Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Di78tu3WjKbkfichUXJJmWs2LNBF8A1cw1TyvHL1fs3/0/AS264209.roa
File: AS264209.roa (raw, json)
Hash identifier: tJcyZMj0dL7jU2+Ads7TMPT2Md6amBaQxJcqFsrAIvM=
Subject key identifier: F6:29:51:10:A8:1A:ED:56:56:DE:08:35:D9:37:C5:E7:1D:31:80:FA
Certificate issuer: /CN=AE99472A810991844BAB99BFAFE3733A748E8150
Certificate serial: 0666BB571D8CDE50349051C51B40345E5C004520
Authority key identifier: AE:99:47:2A:81:09:91:84:4B:AB:99:BF:AF:E3:73:3A:74:8E:81:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE99472A810991844BAB99BFAFE3733A748E8150.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Di78tu3WjKbkfichUXJJmWs2LNBF8A1cw1TyvHL1fs3/0/AS264209.roa
Signing time: Tue 15 Aug 2023 13:04:52 +0000
ROA not before: Tue 15 Aug 2023 12:59:52 +0000
ROA not after: Tue 13 Aug 2024 13:04:52 +0000
asID: 264209
IP address blocks: 189.51.88.0/22 maxlen: 22
189.51.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:66:bb:57:1d:8c:de:50:34:90:51:c5:1b:40:34:5e:5c:00:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE99472A810991844BAB99BFAFE3733A748E8150
Validity
Not Before: Aug 15 12:59:52 2023 GMT
Not After : Aug 13 13:04:52 2024 GMT
Subject: CN=F6295110A81AED5656DE0835D937C5E71D3180FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:54:96:09:89:d7:f0:45:8a:fd:7c:e0:0b:
5f:b2:4c:6b:44:09:4e:e0:0d:c9:14:4c:b8:f5:d9:
59:c5:f8:b8:f4:72:87:97:51:e3:7e:1f:b2:81:cc:
64:92:78:3b:d6:cc:b2:0c:ce:c8:7f:22:61:cf:f8:
c6:f1:86:da:a7:a9:e7:5d:0c:9b:3f:51:ce:be:99:
37:15:3e:c5:72:90:5f:de:12:1c:66:da:e5:3d:43:
ef:66:19:9a:5d:6e:a3:8c:ac:45:a0:4e:12:3b:5a:
05:88:7a:5b:fe:1d:44:c8:ed:a8:9c:cf:51:d5:ae:
2e:b6:6b:8a:d9:76:aa:d4:e9:b4:00:74:02:91:4e:
39:85:1a:97:a4:82:37:68:ac:70:c8:d2:86:1e:88:
13:9b:b2:48:1f:c1:81:60:22:95:6e:95:06:e3:64:
5e:0b:40:eb:d7:c1:bd:e6:38:f1:c3:89:e1:f8:b6:
44:93:24:c5:ff:57:2b:65:ef:1c:6c:fb:49:d1:ac:
8a:8b:13:be:c3:6f:2b:e4:d0:20:f3:75:56:e6:34:
de:a7:1f:8d:71:26:6e:6b:bc:ea:89:a4:70:24:e8:
46:83:2f:ab:53:15:5b:48:b6:21:9e:fd:ab:ac:2b:
7c:b4:db:1d:89:d8:bb:31:79:21:22:76:e0:a6:7f:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:51:10:A8:1A:ED:56:56:DE:08:35:D9:37:C5:E7:1D:31:80:FA
X509v3 Authority Key Identifier:
keyid:AE:99:47:2A:81:09:91:84:4B:AB:99:BF:AF:E3:73:3A:74:8E:81:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Di78tu3WjKbkfichUXJJmWs2LNBF8A1cw1TyvHL1fs3/0/AE99472A810991844BAB99BFAFE3733A748E8150.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE99472A810991844BAB99BFAFE3733A748E8150.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Di78tu3WjKbkfichUXJJmWs2LNBF8A1cw1TyvHL1fs3/0/AS264209.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.51.88.0/21
Signature Algorithm: sha256WithRSAEncryption
45:04:d6:ca:e1:3e:32:e2:23:b4:14:1f:1a:b4:69:57:94:8a:
f8:29:1b:26:f7:20:58:09:91:91:59:41:8e:3b:93:e2:1b:44:
30:8a:80:bf:52:46:64:90:01:10:f7:34:83:6a:70:c9:46:79:
42:71:82:5c:b5:27:69:a0:8a:e3:d3:91:cf:36:e1:1d:a6:77:
65:a8:0b:9a:10:2a:b6:9c:40:bf:1f:94:2c:38:6b:0d:60:b2:
26:b3:d6:9c:ce:82:a4:46:7e:17:ba:b1:5e:3a:3b:91:3b:62:
0f:46:be:bb:bb:8a:43:1c:06:fc:d9:a9:d6:a3:c8:6b:ba:05:
7d:57:8a:d7:95:d6:a1:cb:dc:29:88:a3:ae:62:6c:eb:e5:8f:
2a:b7:c2:d7:ee:4b:96:99:88:07:53:cf:df:77:9a:d4:dd:ae:
a5:65:e2:2e:2d:71:67:92:73:05:47:64:f0:de:40:38:b6:4b:
77:ae:59:c6:aa:d6:18:f3:16:17:50:ab:b3:38:ed:c9:62:55:
a8:a3:4a:f6:8d:02:f2:c6:e0:d9:d9:44:96:54:4a:20:dc:00:
59:cc:3e:ee:9c:af:48:a7:9f:b7:c5:51:5a:98:94:d6:a4:a1:
3c:dd:ce:a4:50:6f:d6:8c:4d:b2:2e:35:3c:29:70:c3:d1:f3:
eb:68:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org