Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3132302e302e302f31342d3234203d3e203238353733.roa
File: 3138392e3132302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier: AeQ+k6I/OEhjv/n913tvSHSYleChJlbYSPZaRS1OyFo=
Subject key identifier: 16:02:FD:12:87:5D:88:44:60:95:3D:89:58:05:66:11:DE:AD:86:9F
Certificate issuer: /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial: 4DFFA58D8CFC71281BB7BC99B711D2BAB242DE30
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3132302e302e302f31342d3234203d3e203238353733.roa
Signing time: Wed 05 Mar 2025 19:00:14 +0000
ROA not before: Wed 05 Mar 2025 18:55:14 +0000
ROA not after: Wed 04 Mar 2026 19:00:14 +0000
asID: 28573
IP address blocks: 189.120.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ff:a5:8d:8c:fc:71:28:1b:b7:bc:99:b7:11:d2:ba:b2:42:de:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Validity
Not Before: Mar 5 18:55:14 2025 GMT
Not After : Mar 4 19:00:14 2026 GMT
Subject: CN=3082010A0282010100CD115B01E1E573961C61EB05484CEA150482DBE0484EA567E8F8DB97D33234623445929D5FE8147977BDD91CDE4A231F3FD9C5DF207918F017C87DD0AFC933FC663E2AC5BC5652597C0788EDC4E8E4FAD9524C04EEEE051FA05FFCEB5F6F06A938EB67AC34C1B58B2CB8E274E7B623D7A25A0AB460C89D30CFB197970CCE636DD6FE47604FF0A652C57DC368FFE5B8438C753CE0C96EC1B667D99FF2DFF6EAC83F71A96CEA8E24EF42C4754AEDE55B522A6923230E542089242B6E085F45B1B62155EAAD261F33A9F991643215134AD15455A04CC0D728EABCBC02960BEF193223F33FF09DFE467DD3DAC28ABC39100F727575417F9533D8A2662BA0017A61230203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:5b:01:e1:e5:73:96:1c:61:eb:05:48:4c:
ea:15:04:82:db:e0:48:4e:a5:67:e8:f8:db:97:d3:
32:34:62:34:45:92:9d:5f:e8:14:79:77:bd:d9:1c:
de:4a:23:1f:3f:d9:c5:df:20:79:18:f0:17:c8:7d:
d0:af:c9:33:fc:66:3e:2a:c5:bc:56:52:59:7c:07:
88:ed:c4:e8:e4:fa:d9:52:4c:04:ee:ee:05:1f:a0:
5f:fc:eb:5f:6f:06:a9:38:eb:67:ac:34:c1:b5:8b:
2c:b8:e2:74:e7:b6:23:d7:a2:5a:0a:b4:60:c8:9d:
30:cf:b1:97:97:0c:ce:63:6d:d6:fe:47:60:4f:f0:
a6:52:c5:7d:c3:68:ff:e5:b8:43:8c:75:3c:e0:c9:
6e:c1:b6:67:d9:9f:f2:df:f6:ea:c8:3f:71:a9:6c:
ea:8e:24:ef:42:c4:75:4a:ed:e5:5b:52:2a:69:23:
23:0e:54:20:89:24:2b:6e:08:5f:45:b1:b6:21:55:
ea:ad:26:1f:33:a9:f9:91:64:32:15:13:4a:d1:54:
55:a0:4c:c0:d7:28:ea:bc:bc:02:96:0b:ef:19:32:
23:f3:3f:f0:9d:fe:46:7d:d3:da:c2:8a:bc:39:10:
0f:72:75:75:41:7f:95:33:d8:a2:66:2b:a0:01:7a:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:FD:12:87:5D:88:44:60:95:3D:89:58:05:66:11:DE:AD:86:9F
X509v3 Authority Key Identifier:
keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3132302e302e302f31342d3234203d3e203238353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.120.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a1:70:2a:39:2d:f1:63:b4:01:4a:02:3b:f4:04:af:68:d9:1c:
ef:d4:57:78:6a:9c:b2:4c:35:15:be:4a:13:72:68:55:13:af:
e0:88:5c:89:76:35:ae:a3:e1:77:31:a3:a3:2b:e4:b5:1b:70:
5b:41:1e:67:7f:1f:ee:66:45:0b:c4:96:9b:80:4b:fc:3c:0c:
b5:f8:32:fb:a6:89:a8:78:28:97:b4:fe:53:0f:4f:e4:28:fd:
de:7a:24:c0:65:2d:a1:66:8b:da:94:f0:7a:97:e1:91:bf:c4:
67:1b:11:a2:bf:d0:9d:70:12:27:a8:8e:d5:c9:4b:c3:ec:ab:
93:2a:e4:02:53:ec:7a:f3:d6:50:49:ad:23:38:ef:d0:02:7f:
40:ab:14:51:a4:61:6e:5b:36:3e:f9:e8:a9:ef:66:19:25:45:
67:0a:3f:94:41:d3:b8:dc:77:f0:7b:88:3c:a9:64:5a:a7:74:
79:97:23:39:09:40:c5:a3:79:5e:2a:de:7a:c9:a3:ee:3b:99:
ed:e9:96:ab:97:8d:e6:27:8d:56:82:95:ce:5f:46:98:46:28:
2b:80:cf:83:e1:ce:c2:9a:af:49:e3:13:8d:ce:a4:58:e9:ba:
da:b0:15:47:98:34:85:9e:10:7a:b7:a8:3d:3f:93:6a:55:21:
5f:61:b4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:02:44 2025 by rpki-client