Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262671.roa
File: AS262671.roa (raw, json)
Hash identifier: z/eJvFvpNd520h9soCu5dDq9KGtNPUFNFPkQVxGJqSw=
Subject key identifier: D0:1A:36:FB:1F:0A:85:20:2E:73:17:40:51:54:08:CD:BD:90:17:94
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 326408523572D16485C7C5DCCA4FED57C013F304
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262671.roa
Signing time: Fri 03 May 2024 22:02:13 +0000
ROA not before: Fri 03 May 2024 21:57:13 +0000
ROA not after: Fri 02 May 2025 22:02:13 +0000
asID: 262671
IP address blocks: 170.82.136.0/22 maxlen: 24
187.73.16.0/20 maxlen: 24
2804:37e8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:64:08:52:35:72:d1:64:85:c7:c5:dc:ca:4f:ed:57:c0:13:f3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:13 2024 GMT
Not After : May 2 22:02:13 2025 GMT
Subject: CN=D01A36FB1F0A85202E731740515408CDBD901794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:8c:02:3a:51:dc:73:0a:a5:3b:70:ea:fb:
81:80:65:4e:54:48:35:05:30:6f:d3:ce:16:b3:f1:
93:fd:03:fc:68:68:82:87:48:4e:d0:53:42:e6:d4:
58:2d:98:0a:5b:fe:c6:8d:87:41:8b:47:7e:b5:1f:
46:8e:0c:c5:87:be:60:8c:69:6b:22:bb:2e:de:1a:
9c:42:82:d9:05:63:42:2e:29:3c:d1:3c:e6:da:89:
45:17:d8:07:6d:f0:7f:75:62:9f:1c:b9:f5:fb:1c:
25:14:ba:99:82:fb:a8:3c:3c:cc:16:e0:e3:13:2a:
86:91:e1:66:64:26:70:34:29:1a:ee:5c:73:69:22:
b0:df:ed:ef:06:aa:cb:30:16:89:8d:3b:48:52:63:
e7:6c:d3:24:b5:4d:71:8f:53:b3:e1:47:a2:52:60:
f0:1b:ae:2c:21:8c:64:ea:44:52:d0:96:5f:82:07:
5e:f3:3b:81:3a:8d:5c:e3:b0:c2:fe:66:99:71:ab:
bd:39:c5:f0:c8:1d:b0:2d:fd:86:57:68:7d:37:f7:
53:b5:84:78:b3:02:c5:75:af:9d:e8:cf:08:07:56:
12:7b:5b:f8:4f:d0:5e:13:59:d7:33:60:03:53:80:
01:42:e4:6c:b4:7c:4b:c4:c3:53:e6:d7:df:b7:d8:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1A:36:FB:1F:0A:85:20:2E:73:17:40:51:54:08:CD:BD:90:17:94
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.136.0/22
187.73.16.0/20
IPv6:
2804:37e8::/32
Signature Algorithm: sha256WithRSAEncryption
2c:eb:06:0e:d4:7a:e5:e7:92:cc:a8:3f:5f:10:b6:1a:47:99:
73:cb:5a:b8:8a:a6:22:c6:79:08:83:e5:c9:f4:c5:e5:20:ae:
d5:fc:e1:73:64:d3:05:8d:19:6c:56:9e:9d:0f:56:2e:35:21:
dc:0c:1f:c8:19:3f:76:bb:7c:82:86:39:85:c3:be:4a:ba:66:
c4:fe:df:a3:fe:13:f5:ca:e9:f9:c0:86:78:1f:c0:9e:8d:94:
05:d8:7c:4c:c7:24:b3:5e:03:1b:ca:35:5d:b4:f0:b5:57:45:
95:92:d0:79:99:4c:f0:f9:ef:b4:cd:27:2f:c4:a5:3a:29:2c:
c5:37:e1:e9:12:c1:ae:38:2b:ae:57:78:44:5a:4c:cb:74:b9:
57:60:3f:50:b3:12:e7:b2:a0:a2:f6:03:a9:4b:56:ac:a9:76:
12:1f:54:00:d9:b2:f8:c4:ba:c8:70:1b:a8:fd:a5:67:1d:45:
d3:99:e3:cc:c6:1c:c8:05:b3:66:58:2f:db:4a:37:49:96:6a:
c5:e5:13:ae:a1:d8:fa:89:48:db:b3:f2:35:33:3e:2e:32:28:
ee:29:ea:e7:eb:50:b9:3a:36:4f:4b:da:ef:3a:16:6e:79:60:
48:78:13:1d:1e:3d:fb:f4:59:dd:ea:a5:83:e1:0f:9e:b4:2b:
d3:f5:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:10 2025 by rpki-client