Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e32302e302e302f31342d3234203d3e203238353733.roa
File: 3138372e32302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier: EInfGanNLG1SZTt7EyLJ+68x7V7+/gkYscm/Y+PbkvQ=
Subject key identifier: 1D:0C:24:BD:27:44:1D:30:71:F8:6E:98:E8:06:E9:D6:59:62:B7:2F
Certificate issuer: /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial: 1021224609C82FD312680BDC825E30DBAA5D3976
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e32302e302e302f31342d3234203d3e203238353733.roa
Signing time: Wed 03 Apr 2024 18:31:43 +0000
ROA not before: Wed 03 Apr 2024 18:26:43 +0000
ROA not after: Wed 02 Apr 2025 18:31:43 +0000
asID: 28573
IP address blocks: 187.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:21:22:46:09:c8:2f:d3:12:68:0b:dc:82:5e:30:db:aa:5d:39:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Validity
Not Before: Apr 3 18:26:43 2024 GMT
Not After : Apr 2 18:31:43 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:1c:59:7d:54:9b:aa:b9:49:fa:ef:2c:c7:
bd:e7:ad:ea:f8:52:12:75:37:f7:de:c1:a2:5b:ac:
f4:68:9d:80:76:52:0a:ad:e2:ad:23:06:cf:ca:db:
44:59:c2:98:17:39:02:fe:be:e8:29:be:3b:ea:d5:
3b:a5:8a:1b:36:e9:c8:55:64:16:c3:28:69:86:d0:
83:d3:a9:5a:98:c4:85:d8:6a:d1:16:cd:5e:db:f6:
c0:e9:74:cc:36:a1:9e:c3:95:25:82:cc:6f:04:f7:
8f:14:75:3e:9f:bf:76:97:83:55:fd:fd:b9:cf:1b:
40:3a:4d:e4:d2:b4:96:56:02:13:31:1c:ed:05:4b:
0e:20:16:4d:71:08:e4:8d:69:b0:54:2c:a6:48:98:
3a:52:2a:78:86:d2:b4:1c:c6:95:f9:45:1d:d6:e9:
ea:83:bd:63:41:d4:44:96:9c:e8:6b:58:e8:93:fc:
26:11:10:02:0c:82:52:87:58:c1:e1:eb:b4:5f:e7:
ff:c1:f5:33:cc:6f:52:6c:0e:12:74:af:c8:73:9d:
b6:f2:4e:ab:6c:26:b3:33:92:11:bd:37:c5:6c:0c:
6a:df:53:48:97:6a:d6:a4:ec:ab:6d:c1:3e:28:7b:
aa:9f:bb:0f:5c:4e:f6:eb:92:0e:86:2e:c0:a9:43:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0C:24:BD:27:44:1D:30:71:F8:6E:98:E8:06:E9:D6:59:62:B7:2F
X509v3 Authority Key Identifier:
keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e32302e302e302f31342d3234203d3e203238353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.20.0.0/14
Signature Algorithm: sha256WithRSAEncryption
0e:34:e3:90:b2:09:14:66:0e:01:7b:59:96:93:43:ac:39:68:
f7:c5:2e:43:4f:1f:29:19:15:cd:ec:36:e5:d4:c5:2e:ba:aa:
76:e6:f7:45:f3:ed:6f:40:d2:a6:70:2e:ad:1b:f8:08:0e:88:
fa:aa:c3:40:21:8f:a8:d1:20:2c:48:3a:a7:e2:a5:f3:cd:c1:
90:22:9e:bc:37:48:6e:b2:16:d7:26:db:cb:7a:48:de:5f:25:
2e:65:21:40:69:2c:c6:bf:1a:f1:c0:c8:19:86:4a:2d:9d:d9:
4a:d4:ad:19:93:e4:6a:f1:ff:64:f3:8f:01:41:a2:0f:5a:63:
50:57:0a:7d:9c:4a:37:d0:13:9e:e4:87:f7:2b:69:3c:d9:a7:
b5:3c:20:be:50:52:4c:17:e9:03:61:aa:9b:00:0f:9e:1c:9b:
e8:20:38:a1:f5:e3:6c:18:4d:56:f1:b1:b2:28:bc:16:7d:b5:
99:b7:0d:01:7f:c0:49:ec:e6:b9:53:63:44:b3:27:a3:b9:80:
55:37:01:20:ca:97:eb:27:81:81:bc:c0:c1:1d:70:ea:23:9a:
3d:9f:c6:38:ed:50:30:ee:c3:b1:36:31:03:f2:58:4b:b3:a2:
94:5d:b1:b2:ca:ec:c6:b4:95:2c:c8:24:68:4a:80:7b:51:25:
a8:48:64:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:37:23 2025 by rpki-client