac:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A0:CB:11:97:94:E8:BD:6B:3A:96:1A:02:9F:47:20:E8:FC:BF:83
X509v3 Authority Key Identifier:
keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS65421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:ba:c5:ac:87:d5:a7:b9:aa:9c:6a:af:95:98:ba:3c:ad:e6:
f3:0a:8e:79:2c:2f:be:5f:81:2c:46:f3:26:83:95:be:d9:d3:
fa:0f:97:29:40:f3:4c:33:8a:4a:10:f5:3f:08:95:c7:aa:9e:
fc:ef:d6:36:75:fc:7d:a2:df:a2:73:8a:94:b2:44:40:96:23:
b9:c9:00:da:df:fd:d3:e0:1a:e5:3a:90:37:32:63:64:9b:f0:
98:a5:ef:29:41:05:e6:bd:46:fe:20:34:16:8c:9a:3d:eb:a4:
2d:4a:18:db:58:7b:d8:b9:ec:70:c6:d6:a8:55:00:67:69:a5:
ae:f4:c5:b0:c9:2f:75:0e:8d:75:8a:0a:0c:4e:cd:46:44:e9:
35:9a:f7:cc:c6:7c:5e:8f:96:61:d5:8d:84:f2:63:fd:98:1a:
b2:d5:d2:dc:b3:3a:fd:e8:0c:da:22:b3:09:1f:ca:42:97:3e:
4a:a9:37:de:88:17:b0:63:83:b1:d6:29:2c:0a:e0:42:36:6b:
bd:53:6f:8f:71:ea:1c:b9:03:f7:28:f3:a7:4d:e3:5c:35:f8:
2f:64:26:ca:1b:f2:44:2d:ad:ee:9f:35:37:50:94:75:94:11:
4f:98:9a:4f:57:89:45:4f:de:6a:b2:a6:59:de:b0:28:92:fe:
7e:6e:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:44 2025 by rpki-client