Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3139312e3137362e302e302f31322d3234203d3e203238353733.roa
File: 3139312e3137362e302e302f31322d3234203d3e203238353733.roa (raw, json)
Hash identifier: tnnP7AKyeho+ZQh1oZ7FoXTAJzyr6YApVqM4VGhlhVg=
Subject key identifier: 71:2C:EB:93:4C:69:F9:8C:8B:EC:72:36:B3:93:46:D9:18:E1:D1:AE
Certificate issuer: /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial: 146E58034017049FE7993213487B0592980E205C
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3139312e3137362e302e302f31322d3234203d3e203238353733.roa
Signing time: Wed 05 Mar 2025 19:00:11 +0000
ROA not before: Wed 05 Mar 2025 18:55:11 +0000
ROA not after: Wed 04 Mar 2026 19:00:11 +0000
asID: 28573
IP address blocks: 191.176.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:6e:58:03:40:17:04:9f:e7:99:32:13:48:7b:05:92:98:0e:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Validity
Not Before: Mar 5 18:55:11 2025 GMT
Not After : Mar 4 19:00:11 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:eb:1c:0e:ae:8e:89:48:59:55:6a:14:93:
9d:dc:ce:3d:c5:4c:0b:23:88:1b:9e:50:3a:c1:8c:
f0:f5:de:53:42:71:64:c3:ca:49:09:d6:de:6c:91:
85:f3:34:b1:b9:95:2e:a2:ea:cd:6e:fb:ff:4c:6b:
11:ef:e2:cf:4e:2a:7b:f4:b1:88:92:72:81:4d:45:
ab:c4:1a:7d:6e:aa:b9:95:63:0f:0e:ef:68:53:cb:
4f:27:83:b5:6d:92:86:49:2c:6c:b3:7a:70:d8:6a:
54:b5:ba:a6:c3:80:9f:a9:fe:40:14:c7:51:c8:51:
5d:87:94:ba:87:fd:ec:29:2b:e0:6a:ca:11:52:9f:
0c:d5:26:b5:1a:b9:07:1b:7d:94:e2:9c:d9:ef:af:
06:63:9f:6e:7d:f7:6d:ee:b6:6e:4b:fd:02:a7:47:
4c:a6:90:f2:4e:c4:4e:67:ac:76:bc:0f:ca:cf:89:
52:65:d3:68:8c:a5:41:dd:6b:ca:99:23:5a:88:3e:
b4:90:0d:1c:14:70:3f:b5:fe:af:5d:49:5e:26:77:
ac:f0:fb:32:81:8b:e0:b0:b3:32:89:46:76:3c:02:
97:e8:dd:87:02:de:ca:ac:4c:50:57:26:7b:7a:28:
72:06:73:2d:e5:26:b8:15:7e:76:09:4c:c0:a9:d9:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2C:EB:93:4C:69:F9:8C:8B:EC:72:36:B3:93:46:D9:18:E1:D1:AE
X509v3 Authority Key Identifier:
keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3139312e3137362e302e302f31322d3234203d3e203238353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.176.0.0/12
Signature Algorithm: sha256WithRSAEncryption
a6:07:1e:d4:f5:6d:34:df:6c:ae:71:43:1a:61:df:22:22:23:
37:cd:47:7e:5e:03:ca:49:97:03:31:88:0e:4b:0c:fe:cc:a5:
b7:1f:3f:17:ed:95:ef:f7:c2:4c:36:85:4c:e3:cc:23:c6:ad:
f3:ae:db:2b:5e:b1:39:e4:0c:10:66:75:74:db:d6:55:85:ca:
ce:d8:82:59:ef:e2:2a:30:c6:80:23:d3:f6:1f:db:67:8e:85:
67:99:e9:39:d6:38:c6:47:02:59:1e:62:2c:8c:f9:2b:54:b6:
d3:13:98:35:79:e2:8c:d7:19:27:e4:85:0b:d6:2f:be:cb:65:
15:a1:c7:7b:de:bb:50:86:79:3d:ee:d7:78:ca:b8:8b:37:61:
4e:64:4d:45:ea:18:00:d7:2f:f7:a5:a9:5e:89:b6:4d:6f:a0:
79:f9:4c:67:79:2d:65:29:46:14:e3:bd:31:7c:88:b7:c1:47:
1b:33:4d:71:16:83:91:ff:f9:8b:2d:4f:db:9c:aa:fe:d6:cf:
8b:30:be:55:01:aa:f5:11:c7:e5:bf:e2:d1:dd:0c:3f:dc:4b:
a9:87:2e:28:27:cf:ce:94:b5:16:fe:b0:d9:fc:c8:bf:90:bd:
27:65:ee:b9:eb:35:0a:e9:4b:1b:88:48:4f:ba:3a:e5:c8:28:
be:73:fb:3e
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUFG5YA0AXBJ/nmTITSHsFkpgOIFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNTAzMDUxODU1MTFaFw0yNjAzMDQxOTAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Y5MkVCMUMwRUFFOEU4OTQ4
NTk1NTZBMTQ5MzlERENDRTNEQzU0QzBCMjM4ODFCOUU1MDNBQzE4Q0YwRjVERTUz
NDI3MTY0QzNDQTQ5MDlENkRFNkM5MTg1RjMzNEIxQjk5NTJFQTJFQUNENkVGQkZG
NEM2QjExRUZFMkNGNEUyQTdCRjRCMTg4OTI3MjgxNEQ0NUFCQzQxQTdENkVBQUI5
OTU2MzBGMEVFRjY4NTNDQjRGMjc4M0I1NkQ5Mjg2NDkyQzZDQjM3QTcwRDg2QTU0
QjVCQUE2QzM4MDlGQTlGRTQwMTRDNzUxQzg1MTVEODc5NEJBODdGREVDMjkyQkUw
NkFDQTExNTI5RjBDRDUyNkI1MUFCOTA3MUI3RDk0RTI5Q0Q5RUZBRjA2NjM5RjZF
N0RGNzZERUVCNjZFNEJGRDAyQTc0NzRDQTY5MEYyNEVDNDRFNjdBQzc2QkMwRkNB
Q0Y4OTUyNjVEMzY4OENBNTQxREQ2QkNBOTkyMzVBODgzRUI0OTAwRDFDMTQ3MDNG
QjVGRUFGNUQ0OTVFMjY3N0FDRjBGQjMyODE4QkUwQjBCMzMyODk0Njc2M0MwMjk3
RThERDg3MDJERUNBQUM0QzUwNTcyNjdCN0EyODcyMDY3MzJERTUyNkI4MTU3RTc2
MDk0Q0MwQTlEOTdCRDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz5LrHA6ujolIWVVqFJOd3M49xUwLI4gbnlA6wYzw9d5TQnFkw8pJ
CdbebJGF8zSxuZUuourNbvv/TGsR7+LPTip79LGIknKBTUWrxBp9bqq5lWMPDu9o
U8tPJ4O1bZKGSSxss3pw2GpUtbqmw4Cfqf5AFMdRyFFdh5S6h/3sKSvgasoRUp8M
1Sa1GrkHG32U4pzZ768GY59uffdt7rZuS/0Cp0dMppDyTsROZ6x2vA/Kz4lSZdNo
jKVB3WvKmSNaiD60kA0cFHA/tf6vXUleJnes8PsygYvgsLMyiUZ2PAKX6N2HAt7K
rExQVyZ7eihyBnMt5Sa4FX52CUzAqdl70wIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FHEs65NMafmMi+xyNrOTRtkY4dGuMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzkzMTJlMzEzNzM2MmUzMDJl
MzAyZjMxMzIyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwS/sDAN
BgkqhkiG9w0BAQsFAAOCAQEApgce1PVtNN9srnFDGmHfIiIjN81Hfl4DykmXAzGI
DksM/syltx8/F+2V7/fCTDaFTOPMI8at867bK16xOeQMEGZ1dNvWVYXKztiCWe/i
KjDGgCPT9h/bZ46FZ5npOdY4xkcCWR5iLIz5K1S20xOYNXnijNcZJ+SFC9Yvvstl
FaHHe967UIZ5Pe7XeMq4izdhTmRNReoYANcv96WpXom2TW+geflMZ3ktZSlGFOO9
MXyIt8FHGzNNcRaDkf/5iy1P25yq/tbPizC+VQGq9RHH5b/i0d0MP9xLqYcuKCfP
zpS1Fv6w2fzIv5C9J2Xuues1CulLG4hIT7o65cgovnP7Pg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:48 2025 by rpki-client