Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa
File: 3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier: rsJSTTFSKY9lIwGmazOb09kqK8z0fE7wxaVM8jnVlWI=
Subject key identifier: A1:85:4C:08:AF:71:B4:9C:5D:AA:8B:37:58:32:C5:2E:CE:64:C5:27
Certificate issuer: /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial: 3312CD6DCBDB00293FE635D96C39B59185051435
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa
Signing time: Wed 03 Apr 2024 18:33:08 +0000
ROA not before: Wed 03 Apr 2024 18:28:08 +0000
ROA not after: Wed 02 Apr 2025 18:33:08 +0000
asID: 262891
IP address blocks: 177.23.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:12:cd:6d:cb:db:00:29:3f:e6:35:d9:6c:39:b5:91:85:05:14:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Validity
Not Before: Apr 3 18:28:08 2024 GMT
Not After : Apr 2 18:33:08 2025 GMT
Subject: CN=A1854C08AF71B49C5DAA8B375832C52ECE64C527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:7a:e6:84:f5:90:7f:d5:ab:3d:23:c4:4b:
d7:7f:a4:b8:56:44:66:6a:c1:d9:60:1f:67:cf:2d:
24:ac:e6:9d:59:cc:a7:cd:6a:1d:89:72:66:72:a5:
9f:74:b7:ca:5e:5a:0d:e7:bb:8f:85:2c:4c:7d:01:
1c:b1:7c:f8:9d:ec:2a:85:8f:be:3e:3a:2e:b0:1e:
05:00:53:bb:0f:13:2c:01:19:65:00:90:88:88:6e:
a6:80:d3:2b:ba:1f:50:67:26:93:e0:ff:45:24:d4:
ab:e4:3b:7e:e5:a4:26:c6:90:f9:9e:df:7c:68:25:
6c:79:18:a3:d4:6f:67:e2:af:0c:02:8e:bf:47:a9:
fe:95:ea:18:d2:ce:02:b0:79:c3:58:8b:5d:f5:37:
c0:f4:d3:d4:68:6e:7b:7a:e4:41:1e:2e:2f:1e:28:
a4:11:11:8d:b4:3d:f1:7c:1a:11:9d:8a:7e:89:8f:
bd:12:80:ee:db:5e:9a:db:2f:10:27:d5:f7:8d:54:
b8:94:bb:d4:ef:03:49:d5:50:4b:21:b9:21:db:24:
76:7b:8f:5e:3e:61:d3:43:7c:f6:e2:d4:80:bc:90:
d6:fb:de:1c:d2:d6:ab:3c:8b:e4:24:f9:98:73:de:
2d:59:70:08:1a:5a:14:82:9d:59:a2:96:e9:71:d0:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:4C:08:AF:71:B4:9C:5D:AA:8B:37:58:32:C5:2E:CE:64:C5:27
X509v3 Authority Key Identifier:
keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.23.64.0/21
Signature Algorithm: sha256WithRSAEncryption
02:cd:59:5c:d1:5c:0c:ac:b7:09:c5:da:69:e8:dc:c1:98:9d:
7f:93:e4:4a:f4:f5:02:31:2f:89:10:e4:25:31:e2:ff:e1:b8:
39:34:45:4b:91:59:fb:cf:78:4d:3c:a0:00:38:02:d8:f0:0c:
4c:94:fe:da:e2:80:fb:ed:a5:7f:bb:ff:7c:d7:d2:a2:8a:1e:
85:85:61:43:76:97:60:80:82:13:66:dc:c4:df:4a:d4:1f:b8:
8d:eb:e4:c3:60:90:8b:5a:6a:8a:a2:4a:22:93:b6:b5:d7:7f:
18:93:76:29:29:7d:db:be:e2:1e:9a:77:c9:ab:3d:c6:9d:c0:
db:c6:c2:2a:93:eb:49:11:1e:02:d2:d2:a2:3c:ed:d1:51:95:
41:56:81:be:37:20:ef:56:e6:09:85:be:17:e9:a9:2a:5b:4e:
33:d6:eb:87:45:e3:e4:8e:0f:8f:cf:ab:f2:cc:39:80:72:7a:
7f:52:06:27:6c:89:2a:e1:a2:9a:30:ff:9a:7d:4c:96:50:4c:
eb:ec:91:3e:3a:81:ce:d4:e3:09:7f:e0:e3:17:1d:12:98:1f:
4b:94:60:f2:78:6e:12:5c:ad:6b:45:df:8a:6d:c7:b5:29:8f:
bc:f2:0b:1d:71:e2:a6:65:7d:91:92:b1:b5:75:02:a9:60:a5:
6d:dd:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:55 2025 by rpki-client