Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3132362e31362e302f32302d3234203d3e203238353733.roa
File: 3138392e3132362e31362e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier: 1VoP4NDPKZ0R2gxG0yVE5kVxE5iV/H54wSaiq7Lo87c=
Subject key identifier: 6E:F8:24:8E:80:0C:34:09:61:59:E5:AB:10:E4:93:F6:86:9F:D1:27
Certificate issuer: /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial: 351DA574F2F5354E8B678E06FAADABFD9C859A51
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3132362e31362e302f32302d3234203d3e203238353733.roa
Signing time: Wed 05 Mar 2025 19:00:11 +0000
ROA not before: Wed 05 Mar 2025 18:55:11 +0000
ROA not after: Wed 04 Mar 2026 19:00:11 +0000
asID: 28573
IP address blocks: 189.126.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1d:a5:74:f2:f5:35:4e:8b:67:8e:06:fa:ad:ab:fd:9c:85:9a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Validity
Not Before: Mar 5 18:55:11 2025 GMT
Not After : Mar 4 19:00:11 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:3b:ec:54:8a:cc:33:4d:a3:1e:ee:7d:b3:
32:78:7f:68:05:77:d2:b7:b4:8a:b8:9f:a1:31:c8:
0c:95:71:ec:ed:6a:c8:6c:5a:0e:9c:0d:ed:54:75:
9c:44:f3:e8:4b:30:6f:fb:c4:69:2f:3d:aa:aa:02:
ba:33:4a:f7:b3:98:c9:33:99:94:93:68:00:6a:98:
52:90:e9:66:8d:13:ac:5b:a0:e9:24:65:3f:eb:08:
63:7c:6c:96:40:15:4b:2f:e5:74:55:d1:d7:ae:49:
ad:62:dc:d2:d2:39:9c:64:8e:3d:93:4a:4b:d1:5f:
e0:38:5a:5a:5c:05:5d:2c:6d:cd:ce:62:44:09:a8:
df:0d:02:7f:b7:b0:35:b8:9f:30:62:16:ab:74:fc:
32:f3:ca:62:fe:6e:ec:8e:12:1d:d2:bc:80:2b:9f:
24:9a:db:8b:6c:de:ba:e5:d8:38:77:29:27:06:8d:
c5:36:1b:29:1f:1a:c4:a3:4e:6b:00:5b:24:75:5c:
cf:0a:95:47:1d:5f:ea:8a:24:4a:c0:a3:e1:6a:b7:
cd:a1:aa:d3:fc:04:19:39:a8:7c:bd:52:a1:ee:0d:
92:c9:1c:c8:63:37:94:ee:c3:e0:fb:03:0a:7a:2d:
10:a5:36:56:e4:2e:1f:19:99:33:6f:af:c8:0a:9d:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:24:8E:80:0C:34:09:61:59:E5:AB:10:E4:93:F6:86:9F:D1:27
X509v3 Authority Key Identifier:
keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e3132362e31362e302f32302d3234203d3e203238353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.16.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:33:de:bd:30:46:fa:6f:64:e4:86:e0:77:48:80:48:b3:eb:
f7:7c:ca:61:80:dd:97:d0:f0:e3:eb:4e:7a:43:3c:74:d0:5f:
a6:74:40:4e:c8:5c:c0:16:bf:79:5e:3d:5d:54:38:93:f8:10:
f7:43:58:d3:c5:d2:93:ee:f3:f3:14:8d:eb:75:c1:2d:ba:65:
13:43:da:91:44:c5:34:b5:41:db:c2:67:eb:f8:02:e0:2e:de:
10:01:7a:f6:85:79:3a:36:77:35:af:3d:7f:01:c5:39:52:81:
31:eb:8b:cc:38:82:95:7a:8e:a4:e5:00:a6:9c:16:d9:52:2c:
f5:75:6f:a0:a6:29:1f:bf:4d:fd:b0:b6:f8:17:5b:08:80:cb:
56:35:4c:fd:47:17:8a:75:b3:1f:ff:52:86:00:ad:66:67:b4:
42:f2:4a:e3:1d:5b:9f:81:b2:ed:98:b7:33:c0:3f:63:5e:eb:
be:b6:cb:ad:f9:07:d4:3b:77:ca:40:63:2e:29:43:83:66:7d:
36:e8:68:1f:73:61:64:18:94:53:14:d9:8d:fb:bb:42:8c:66:
ef:e7:7c:9c:5d:58:61:f8:66:e2:31:9e:93:25:7b:aa:42:7d:
cf:f4:c5:16:ff:4e:2d:7d:54:68:24:45:e4:2b:9e:53:83:4a:
c9:c2:02:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:44:54 2025 by rpki-client