Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS262726.roa
File: AS262726.roa (raw, json)
Hash identifier: wqaLOeMEHjrA5ftNl5AbkcQ67tmYRpt3aCpXjXD9/wo=
Subject key identifier: 7B:EE:57:75:3B:E4:96:B9:3E:87:64:50:F4:F1:7C:40:42:6C:BC:55
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 347446B80D60E7C0B3C8542255F3B43B4DB70D3E
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS262726.roa
Signing time: Wed 10 Apr 2024 19:52:54 +0000
ROA not before: Wed 10 Apr 2024 19:47:54 +0000
ROA not after: Wed 09 Apr 2025 19:52:54 +0000
asID: 262726
IP address blocks: 168.227.108.0/22 maxlen: 22
168.227.109.0/24 maxlen: 24
168.227.110.0/24 maxlen: 24
168.227.111.0/24 maxlen: 24
170.82.92.0/22 maxlen: 22
170.82.92.0/23 maxlen: 23
170.82.93.0/24 maxlen: 24
170.82.94.0/23 maxlen: 23
170.82.95.0/24 maxlen: 24
186.192.16.0/20 maxlen: 20
186.192.16.0/21 maxlen: 21
186.192.17.0/24 maxlen: 24
186.192.18.0/23 maxlen: 23
186.192.19.0/24 maxlen: 24
186.192.20.0/23 maxlen: 23
186.192.21.0/24 maxlen: 24
186.192.22.0/24 maxlen: 24
186.192.23.0/24 maxlen: 24
186.192.24.0/22 maxlen: 22
186.192.24.0/23 maxlen: 23
186.192.25.0/24 maxlen: 24
186.192.26.0/23 maxlen: 23
186.192.27.0/24 maxlen: 24
186.192.28.0/22 maxlen: 22
186.192.29.0/24 maxlen: 24
186.192.30.0/24 maxlen: 24
186.192.31.0/24 maxlen: 24
191.241.40.0/21 maxlen: 21
191.241.40.0/22 maxlen: 22
191.241.41.0/24 maxlen: 24
191.241.42.0/24 maxlen: 24
191.241.43.0/24 maxlen: 24
191.241.44.0/22 maxlen: 22
191.241.45.0/24 maxlen: 24
191.241.46.0/23 maxlen: 23
2804:54:c::/48 maxlen: 48
2804:54:1001::/48 maxlen: 48
2804:54:1002::/48 maxlen: 48
2804:54:1e00::/40 maxlen: 40
2804:54:1f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:74:46:b8:0d:60:e7:c0:b3:c8:54:22:55:f3:b4:3b:4d:b7:0d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 10 19:47:54 2024 GMT
Not After : Apr 9 19:52:54 2025 GMT
Subject: CN=7BEE57753BE496B93E876450F4F17C40426CBC55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:d7:33:94:6f:93:52:b0:6c:68:8e:56:21:
5c:12:b6:fa:cb:73:e9:ae:2e:e3:91:f5:5c:a1:5a:
62:f6:93:cc:f9:c9:22:b0:a9:e0:b7:2f:f9:2b:24:
03:00:ea:aa:0b:de:81:0a:b6:fc:ad:c2:57:d1:f1:
b5:a9:52:2b:3c:2d:3f:97:c9:bd:1d:0a:b3:a7:8a:
d7:80:5b:62:68:b7:51:38:ae:72:0f:bd:c3:6a:e8:
6b:bd:fc:6d:a7:e0:fa:e2:d5:74:38:49:10:50:cb:
23:20:8a:d7:b2:c0:45:ab:f9:90:b6:36:26:a6:5b:
52:a9:2b:bb:ae:75:65:91:ae:9f:1f:c6:72:50:b4:
5d:95:75:44:cb:95:63:89:74:0e:0d:14:f3:27:10:
57:3c:2b:01:e0:00:b5:ea:b5:b0:f5:78:e7:b7:93:
4c:3c:69:63:f1:e8:87:1c:97:56:e1:c9:fb:1e:d4:
3a:54:c8:2b:bc:14:16:28:6e:b8:92:1b:9d:d8:49:
cd:9a:4f:7f:01:76:fa:3c:3a:1a:2a:8c:fd:c0:08:
aa:c5:71:0d:df:bb:84:aa:5a:b6:4b:32:73:1a:46:
3a:36:91:71:cd:b0:86:8f:9d:2d:82:bb:69:07:83:
c1:8a:71:26:47:7b:7a:c5:e4:64:ca:13:19:67:9d:
0d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:57:75:3B:E4:96:B9:3E:87:64:50:F4:F1:7C:40:42:6C:BC:55
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS262726.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.108.0/22
170.82.92.0/22
186.192.16.0/20
191.241.40.0/21
IPv6:
2804:54:c::/48
2804:54:1001::-2804:54:1002:ffff:ffff:ffff:ffff:ffff
2804:54:1e00::/39
Signature Algorithm: sha256WithRSAEncryption
5f:99:2a:cb:1b:93:d4:51:d9:88:ad:6f:9f:76:d8:ab:47:ca:
3d:04:61:27:59:ef:7c:3d:ed:e8:23:4f:fc:c2:e7:e5:1d:ba:
cf:dd:f0:e6:ed:18:8e:e7:26:4e:9f:8c:23:12:66:a2:91:4b:
57:11:98:6a:fb:9c:de:9e:92:79:07:77:5f:b8:4f:fa:a2:ce:
c7:3a:6a:73:c9:79:35:6d:ee:0c:68:4f:4a:bc:84:ce:f7:6c:
5d:f2:db:d7:f0:98:c4:1d:17:0a:2b:e8:1e:63:86:03:a6:6f:
90:fe:9d:13:6d:99:05:2f:72:7e:be:3b:e5:cb:2e:fe:36:1d:
81:d3:20:a2:d2:51:99:6e:29:72:16:73:26:26:98:a7:cc:84:
5b:4a:de:68:2d:2e:4a:c9:39:ea:01:61:f3:43:0a:6a:8a:a4:
89:37:74:90:89:5b:a0:c7:48:38:28:f8:2f:ce:3a:12:d5:22:
0f:2f:49:5f:45:89:a2:46:bc:b8:6e:12:72:a1:29:a4:45:88:
66:ee:bb:46:9d:cf:e6:42:35:03:b1:0b:b1:23:1a:6e:82:a4:
4e:be:00:66:86:fc:47:37:7a:26:db:c2:f9:dc:ed:57:dd:09:
0c:19:c6:78:95:c1:bc:f8:09:87:c5:a0:6f:f7:ad:9b:df:ae:
e1:29:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org