Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa
File: 3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa (raw, json)
Hash identifier: 0A5gSKwdbjRbv4zskOoPc0kzNTIXYwvY5V7gkswLd5I=
Subject key identifier: 2B:11:3F:AA:5B:D4:9C:D0:EE:F1:EE:B0:D4:42:72:73:87:50:D9:BC
Certificate issuer: /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial: 1478C5977BBEFD4BE7BAFD5910DA50B44C860898
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa
Signing time: Mon 17 Mar 2025 15:03:41 +0000
ROA not before: Mon 17 Mar 2025 14:58:41 +0000
ROA not after: Mon 16 Mar 2026 15:03:41 +0000
asID: 61650
IP address blocks: 131.100.204.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:78:c5:97:7b:be:fd:4b:e7:ba:fd:59:10:da:50:b4:4c:86:08:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Validity
Not Before: Mar 17 14:58:41 2025 GMT
Not After : Mar 16 15:03:41 2026 GMT
Subject: CN=2B113FAA5BD49CD0EEF1EEB0D44272738750D9BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:71:4e:07:5e:3b:27:58:44:bf:96:b6:02:
ed:17:56:3f:d2:da:34:e5:1c:4b:21:2b:d2:5b:c4:
97:93:46:02:cb:62:fe:d6:93:c5:f2:5f:f5:50:9c:
f8:3c:fd:f8:c5:a1:e5:3c:16:a0:d4:fd:57:9c:19:
7b:86:ce:1a:f5:9a:2f:22:09:91:3d:c6:74:fa:e1:
b1:de:37:d2:5e:e1:45:93:f8:20:45:41:f3:91:15:
0c:84:f7:8e:43:25:d3:ba:a6:a2:1c:ee:06:44:b0:
b7:db:33:9b:f4:e7:db:7e:be:f8:7d:c6:a5:83:60:
40:1c:79:87:75:e3:dd:ec:ff:68:d8:6f:f7:66:2f:
36:15:13:08:56:1d:e0:f3:6d:37:50:e8:1c:1f:51:
3d:83:b7:f9:3d:1f:26:5a:41:14:e1:be:cb:6d:3a:
90:f6:86:3c:c5:1e:30:0b:39:09:fe:4e:1b:ec:4e:
18:10:20:be:0b:52:ab:e3:71:2f:8a:c6:0d:5b:d5:
1c:61:8b:d6:62:9f:2c:11:75:2d:ff:1a:68:90:6c:
56:12:53:05:c1:5f:ef:08:ae:ef:ee:b4:73:05:fd:
ad:6c:ea:f2:2d:9c:0f:49:3a:11:85:68:94:2d:d6:
9f:3d:a3:63:d0:77:c4:64:8c:e8:d5:ef:cb:1a:44:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:3F:AA:5B:D4:9C:D0:EE:F1:EE:B0:D4:42:72:73:87:50:D9:BC
X509v3 Authority Key Identifier:
keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.204.0/22
Signature Algorithm: sha256WithRSAEncryption
86:18:77:28:cb:13:fb:87:c6:4b:44:a9:85:8f:b5:36:9a:8e:
2b:5e:67:fb:23:95:b2:58:0a:51:82:fa:42:84:b4:de:fb:c6:
27:02:57:f6:2c:a2:f7:a4:e7:4f:65:63:1e:14:82:cf:ea:c9:
74:22:a3:d0:df:c8:39:fd:50:e0:84:6a:6e:a8:38:c6:61:7e:
37:34:74:7b:d8:f5:be:48:04:9f:01:d4:7f:e8:ff:ed:ca:b1:
d8:aa:54:61:05:23:d8:36:c2:3f:4e:13:d8:61:61:01:9a:c1:
41:86:8f:57:15:83:ad:ba:f5:25:b9:c6:ca:56:a9:62:e6:ac:
04:e7:2d:06:a9:01:7a:e6:10:d5:ec:ef:a0:6c:11:f2:c1:13:
9f:31:c6:aa:c1:37:93:70:a6:2b:3e:e0:ce:e5:33:82:5e:40:
13:e5:a5:89:3c:63:d7:2e:04:8a:af:ab:a0:4b:6f:fe:f5:20:
3a:7b:9e:66:7e:ca:43:44:4f:74:d8:d7:83:c4:ac:bc:18:87:
a0:f0:42:dc:02:e0:00:e4:b9:43:f2:24:16:dc:86:1e:0b:c5:
8d:eb:bb:e1:fb:21:61:b3:13:63:2d:ff:25:b6:aa:bc:58:e6:
b0:a9:d3:7f:7a:00:b6:2a:65:0e:f6:ef:aa:82:03:f2:10:69:
13:23:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:46 2025 by rpki-client