Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262700.roa
File: AS262700.roa (raw, json)
Hash identifier: qzrl8zq6+oFzviYA15fyVOKTsXqvYKhr0UMmNvpxMbg=
Subject key identifier: 9E:5E:38:E0:5B:0E:61:F7:76:AD:15:73:E6:FE:CE:7A:33:A7:15:76
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 6B92DEA42506DD09196DA7D49E7C450C5F45E799
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262700.roa
Signing time: Fri 03 May 2024 22:02:10 +0000
ROA not before: Fri 03 May 2024 21:57:10 +0000
ROA not after: Fri 02 May 2025 22:02:10 +0000
asID: 262700
IP address blocks: 177.137.80.0/21 maxlen: 24
187.102.112.0/20 maxlen: 24
189.90.80.0/20 maxlen: 24
2804:d20::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:92:de:a4:25:06:dd:09:19:6d:a7:d4:9e:7c:45:0c:5f:45:e7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:10 2024 GMT
Not After : May 2 22:02:10 2025 GMT
Subject: CN=9E5E38E05B0E61F776AD1573E6FECE7A33A71576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f0:99:78:5e:36:a2:f2:60:f5:e8:f1:3c:7e:
52:a7:8f:bf:7c:d7:12:d2:ce:b2:d7:54:62:28:43:
ad:12:86:a6:af:4d:77:e9:fc:42:8b:80:61:c9:c5:
d7:0e:9f:c1:45:b3:10:72:ff:9b:cb:4c:50:54:19:
b7:bb:64:5b:2e:31:39:95:f6:eb:2c:34:be:18:6a:
a8:82:76:ba:9e:62:76:2b:d2:f9:60:d6:ca:6c:3a:
6c:3a:9a:f5:f8:75:dc:e4:78:1b:4f:d7:30:f1:1d:
bb:09:3f:7a:46:ab:b2:db:f9:70:87:0e:ff:0e:46:
cf:4c:70:f6:d9:1e:9f:c2:a0:40:a6:0e:6f:39:78:
13:e5:69:9b:87:a7:49:af:dd:fc:26:26:c1:a2:78:
29:84:45:30:bd:29:98:fb:48:34:8b:16:65:4c:a2:
a7:c7:00:90:73:c8:a2:a7:4c:13:c1:79:3d:4e:17:
80:17:e3:2c:bf:3c:76:9e:d3:94:a3:4d:f6:5a:02:
32:48:a6:f9:84:a9:fe:f2:37:2b:7b:9b:5d:24:1d:
0e:0a:c0:85:ca:f3:ce:49:2c:9b:2c:15:5d:75:c0:
16:0c:3a:cb:0f:f2:8e:ee:fd:07:38:00:64:10:10:
94:13:dd:f0:0f:c6:1b:c2:31:0e:84:14:87:2c:17:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:38:E0:5B:0E:61:F7:76:AD:15:73:E6:FE:CE:7A:33:A7:15:76
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.80.0/21
187.102.112.0/20
189.90.80.0/20
IPv6:
2804:d20::/32
Signature Algorithm: sha256WithRSAEncryption
5a:31:5b:96:8e:95:8c:a6:09:0a:ba:91:3b:20:54:33:00:5e:
53:3b:ee:73:5f:1a:07:5c:60:c6:eb:76:c6:cb:12:f1:75:94:
04:8b:13:c4:87:d6:0c:f9:76:0d:4b:c8:9d:0f:6a:ad:95:a3:
3a:41:50:c9:77:b3:00:35:e9:8b:1c:f2:3e:ff:5c:6b:55:73:
c3:0a:ca:25:49:e9:09:a4:5e:5c:4a:90:4b:a2:e4:83:cc:be:
43:ea:cc:03:12:22:e1:e7:65:f5:66:04:69:d8:b5:67:1e:43:
3a:9e:3d:85:5c:ee:2b:d2:bc:7f:f0:2a:17:a7:6e:8e:aa:4c:
87:93:97:c7:33:4a:bc:30:f9:c1:c8:7b:96:38:79:21:de:f1:
66:ac:52:2a:d7:9c:3b:4e:cd:a2:94:92:74:b7:b4:95:cc:15:
c4:ea:08:ea:15:07:c3:51:71:f2:af:6c:de:17:a5:6e:6a:1a:
80:47:da:31:b3:0c:0a:7b:b7:f4:74:37:56:d9:e4:46:21:c5:
96:5c:db:0b:f0:54:3c:cf:7b:d6:9d:90:42:d8:d3:2f:eb:44:
41:d8:83:21:9e:ca:f3:27:1c:fb:9b:d1:ac:63:cb:da:1a:d9:
09:91:ae:dd:85:85:6c:4b:f7:e1:0e:d8:17:b0:a6:b3:38:c0:
06:66:55:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:05 2025 by rpki-client