Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
File: 3138372e34392e31322e302f32322d3332203d3e203238313338.roa (raw, json)
Hash identifier: O5bGsG8EeVAqN1lRYwLxOgL1fsJJ2q0Lx4/DY8065iY=
Subject key identifier: 2E:61:00:F5:23:E5:85:99:C1:9E:AC:4F:E3:5E:61:CA:B1:E7:17:F7
Certificate issuer: /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial: 260DCD9BA04559E60DEC14075DAAA88C422B05B0
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
Signing time: Mon 15 Apr 2024 14:27:50 +0000
ROA not before: Mon 15 Apr 2024 14:22:50 +0000
ROA not after: Mon 14 Apr 2025 14:27:50 +0000
asID: 28138
IP address blocks: 187.49.12.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:0d:cd:9b:a0:45:59:e6:0d:ec:14:07:5d:aa:a8:8c:42:2b:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Validity
Not Before: Apr 15 14:22:50 2024 GMT
Not After : Apr 14 14:27:50 2025 GMT
Subject: CN=2E6100F523E58599C19EAC4FE35E61CAB1E717F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:0b:b2:83:46:af:93:18:f6:b3:7c:19:2d:
ba:99:3c:cb:fb:17:94:6b:13:25:12:04:dd:20:f9:
89:5e:34:88:77:22:eb:75:12:e6:31:4b:2b:b7:59:
ea:d8:2f:27:fd:d6:f0:52:36:9d:70:e8:3f:c2:a3:
2a:d7:37:30:d5:17:11:ba:e2:3d:61:ad:cb:cb:6b:
45:f5:4c:87:c2:aa:ea:da:9c:80:aa:69:7a:4c:36:
8b:b2:0f:30:64:4c:fa:e5:b2:fc:b4:55:f1:be:f2:
24:5e:fa:9f:dd:db:aa:d8:b4:17:ab:92:2d:98:7b:
f1:6b:f6:8d:24:69:2b:a7:87:a6:6d:b0:7f:68:78:
ac:99:5f:10:a2:a3:29:ef:6a:94:5b:92:b2:5f:4e:
23:b6:3b:da:e0:cb:cd:c0:47:f6:55:95:d9:a8:87:
b9:af:0c:3d:74:30:d8:95:f9:cb:01:a9:54:c5:49:
0a:36:49:be:1e:09:d9:9f:91:30:68:20:e5:60:52:
bc:8b:ca:f9:44:8d:05:a1:5c:72:e7:4a:0b:3a:0a:
57:91:05:e0:1a:21:87:8e:a9:b3:e2:36:e2:f5:7b:
c1:8f:35:40:c4:97:e3:02:71:53:78:b9:81:20:2a:
22:8e:94:a0:f7:bd:2a:5c:7c:08:61:6a:52:f2:be:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:61:00:F5:23:E5:85:99:C1:9E:AC:4F:E3:5E:61:CA:B1:E7:17:F7
X509v3 Authority Key Identifier:
keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.49.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:eb:8a:f9:ab:5f:e7:92:a8:8b:f7:d0:18:53:61:a1:19:cd:
f4:04:3e:0c:1d:df:7b:b7:14:46:79:13:7b:2d:d5:08:b9:f4:
10:92:b9:b9:80:33:77:a9:71:e4:04:77:53:ae:ab:ec:31:8c:
8c:3b:80:5f:37:99:e4:09:22:38:c9:03:88:d0:d0:d3:91:4c:
3b:61:98:21:aa:e3:fb:0a:af:e2:c2:59:ac:a2:ec:5a:07:f6:
d9:b1:c3:e4:2a:54:19:b1:b4:ac:de:fa:41:38:6c:f2:91:a7:
26:7b:cc:1b:c9:32:e5:4e:a1:bf:a9:b3:e6:b0:4d:28:91:58:
6f:cd:b8:e0:eb:94:32:61:a3:2c:53:53:78:2b:5c:3d:1d:c7:
ec:c0:d0:7d:2e:b5:73:4e:e8:76:7b:49:13:ab:37:7c:cd:8a:
b2:0b:b4:93:84:50:63:7d:ef:df:e4:ad:0e:ac:d2:4b:03:29:
5c:5f:b9:34:fd:bf:5d:f6:fa:11:00:7f:d0:a4:6f:62:22:c6:
73:ed:2f:c3:a2:3f:9a:d3:75:bb:1e:8f:19:3d:46:48:2c:28:
82:99:e5:00:11:5a:cf:ad:22:a7:cc:d2:eb:b9:93:76:b4:3a:
72:9d:67:1a:54:c8:4f:eb:68:0d:d3:aa:e5:f3:34:0b:ec:1e:
78:16:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:34:09 2025 by rpki-client