Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
File: 3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa (raw, json)
Hash identifier: OOoAw6ZgxmVuWbhgGKAFESeBISIAoSOG3xN0GfAvfCI=
Subject key identifier: D0:BA:0E:4D:F5:9F:D1:82:B5:60:EA:84:CC:17:3F:0B:F9:0B:5E:DC
Certificate issuer: /CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6
Certificate serial: 04DFCC117AF1E5A6F2180BEF8FDA42E57850201B
Authority key identifier: F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
Signing time: Wed 23 Apr 2025 14:52:29 +0000
ROA not before: Wed 23 Apr 2025 14:47:29 +0000
ROA not after: Wed 22 Apr 2026 14:52:29 +0000
asID: 262820
IP address blocks: 138.117.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:df:cc:11:7a:f1:e5:a6:f2:18:0b:ef:8f:da:42:e5:78:50:20:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6
Validity
Not Before: Apr 23 14:47:29 2025 GMT
Not After : Apr 22 14:52:29 2026 GMT
Subject: CN=D0BA0E4DF59FD182B560EA84CC173F0BF90B5EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:09:31:87:7f:dd:dd:ca:9f:2f:71:84:b6:
e8:3e:95:f1:d5:f5:37:09:65:6b:38:7f:66:4b:da:
27:4f:7e:bd:00:88:8f:17:a4:5e:a9:7c:e1:07:c1:
1a:2a:15:cf:ef:aa:47:25:9c:d5:d0:14:b7:f8:e1:
5b:3f:c0:af:70:01:b1:8c:82:67:e7:89:42:c0:bb:
43:c4:73:e8:95:38:c5:5d:40:71:8b:c2:79:d2:99:
85:b1:86:40:34:9c:97:f8:a1:a9:b4:18:a7:44:dd:
b6:fa:9d:07:70:eb:b5:fc:ce:e6:12:82:25:c6:40:
ce:6f:08:72:79:44:5a:b0:7b:5f:73:94:4b:54:f6:
da:7a:e3:2a:e2:d1:3d:45:3f:6c:95:ca:4a:9f:10:
d1:3c:3f:03:8b:50:f0:57:d4:af:d3:1a:33:f1:0e:
2e:3f:e3:88:f5:00:93:02:90:e8:72:3d:10:27:47:
89:b2:00:d4:10:6f:53:07:e4:3a:4f:a7:30:44:70:
e3:ea:d5:1d:aa:f4:ec:ab:50:3a:66:01:47:a7:ac:
49:c9:bd:a0:5c:f3:07:be:35:e2:c7:ef:67:d4:3b:
b0:4d:f0:f1:97:20:ad:6e:2b:82:d1:ee:c5:46:ab:
48:b3:8b:9c:80:1f:47:7f:19:51:ae:28:97:63:f2:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:0E:4D:F5:9F:D1:82:B5:60:EA:84:CC:17:3F:0B:F9:0B:5E:DC
X509v3 Authority Key Identifier:
keyid:F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/3133382e3131372e3132302e302f32322d3332203d3e20323632383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
72:ba:74:d4:f8:01:91:c4:af:d4:75:79:4a:22:d9:c1:7c:e5:
cd:ac:39:ea:0f:44:5c:cb:49:9b:6f:b0:b7:3f:05:a8:26:54:
4a:ae:81:ca:c8:71:f0:40:2e:52:f1:5c:e4:7b:1f:c3:f3:d1:
82:5a:5d:f6:15:2a:7a:ef:24:dd:10:76:aa:00:9c:e6:f8:dd:
0d:59:b7:be:3b:48:d2:84:81:73:9f:52:f9:b7:eb:20:93:1b:
77:d2:88:20:1e:23:fa:1d:72:0f:a6:0b:42:78:3d:40:74:7a:
96:07:04:1d:75:ee:0e:8a:01:94:94:6e:ed:20:e2:07:8e:d1:
de:b5:64:a3:9b:04:a4:b8:39:e2:ed:aa:c7:af:71:89:6b:3c:
f5:af:2c:fc:9b:a9:e7:09:a8:9b:38:1b:6b:1e:f0:ec:0c:d7:
60:f9:a7:d5:6e:0a:ff:da:47:f8:59:28:f7:4e:36:30:64:0c:
69:2a:19:71:27:b8:6d:e3:37:5d:a5:b2:06:b4:db:ea:5d:1d:
29:2f:48:47:56:91:7a:8c:8c:4f:38:8b:43:de:54:be:ed:a0:
90:1a:9a:2f:ae:f3:0f:5e:0c:5d:0e:2a:f9:27:9d:eb:92:ef:
ce:b8:86:08:f6:15:ce:fa:72:e8:1f:94:a5:3c:b8:52:08:c0:
7a:11:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:14:27 2025 by rpki-client