Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa
File: 3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa (raw, json)
Hash identifier: /uDCbXCUR82CbFhssScEltM4zne1ybW8+c3eD2W6q8I=
Subject key identifier: 5D:6A:83:C4:D7:7F:98:9D:E8:79:22:73:78:DD:36:5B:AD:EC:44:47
Certificate issuer: /CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Certificate serial: 7875ABD29827E846B24DBEEB34F913F787DC8D66
Authority key identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa
Signing time: Tue 23 Jul 2024 21:05:50 +0000
ROA not before: Tue 23 Jul 2024 21:00:50 +0000
ROA not after: Tue 22 Jul 2025 21:05:50 +0000
asID: 265897
IP address blocks: 128.201.196.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:75:ab:d2:98:27:e8:46:b2:4d:be:eb:34:f9:13:f7:87:dc:8d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Validity
Not Before: Jul 23 21:00:50 2024 GMT
Not After : Jul 22 21:05:50 2025 GMT
Subject: CN=5D6A83C4D77F989DE879227378DD365BADEC4447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:5a:aa:84:e6:a0:b7:38:2a:17:09:b4:9f:
9d:dd:88:38:65:d6:a9:72:f5:ef:0d:60:b0:5f:04:
34:11:95:50:92:d8:e1:10:33:8f:82:16:0d:c9:1c:
8a:85:dd:a1:f9:f3:53:e5:f1:ff:6b:76:3f:e4:be:
b7:57:4f:02:92:e1:97:69:4b:e7:76:f8:55:38:8c:
0e:b3:95:bf:ad:d2:9e:44:0a:3e:eb:8f:bb:93:10:
61:a5:cd:cd:1d:52:e5:50:2b:2e:f1:ae:12:8d:53:
0a:9a:8c:3f:32:6b:81:d5:36:32:ec:e6:d4:31:ba:
32:13:5a:53:49:22:16:4d:80:75:b1:c6:45:fa:d6:
2f:52:c1:34:26:2c:aa:66:0f:50:61:8d:da:15:f4:
ff:67:4e:55:44:e9:1a:d2:41:ef:c6:4b:92:79:91:
17:85:22:85:10:88:9d:83:aa:80:fd:25:c8:63:da:
e4:da:83:32:49:68:94:75:bb:58:99:1e:0f:3d:67:
2d:a1:41:05:96:51:9a:78:35:f9:d7:34:af:b8:84:
47:bf:f5:1b:05:81:69:f3:c9:ed:49:c1:a2:99:89:
c8:f8:69:a2:d6:80:e3:88:62:6b:38:14:47:49:43:
c5:fd:58:14:89:2f:51:20:8e:52:1b:96:ca:42:6d:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6A:83:C4:D7:7F:98:9D:E8:79:22:73:78:DD:36:5B:AD:EC:44:47
X509v3 Authority Key Identifier:
keyid:5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.196.0/22
Signature Algorithm: sha256WithRSAEncryption
75:41:ce:06:59:bb:30:15:2f:53:6a:b7:02:18:c8:b9:f6:5a:
ce:7f:16:2e:98:70:34:36:5e:c8:69:4f:08:bd:ab:7b:8e:b3:
fc:ab:c8:e2:f4:68:c9:2a:97:58:6b:c6:5b:c6:5a:34:c8:7e:
e0:99:22:fd:ff:fd:6e:f9:1e:93:7c:09:ab:4f:6c:10:54:fb:
f8:9f:e9:c8:de:83:7e:23:98:5b:89:22:46:62:f4:e4:a3:60:
8a:ac:8a:e3:65:38:5d:d9:ad:d3:a3:9f:23:49:c6:ba:86:3a:
08:2a:e5:0d:be:4e:92:11:b9:b8:ce:16:8f:52:08:6a:00:bf:
f2:9b:ff:61:85:34:dc:6b:24:d6:ae:cf:09:48:12:9e:03:a1:
f1:15:08:fd:d7:45:c3:2a:98:10:42:31:8c:19:de:e7:67:1a:
51:7c:0a:cf:54:bf:75:13:b5:62:62:ae:28:c3:34:25:86:f0:
1a:75:3a:42:0c:58:12:64:32:ce:cc:2e:b2:eb:d1:b9:cb:2b:
c0:69:01:64:a0:82:01:db:4d:00:4f:49:84:84:37:1b:19:4a:
95:99:9e:e0:88:bf:e3:80:f6:05:1f:56:c1:3d:1b:1b:1e:60:
25:95:39:a1:16:2c:92:b0:ba:df:23:64:d4:de:93:ed:2d:87:
c7:9c:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:43 2025 by rpki-client