Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37372e36342e302f32302d3234203d3e203238353733.roa
File: 3230312e37372e36342e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier: 2okPtYk8pnDtt95XUMYpEYya5jFRnJfdkHSWCldf4z4=
Subject key identifier: DF:84:88:E6:59:FE:EB:D2:8C:8F:49:9F:8A:BC:EA:66:D8:C3:22:58
Certificate issuer: /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial: 62B0B453916A92484E6C75ADC84AF6E6CDD95021
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37372e36342e302f32302d3234203d3e203238353733.roa
Signing time: Wed 05 Mar 2025 19:00:13 +0000
ROA not before: Wed 05 Mar 2025 18:55:13 +0000
ROA not after: Wed 04 Mar 2026 19:00:13 +0000
asID: 28573
IP address blocks: 201.77.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b0:b4:53:91:6a:92:48:4e:6c:75:ad:c8:4a:f6:e6:cd:d9:50:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Validity
Not Before: Mar 5 18:55:13 2025 GMT
Not After : Mar 4 19:00:13 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:c9:d4:96:9b:39:3e:4b:f2:b9:be:f8:dc:
40:26:39:c7:fa:6e:f0:44:cf:39:3b:26:0c:88:f2:
45:14:24:fe:39:8b:b2:90:7e:73:02:dd:9e:99:34:
12:8e:79:6a:13:5c:4c:ab:87:9a:b2:fc:4e:2e:fa:
78:0a:13:96:f6:d9:69:c3:74:ca:82:2a:4a:53:2d:
16:2d:60:bd:a9:d7:e7:2a:df:8d:1e:2f:7e:b4:3b:
04:a1:79:d7:13:e0:36:1c:ff:a0:1d:b2:08:fa:3d:
86:0f:b2:ed:7c:5b:55:dd:72:41:20:c7:c5:5f:67:
3b:f9:b3:90:55:6f:94:33:b3:df:4b:61:bd:f9:0f:
c6:bf:66:4f:1c:1f:fe:e4:f0:f3:de:ad:c0:dd:6c:
94:28:c4:3e:46:a6:ba:9b:21:49:da:42:d1:70:94:
ee:34:d0:2b:ba:fd:71:70:1b:17:64:2c:8c:1c:bd:
af:b0:c2:0b:c7:4a:c6:ec:09:58:d2:7d:7b:13:90:
d6:37:26:64:23:8e:03:78:d1:fc:f7:56:1b:1b:83:
60:7a:49:b7:92:b8:74:b7:30:03:69:e7:33:e3:9c:
86:bc:4f:32:23:85:4c:17:98:ea:19:42:96:08:e7:
95:cf:8a:af:92:53:3d:cc:42:73:e7:9b:90:ed:0c:
b2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:84:88:E6:59:FE:EB:D2:8C:8F:49:9F:8A:BC:EA:66:D8:C3:22:58
X509v3 Authority Key Identifier:
keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37372e36342e302f32302d3234203d3e203238353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.64.0/20
Signature Algorithm: sha256WithRSAEncryption
ca:07:94:ea:aa:91:1e:a0:c2:9a:7d:17:cd:a1:d6:72:9d:9f:
72:7f:c9:f1:77:cb:8b:3b:09:f1:4b:20:44:e7:44:3e:19:87:
94:d3:2a:aa:f9:b7:a5:a0:8a:00:c7:d1:65:f9:c3:65:c4:aa:
a7:4d:51:b2:60:c1:c4:5e:14:4f:7c:2d:b0:60:02:65:7a:57:
85:13:1b:e8:97:f3:4a:cd:1b:9f:58:f8:28:87:f1:6e:67:86:
fa:42:a4:ea:de:85:cb:88:00:2c:86:75:65:23:68:fb:0a:08:
23:42:a3:a2:01:f0:c5:38:41:e7:7d:ce:21:60:10:cf:79:16:
fb:50:35:3f:b4:53:ae:f3:3c:74:5f:08:08:47:5e:f0:64:31:
2c:cb:f7:ca:b4:f3:af:07:3a:1f:cc:8c:63:c6:61:6d:38:5e:
dd:27:77:1a:18:31:8e:80:1e:43:ed:5e:81:21:f3:ea:54:f9:
f3:dd:08:f5:2e:09:3d:5d:9f:d2:ec:8e:ea:3d:a4:53:8b:2e:
a3:0d:8d:13:6f:42:7b:fd:6f:be:2c:05:71:c4:4b:c1:1a:be:
c3:cb:d2:29:8a:d0:43:53:be:86:db:9e:30:18:ab:78:c7:cd:
53:2c:dc:81:b5:06:f5:36:b6:18:cb:a4:d7:a2:f9:e4:65:7e:
0a:43:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:15 2025 by rpki-client