Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
File: 3138372e34392e31322e302f32322d3332203d3e203238313338.roa (raw, json)
Hash identifier: XR2FPap0/33wtiAxzZmPrPBQ375/u5IYFq0xLaw8Nuw=
Subject key identifier: C2:4C:D1:B9:55:FC:88:4E:47:C8:DF:D0:12:9E:38:8D:0B:DC:0D:29
Certificate issuer: /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial: 45AD77BED11A7319EDAB29EDC0F78F7F180AC613
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
Signing time: Mon 17 Mar 2025 15:03:40 +0000
ROA not before: Mon 17 Mar 2025 14:58:40 +0000
ROA not after: Mon 16 Mar 2026 15:03:40 +0000
asID: 28138
IP address blocks: 187.49.12.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ad:77:be:d1:1a:73:19:ed:ab:29:ed:c0:f7:8f:7f:18:0a:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Validity
Not Before: Mar 17 14:58:40 2025 GMT
Not After : Mar 16 15:03:40 2026 GMT
Subject: CN=C24CD1B955FC884E47C8DFD0129E388D0BDC0D29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:ac:d0:f0:93:e4:59:f5:c6:42:2a:3f:2b:
8f:16:3c:aa:94:4f:70:d3:2b:29:3f:d1:f4:a1:c5:
06:79:08:18:6a:cf:d9:d2:99:82:51:2c:ca:af:b1:
f6:e7:6c:c6:cd:da:cf:5b:42:74:50:c9:89:b1:9c:
9f:31:8a:21:81:7e:06:cb:18:84:69:67:03:7c:58:
8a:83:0f:83:cd:14:c7:f2:79:47:d4:c1:c9:8c:0f:
25:84:4d:d7:55:e4:84:a6:e0:c9:1f:f1:ae:bd:e3:
4d:59:f4:2f:56:8c:45:f0:ee:c8:64:0d:aa:df:60:
46:2a:52:04:95:c1:f1:18:52:7b:29:49:a2:c9:38:
9e:7c:4e:71:cd:c4:07:da:ab:5e:be:b9:8d:c4:10:
c9:e8:e9:23:f2:35:81:55:fd:bf:c4:e6:90:c0:7b:
de:d5:7a:41:e7:a4:1b:4b:09:97:52:5f:f0:4b:66:
24:01:b9:46:66:52:21:9d:6f:55:59:b4:a3:e2:98:
bc:00:99:a8:c3:6f:c8:ff:58:6f:92:08:61:54:bd:
ab:37:4b:f0:81:38:3a:21:4e:ab:39:f9:c2:1b:e9:
eb:da:6d:30:88:de:b7:8c:41:31:ad:f6:4e:a1:2d:
b4:f7:15:38:10:7a:a6:4e:dd:45:48:d7:a8:1e:36:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4C:D1:B9:55:FC:88:4E:47:C8:DF:D0:12:9E:38:8D:0B:DC:0D:29
X509v3 Authority Key Identifier:
keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.49.12.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:b6:ea:1a:7a:d7:1f:59:d7:ce:ed:cf:fc:7a:f7:f7:e4:87:
95:dd:d1:a1:96:1b:84:ac:17:a7:b3:ae:ee:b2:25:93:7f:50:
da:3f:cf:8f:91:b0:9d:88:df:e9:2e:64:3b:73:52:f0:78:41:
33:a8:ed:b4:3b:97:b9:f2:3a:ee:d6:e6:2f:a5:f3:b5:20:23:
4a:c1:2d:a2:3a:61:95:a4:4e:ab:0e:19:16:fd:61:99:d8:bd:
e1:d4:ea:83:bc:9c:f7:61:4b:6d:2a:6f:c3:39:cc:36:fb:59:
fd:ea:7a:ba:ea:e7:04:2d:26:c7:29:1c:87:6f:18:ee:a1:ed:
77:dc:b7:b6:fc:a8:c2:4f:c3:8e:25:9b:68:c9:4e:c5:08:c1:
38:80:b8:f9:42:be:99:a6:68:0a:77:3d:c5:9b:ca:8c:59:fc:
13:3e:64:cc:49:4b:e5:98:9f:d8:3f:1c:ca:8d:cc:46:24:95:
31:2a:74:b0:00:e3:b4:09:6b:1d:1a:e7:9a:8c:93:02:ac:b1:
be:cf:60:f9:14:12:24:64:36:e7:cd:8b:3f:d6:b5:13:f7:e2:
38:aa:10:b0:f5:ce:93:13:03:70:a9:a9:46:a9:6b:03:7c:24:
2d:1a:6a:e3:09:3e:a9:be:91:76:7d:52:f0:9f:b2:96:ef:51:
9e:b7:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:09:03 2025 by rpki-client