Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3134633a3a2f33312d3634203d3e203238353733.roa
File: 323830343a3134633a3a2f33312d3634203d3e203238353733.roa (raw, json)
Hash identifier: aSl8Cn1Z3EpiMuQiYqsM1Lxs8d18sc1hUgYaDGmc3rM=
Subject key identifier: C5:0A:D8:27:C1:C1:A3:BD:09:78:38:0E:FF:58:90:5C:BF:FB:1D:84
Certificate issuer: /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial: 3335F1CC477E04CFBEA73C6ED93189CD4DF4120B
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3134633a3a2f33312d3634203d3e203238353733.roa
Signing time: Wed 05 Mar 2025 19:00:09 +0000
ROA not before: Wed 05 Mar 2025 18:55:09 +0000
ROA not after: Wed 04 Mar 2026 19:00:09 +0000
asID: 28573
IP address blocks: 2804:14c::/31 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:35:f1:cc:47:7e:04:cf:be:a7:3c:6e:d9:31:89:cd:4d:f4:12:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Validity
Not Before: Mar 5 18:55:09 2025 GMT
Not After : Mar 4 19:00:09 2026 GMT
Subject: CN=3082010A0282010100B694397614CA96C83AE7C616E0AE6B6501277486DB1EBEAE30D81A0B538B0C4496A513C75F49FEB2DBEBDA9D5027BA79FC73ED2D05C55D9790392B49279E4D546FB1E7A89333D2E3CAF412B5D190A0CE53A7A2B6BE22A14DDB4E377367AFB7F2D57907B57D87914E6F24D875960FC2136A587548B19548B813372936875BE16455C8A88FCC2705DEC1DA6F3EB47C3C622E21F4029EB44D1E6A78849117FEE75547F1D17873FF90B7BFC2998D747CD7275843B6F06661B7419422C8F69351FC64A9F94B0F55D4BF0A9799B5282DC56F14B8DA6C75D7C497B5CF88101B4564B8B1FCCA9B3AAB68F432BC4F1C57FF89BFD923CFE6243D21001CD0E21F268F04F18D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:39:76:14:ca:96:c8:3a:e7:c6:16:e0:ae:
6b:65:01:27:74:86:db:1e:be:ae:30:d8:1a:0b:53:
8b:0c:44:96:a5:13:c7:5f:49:fe:b2:db:eb:da:9d:
50:27:ba:79:fc:73:ed:2d:05:c5:5d:97:90:39:2b:
49:27:9e:4d:54:6f:b1:e7:a8:93:33:d2:e3:ca:f4:
12:b5:d1:90:a0:ce:53:a7:a2:b6:be:22:a1:4d:db:
4e:37:73:67:af:b7:f2:d5:79:07:b5:7d:87:91:4e:
6f:24:d8:75:96:0f:c2:13:6a:58:75:48:b1:95:48:
b8:13:37:29:36:87:5b:e1:64:55:c8:a8:8f:cc:27:
05:de:c1:da:6f:3e:b4:7c:3c:62:2e:21:f4:02:9e:
b4:4d:1e:6a:78:84:91:17:fe:e7:55:47:f1:d1:78:
73:ff:90:b7:bf:c2:99:8d:74:7c:d7:27:58:43:b6:
f0:66:61:b7:41:94:22:c8:f6:93:51:fc:64:a9:f9:
4b:0f:55:d4:bf:0a:97:99:b5:28:2d:c5:6f:14:b8:
da:6c:75:d7:c4:97:b5:cf:88:10:1b:45:64:b8:b1:
fc:ca:9b:3a:ab:68:f4:32:bc:4f:1c:57:ff:89:bf:
d9:23:cf:e6:24:3d:21:00:1c:d0:e2:1f:26:8f:04:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:D8:27:C1:C1:A3:BD:09:78:38:0E:FF:58:90:5C:BF:FB:1D:84
X509v3 Authority Key Identifier:
keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/323830343a3134633a3a2f33312d3634203d3e203238353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14c::/31
Signature Algorithm: sha256WithRSAEncryption
26:f6:77:82:b2:6d:2b:39:cf:3f:96:91:f0:53:a9:87:47:c7:
9c:00:15:43:76:39:47:18:9f:c6:eb:7d:a0:19:5c:2c:db:f2:
43:b3:b6:26:c7:c5:1e:3f:c4:8d:69:e5:28:fc:b1:73:fa:96:
06:e9:a2:be:ac:a3:ab:18:95:a1:b5:4e:b6:15:87:fb:5a:f5:
9f:a6:92:25:83:a8:e4:bb:a8:3d:e3:f8:6c:84:c8:df:68:e8:
c9:1c:78:63:b8:23:9c:67:38:a8:b2:5f:dc:b1:7c:b3:95:5e:
8a:73:79:11:a5:42:72:57:51:b9:63:47:fa:64:45:13:06:ec:
8b:21:d9:fe:61:8c:18:c9:ac:47:3f:a7:47:a8:2b:0d:a4:92:
35:d5:e9:40:d5:36:50:71:81:a6:36:02:57:49:24:fe:fc:29:
48:a5:f0:69:7f:ce:64:40:8f:3c:07:c8:77:b1:fd:70:48:f6:
7b:d6:39:f7:b7:c2:4e:ab:ac:39:c6:27:58:5b:4a:a1:e4:de:
f1:bc:ac:8a:a3:28:42:a0:b5:66:67:bd:10:83:c9:01:ca:e2:
4b:6f:a7:c5:db:9b:9a:8e:ef:53:71:95:56:86:32:50:65:b4:
18:89:0c:1b:23:c9:98:72:79:04:dd:85:46:01:42:df:09:b7:
72:96:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:11 2025 by rpki-client