Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
File: 3138372e34392e31322e302f32322d3332203d3e203238313338.roa (raw, json)
Hash identifier: mjLWJCmGohkyjoSLZ0E82iC4kWbpx9bKTFkCu9seX1U=
Subject key identifier: 95:20:DD:6B:B4:52:8F:DF:D6:97:49:32:64:0C:0A:6B:75:A1:CE:5A
Certificate issuer: /CN=B90C4665B62CA51669AB68FE5718C2DF3E1AF674
Certificate serial: 4230D34F81CDCD6F9D86CF86AF27EA6CC93F1BF7
Authority key identifier: B9:0C:46:65:B6:2C:A5:16:69:AB:68:FE:57:18:C2:DF:3E:1A:F6:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B90C4665B62CA51669AB68FE5718C2DF3E1AF674.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
Signing time: Mon 31 Mar 2025 20:35:30 +0000
ROA not before: Mon 31 Mar 2025 20:30:30 +0000
ROA not after: Mon 30 Mar 2026 20:35:30 +0000
asID: 28138
IP address blocks: 187.49.12.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:30:d3:4f:81:cd:cd:6f:9d:86:cf:86:af:27:ea:6c:c9:3f:1b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B90C4665B62CA51669AB68FE5718C2DF3E1AF674
Validity
Not Before: Mar 31 20:30:30 2025 GMT
Not After : Mar 30 20:35:30 2026 GMT
Subject: CN=9520DD6BB4528FDFD6974932640C0A6B75A1CE5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:68:5a:f5:02:40:61:4d:e1:08:36:42:53:
34:17:a3:ab:bd:ca:e6:ca:e3:c0:cd:94:98:32:3f:
be:e4:92:45:23:31:02:a4:c2:f4:b0:d0:a1:39:55:
dd:5a:9f:91:13:f0:e3:c7:87:aa:f7:eb:32:4e:da:
e7:48:22:78:51:60:67:e9:fb:6a:09:ae:26:3f:ea:
7f:c6:7a:88:d0:11:ff:f0:dc:cb:38:d1:98:f5:ee:
f5:be:d6:c5:36:f0:85:9e:b9:b1:90:65:6a:b7:61:
77:b6:f0:17:86:49:77:4d:57:5f:b4:35:3d:c7:8b:
cb:b4:bf:04:63:ba:5a:cb:65:e9:88:2d:dd:3a:6f:
8b:a9:bc:58:45:fa:71:3b:7e:bb:27:bd:71:2c:0c:
b3:4e:b0:ec:75:0e:95:b8:02:c1:70:99:80:30:2d:
15:6a:ec:29:4f:7b:58:8a:c1:a5:d0:8c:79:8a:fb:
5a:6e:b2:fb:fe:ca:a5:96:80:a9:d2:93:33:82:8f:
f3:73:a9:40:23:9d:3e:c5:d8:81:6b:92:31:f9:26:
13:f9:8c:53:3e:d7:2b:0b:90:30:83:b7:c9:fc:0c:
fd:6f:56:89:79:fd:30:e3:c5:cd:e1:aa:a4:6b:81:
99:04:86:19:a5:b6:48:0c:87:88:ac:f1:04:e2:39:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:DD:6B:B4:52:8F:DF:D6:97:49:32:64:0C:0A:6B:75:A1:CE:5A
X509v3 Authority Key Identifier:
keyid:B9:0C:46:65:B6:2C:A5:16:69:AB:68:FE:57:18:C2:DF:3E:1A:F6:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/B90C4665B62CA51669AB68FE5718C2DF3E1AF674.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B90C4665B62CA51669AB68FE5718C2DF3E1AF674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3138372e34392e31322e302f32322d3332203d3e203238313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.49.12.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:58:85:c1:49:b4:38:60:1e:b7:dd:88:10:ff:85:e4:ac:24:
73:3b:38:20:06:e8:65:ce:20:0e:5a:ff:a0:17:e3:d7:d2:82:
fe:fd:a5:94:ea:56:25:3c:d0:46:f3:f0:fa:c8:96:cb:31:7a:
e9:63:16:61:f9:0f:27:3b:29:43:66:94:1d:8e:71:8b:2c:d1:
d9:05:bc:e8:3b:fd:92:1a:5a:e0:19:ed:1a:f9:0d:0d:5e:52:
96:9e:83:2e:23:c5:bb:f0:44:a6:3f:9f:56:df:dc:c3:6d:86:
65:00:5c:71:5b:27:a9:91:8e:0d:cd:f7:b6:98:1d:ee:7a:a4:
93:c4:7b:19:86:e8:e2:b7:e4:79:5f:14:80:21:f1:7e:66:ce:
d9:89:f5:6f:bf:ec:86:e0:53:71:f0:13:00:ed:8c:94:e7:ec:
ac:5f:1e:99:db:f7:11:6b:05:79:a9:1b:5f:e7:2d:09:0e:67:
f7:60:0c:1a:91:e3:cd:e6:e8:9f:c0:b1:98:98:99:60:05:34:
98:bb:6b:c9:ff:ec:61:af:83:f4:85:24:e7:35:74:75:78:a4:
6d:ea:d1:6a:72:5b:1e:0b:44:21:4e:63:62:3d:8b:fa:75:f3:
ab:81:c6:31:7c:14:9e:b1:3b:bc:47:41:49:df:90:28:d4:b6:
e7:97:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:54:01 2025 by rpki-client