Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS53059.roa
File: AS53059.roa (raw, json)
Hash identifier: TyD0uBgjsHLyTrYZYzKiJZTrK9FIT/+CObmmBCyjOAA=
Subject key identifier: D5:DF:BF:F2:FB:77:2D:C5:A1:9D:92:35:4C:26:CB:31:50:1A:62:5F
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 66FA6DA85D72A819EEA728F0D9D1EF9F95AA2F91
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS53059.roa
Signing time: Sat 13 Apr 2024 21:09:39 +0000
ROA not before: Sat 13 Apr 2024 21:04:39 +0000
ROA not after: Sat 12 Apr 2025 21:09:39 +0000
asID: 53059
IP address blocks: 138.0.100.0/22 maxlen: 22
168.228.68.0/22 maxlen: 22
177.137.193.0/24 maxlen: 24
177.137.194.0/24 maxlen: 24
177.137.195.0/24 maxlen: 24
177.137.196.0/24 maxlen: 24
177.137.197.0/24 maxlen: 24
177.137.198.0/24 maxlen: 24
177.137.199.0/24 maxlen: 24
177.137.200.0/24 maxlen: 24
177.137.201.0/24 maxlen: 24
177.137.202.0/24 maxlen: 24
177.137.203.0/24 maxlen: 24
177.137.204.0/24 maxlen: 24
177.137.205.0/24 maxlen: 24
177.137.206.0/24 maxlen: 24
177.137.207.0/24 maxlen: 24
179.96.240.0/20 maxlen: 20
186.193.96.0/20 maxlen: 20
186.208.213.0/24 maxlen: 24
186.208.214.0/24 maxlen: 24
186.208.215.0/24 maxlen: 24
186.251.113.0/24 maxlen: 24
186.251.116.0/24 maxlen: 24
186.251.117.0/24 maxlen: 24
187.49.192.0/20 maxlen: 20
187.87.112.0/20 maxlen: 20
200.233.80.0/20 maxlen: 20
2804:2140:100c::/48 maxlen: 48
2804:2140:1016::/48 maxlen: 48
2804:2140:1020::/46 maxlen: 46
2804:2140:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:fa:6d:a8:5d:72:a8:19:ee:a7:28:f0:d9:d1:ef:9f:95:aa:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 13 21:04:39 2024 GMT
Not After : Apr 12 21:09:39 2025 GMT
Subject: CN=D5DFBFF2FB772DC5A19D92354C26CB31501A625F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:63:d8:ec:bf:02:e7:75:ae:73:d5:4d:72:
fb:3d:28:63:ab:28:05:2c:15:6e:ac:f7:6a:ec:8f:
54:3e:a6:11:ec:40:bc:e5:dc:ec:f0:5e:e1:29:f8:
62:e4:85:68:67:db:ea:73:30:6d:1b:19:de:a8:97:
68:f3:bb:9e:7b:bd:0f:73:c3:01:c8:64:68:eb:2c:
78:90:e5:d0:a0:a5:2a:0b:0f:69:8e:90:24:97:09:
56:bb:8e:95:d2:4d:eb:be:01:a4:7f:6b:44:ee:c0:
57:1a:f5:2a:53:6b:27:de:b5:d0:5b:ce:1d:e0:a9:
54:f2:c1:a2:f7:c9:38:37:9e:e0:a7:a6:a6:9c:43:
5a:db:7f:44:b0:5f:41:69:e4:8a:65:bd:71:b4:91:
66:47:b3:10:1d:76:21:1e:19:0b:89:d1:91:ea:70:
b6:7f:7c:20:04:04:5f:0f:8f:5c:b5:66:38:67:4a:
62:72:ba:dd:ac:62:01:35:d6:37:1e:19:a8:36:f8:
34:f9:3f:97:f9:7b:aa:e7:02:a6:b9:26:a0:f7:ed:
29:f0:7b:08:f1:33:d2:e0:8b:b8:33:7f:20:b0:4e:
a5:d4:cd:7c:f2:a3:09:08:10:5e:7e:90:be:1c:1d:
8a:47:bc:e9:82:97:b8:9a:56:9e:f0:ba:bf:a6:2e:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:BF:F2:FB:77:2D:C5:A1:9D:92:35:4C:26:CB:31:50:1A:62:5F
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/AS53059.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.100.0/22
168.228.68.0/22
177.137.193.0-177.137.207.255
179.96.240.0/20
186.193.96.0/20
186.208.213.0-186.208.215.255
186.251.113.0/24
186.251.116.0/23
187.49.192.0/20
187.87.112.0/20
200.233.80.0/20
IPv6:
2804:2140:100c::/48
2804:2140:1016::/48
2804:2140:1020::/46
2804:2140:1801::/48
Signature Algorithm: sha256WithRSAEncryption
a1:bf:f6:36:4a:7e:28:d5:eb:55:4a:91:dc:d1:48:3b:6a:48:
99:61:dd:17:15:20:bb:a6:0e:45:36:0f:bf:31:40:84:bf:a0:
d0:9b:00:46:a3:8d:6e:f2:00:ed:53:7f:b9:8c:33:47:c6:a8:
cc:08:1b:13:7d:a8:3b:92:fb:2e:c1:72:53:4f:00:75:98:02:
6a:12:c0:dc:7f:9f:20:5a:57:34:d6:00:6d:ae:3e:13:9f:bc:
32:47:db:a3:90:df:a4:38:2b:53:79:5c:b1:81:de:3c:1b:d8:
60:27:d2:f4:31:22:d1:d2:5c:a3:06:ae:4b:ed:ad:8f:3c:cc:
be:71:0d:45:19:a3:a2:d2:82:d2:65:b5:5b:bb:14:c7:f3:81:
8b:6e:2b:db:f8:8b:a8:f1:59:c0:b9:47:91:6a:ee:d4:fe:4b:
11:47:c7:47:a5:16:a3:d4:50:75:66:76:d8:d9:ee:c8:7e:5e:
50:24:66:ae:4d:27:f7:34:f9:39:ef:38:4c:f2:83:d1:a1:4d:
d6:b8:a6:63:91:97:26:eb:7b:28:ec:59:d0:46:01:d0:f1:c1:
9e:02:96:9f:46:aa:f5:af:cc:28:9b:dd:d0:3a:40:f7:f5:2f:
02:f2:15:4e:42:89:ab:1d:88:0b:c5:a5:d5:a8:d4:fb:b1:7a:
52:bf:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:53:24 2025 by rpki-client