Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262481.roa
File: AS262481.roa (raw, json)
Hash identifier: 6eFvEq2AD6YRpM4Igycp7lf3QbWHG1hp7WrybOQm1/s=
Subject key identifier: 22:8A:B5:F9:84:23:92:94:63:06:21:64:94:49:56:25:50:C3:16:0B
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 15418935511B8C6F4A7722DAFADAC0E46FEA684F
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262481.roa
Signing time: Fri 03 May 2024 22:02:11 +0000
ROA not before: Fri 03 May 2024 21:57:11 +0000
ROA not after: Fri 02 May 2025 22:02:11 +0000
asID: 262481
IP address blocks: 45.160.88.0/22 maxlen: 24
45.166.204.0/22 maxlen: 24
45.237.108.0/22 maxlen: 24
143.137.72.0/22 maxlen: 24
161.22.56.0/21 maxlen: 24
170.245.12.0/22 maxlen: 24
177.53.240.0/21 maxlen: 24
191.37.240.0/21 maxlen: 24
191.37.248.0/22 maxlen: 24
2804:1530::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:41:89:35:51:1b:8c:6f:4a:77:22:da:fa:da:c0:e4:6f:ea:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:11 2024 GMT
Not After : May 2 22:02:11 2025 GMT
Subject: CN=228AB5F984239294630621649449562550C3160B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:c0:25:7c:79:14:3c:e3:2e:26:f4:fc:1f:
70:61:f6:57:8c:5e:5c:7b:3c:2e:13:d9:98:a4:62:
0e:fd:9d:36:6b:a2:4e:3f:e1:03:48:63:d4:bb:d9:
64:67:1e:0f:13:ec:19:10:68:60:a5:56:ec:ed:29:
eb:31:e4:8c:fa:d3:48:0e:13:9a:3e:cf:8c:d3:17:
61:42:ff:b4:a6:de:e9:b1:4c:c0:82:48:6e:90:51:
4b:c1:51:e5:e6:a4:00:68:3a:36:64:a8:49:66:28:
d6:87:9e:c2:de:54:d6:78:0c:c4:f1:69:e9:98:09:
8f:dc:5d:ea:d0:cb:d4:14:08:17:cd:d2:43:b7:49:
55:db:be:d8:16:73:20:c7:3b:f4:87:3e:b4:48:22:
11:6d:f8:69:b4:1f:25:7b:5d:e4:9a:2f:62:42:c1:
e8:e3:0a:d8:45:ca:94:d9:24:0b:9e:df:2e:46:2a:
b1:40:e4:2f:c3:26:db:87:87:0f:2c:80:9d:a2:82:
50:0b:da:41:66:9b:cb:67:b6:e6:b5:7e:74:f7:4c:
d6:3a:db:03:93:1d:a9:f1:66:c6:b9:f0:b3:0e:c2:
db:79:88:dc:ae:9b:72:7f:a2:31:59:d4:6d:47:03:
7a:45:3e:27:15:fe:92:30:a7:14:d7:a4:a6:12:7f:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:B5:F9:84:23:92:94:63:06:21:64:94:49:56:25:50:C3:16:0B
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.88.0/22
45.166.204.0/22
45.237.108.0/22
143.137.72.0/22
161.22.56.0/21
170.245.12.0/22
177.53.240.0/21
191.37.240.0-191.37.251.255
IPv6:
2804:1530::/32
Signature Algorithm: sha256WithRSAEncryption
8b:a3:e0:24:d2:bd:41:47:3e:7f:d2:e3:1d:ca:a3:25:6c:9c:
80:4f:19:c1:0d:c9:b1:0a:6c:c6:55:1c:09:34:76:4a:95:d4:
f0:40:da:a4:7e:b8:ee:d4:0f:8b:33:ab:77:7b:e7:82:f1:01:
9d:56:e2:45:de:9b:51:9e:42:93:b0:3d:08:e9:82:43:81:81:
e8:53:ef:90:18:c3:4f:8f:23:ed:72:0a:e2:04:f7:e1:03:21:
6d:66:8b:bf:40:06:ee:b4:d0:18:bc:8c:a9:fc:01:fd:64:9b:
5b:e1:07:e2:4a:21:d1:32:28:ab:a9:b2:e8:bd:76:88:36:aa:
fa:84:6e:1f:e9:f7:f8:19:e0:95:42:66:39:c2:0c:a6:e8:e1:
16:f9:2c:3c:d5:07:10:8f:f2:82:48:f5:37:30:45:cd:19:8b:
38:e7:a3:12:0d:db:4f:9e:d2:11:18:d2:21:5d:4c:ac:a5:e8:
c0:c5:e7:18:49:73:9a:9e:76:02:55:8a:50:73:7f:e4:fc:77:
84:39:ae:d0:0e:af:1d:86:5b:de:8c:4b:2c:ea:bf:40:9b:b4:
51:4f:76:7a:e0:ea:d9:93:7c:82:e4:eb:cb:94:fd:a9:8c:97:
8a:ce:ae:10:ff:14:0f:35:22:8c:e9:04:05:fb:fa:b5:e2:a6:
d8:5b:dd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:25:01 2025 by rpki-client