Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33322e302e302f31342d3234203d3e203238353733.roa
File: 3138392e33322e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier: 1FKFC7KDt+ySxqIVxfpCqfXtpdE/WTlwBVhUR+nYG3E=
Subject key identifier: 54:7B:38:EA:30:AB:90:78:EF:D0:E1:FC:5E:C5:D2:EF:C1:7A:F9:30
Certificate issuer: /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial: 604F74D664258E8AD9B947B096147EE6CAE16B92
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33322e302e302f31342d3234203d3e203238353733.roa
Signing time: Wed 05 Mar 2025 19:00:12 +0000
ROA not before: Wed 05 Mar 2025 18:55:12 +0000
ROA not after: Wed 04 Mar 2026 19:00:12 +0000
asID: 28573
IP address blocks: 189.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4f:74:d6:64:25:8e:8a:d9:b9:47:b0:96:14:7e:e6:ca:e1:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Validity
Not Before: Mar 5 18:55:12 2025 GMT
Not After : Mar 4 19:00:12 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:12:e2:3b:36:70:29:65:b5:74:30:c9:3d:5d:
96:6a:9e:ae:78:78:ca:7b:4d:20:b1:98:65:06:b7:
94:25:36:08:b1:8d:c2:4b:78:4b:09:22:48:c7:cd:
9f:e3:39:89:8b:9c:6b:30:06:09:be:07:c9:0a:45:
a1:d7:f0:a4:b7:e0:f9:56:6e:f2:f3:fa:02:f5:8d:
66:70:46:02:91:d1:40:59:11:c0:ef:4e:f4:f7:6a:
0d:46:6c:80:f5:39:c3:87:bd:80:57:f8:5f:1c:d4:
33:02:e7:ff:24:7e:cb:cb:54:ea:06:a4:c8:52:e6:
63:6c:8c:e7:b7:bb:c7:13:78:6e:38:81:45:2c:a3:
89:63:30:50:03:10:6b:85:e1:f1:e8:4e:df:6d:d0:
4b:d8:79:53:b4:aa:12:73:8e:fa:a1:2a:c4:e8:79:
5c:27:29:76:f2:64:52:fe:ea:99:fe:51:b1:5b:16:
b5:9b:d1:64:bf:3f:36:84:f2:6e:1b:f7:48:bf:6a:
8d:d9:d8:fd:77:ba:4b:47:b5:7e:a4:78:66:46:28:
a1:36:8f:b2:5e:76:ed:25:43:68:6f:f6:04:b0:04:
6d:ef:3a:35:90:a5:c4:3f:50:3d:cc:9e:41:ea:d5:
16:4a:a2:5b:d1:ed:9b:0f:fa:cc:0f:d9:e7:55:21:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:38:EA:30:AB:90:78:EF:D0:E1:FC:5E:C5:D2:EF:C1:7A:F9:30
X509v3 Authority Key Identifier:
keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e33322e302e302f31342d3234203d3e203238353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.32.0.0/14
Signature Algorithm: sha256WithRSAEncryption
c9:34:dc:c3:73:84:84:6d:d4:cc:be:25:09:4f:b6:20:52:7a:
74:d7:37:48:03:39:f8:e4:61:19:71:be:4e:f6:1a:92:0e:a4:
ea:20:8d:eb:39:be:fe:60:df:fa:a5:b7:18:6c:3f:c4:d9:4a:
a4:1f:7b:86:b0:d9:68:e1:38:66:9e:3a:5a:42:80:29:92:01:
ad:8c:d3:22:82:68:36:22:b3:d0:97:a6:9e:dd:3d:41:b8:13:
d2:2f:ea:e7:ad:c1:5a:51:06:58:5e:fa:bb:69:5b:24:99:a9:
35:97:1d:b6:b3:30:31:74:56:b4:79:52:36:c4:8d:09:20:94:
76:13:97:3e:37:34:91:2c:f6:86:33:47:b9:ad:6d:44:c2:a9:
03:ee:7e:ec:41:d2:f7:2b:3a:44:0e:17:32:2d:fc:c3:a8:cf:
2a:ae:c9:53:6d:c9:d7:3c:bb:2a:cb:94:d5:08:7a:bf:7f:ca:
23:9b:36:7e:95:64:9d:78:3d:61:ba:e1:ff:2f:ef:34:e2:b7:
46:07:a7:9a:3a:8c:64:a0:22:cd:5d:28:cf:f2:82:5a:18:e3:
d3:d7:ad:9a:04:ce:fc:18:f5:59:08:6b:8c:1b:88:9c:9a:8d:
d1:af:bc:a1:20:dc:70:9f:eb:4b:dd:2d:29:5e:fc:7b:77:c8:
b9:f3:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:28 2025 by rpki-client