Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262794.roa
File: AS262794.roa (raw, json)
Hash identifier: mMQKOau1h4QKP0y/JR1m5NJjciOSbtKmvkVxcMhQt4g=
Subject key identifier: 9B:F2:D9:16:E1:27:5A:21:50:20:65:7F:C9:F7:EA:B5:03:8A:01:0F
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 5E6AD0F9E459B4C739C59FC13C253CD56E08DB08
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262794.roa
Signing time: Fri 03 May 2024 22:02:13 +0000
ROA not before: Fri 03 May 2024 21:57:13 +0000
ROA not after: Fri 02 May 2025 22:02:13 +0000
asID: 262794
IP address blocks: 143.255.244.0/22 maxlen: 24
168.195.84.0/22 maxlen: 24
201.76.112.0/20 maxlen: 24
2804:2b6c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6a:d0:f9:e4:59:b4:c7:39:c5:9f:c1:3c:25:3c:d5:6e:08:db:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:13 2024 GMT
Not After : May 2 22:02:13 2025 GMT
Subject: CN=9BF2D916E1275A215020657FC9F7EAB5038A010F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:e6:6a:2b:fb:d1:18:86:15:12:8a:78:f7:
b7:2f:99:6d:cb:3a:94:e9:4b:22:b7:f8:7b:71:bd:
c6:d7:8e:e2:2b:bb:a0:09:9a:c6:4e:f8:6d:3e:86:
ba:ee:ec:39:1f:91:0c:c7:ee:bf:f6:4c:cd:56:c4:
b7:f7:f2:8e:c1:39:9e:fe:20:2c:a7:98:6e:5e:a4:
9b:d1:98:56:c6:4a:1c:9f:bc:f8:d8:85:e9:2b:81:
d1:e5:f5:57:67:a0:17:28:f6:18:63:84:32:e9:ee:
78:2f:4d:76:8f:1a:56:12:ef:f0:9a:b3:64:6d:8b:
4e:ea:c7:e0:28:00:4e:47:49:33:8b:5d:24:c5:47:
ac:e6:58:63:16:07:ff:4d:9e:a8:eb:8f:00:d2:bb:
f5:03:a3:70:eb:96:13:ec:b4:9f:8a:08:ee:6e:ba:
79:f3:96:7d:59:be:53:23:20:8f:ae:a8:25:b8:22:
d6:67:84:25:5f:b6:5e:03:28:05:a7:bb:e0:bc:a2:
47:41:23:98:bf:06:d6:8c:84:99:86:0d:73:46:de:
89:ea:19:69:f1:97:b5:53:67:32:ce:7b:fe:3a:fb:
61:ab:2d:34:2c:43:7b:49:0e:3e:0b:14:bb:24:55:
a1:61:8f:b2:11:8b:a5:8a:e2:9e:36:a6:3a:b1:93:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F2:D9:16:E1:27:5A:21:50:20:65:7F:C9:F7:EA:B5:03:8A:01:0F
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.244.0/22
168.195.84.0/22
201.76.112.0/20
IPv6:
2804:2b6c::/32
Signature Algorithm: sha256WithRSAEncryption
a2:59:9d:6b:e9:bf:a6:8d:ed:97:91:45:f4:9d:35:8b:96:8f:
14:d6:e4:32:0c:ee:ed:6e:2b:a2:da:15:27:dd:bd:18:94:d5:
c3:6a:54:87:da:f6:b2:47:27:19:79:52:ec:de:2b:4e:71:30:
d6:76:00:53:97:89:a5:73:ba:fd:35:0c:7d:df:cc:f5:c9:f9:
45:f3:e6:1a:74:e8:24:77:96:f6:52:91:19:1f:3e:d5:aa:d6:
90:16:17:88:03:ef:5b:34:bb:c9:a4:78:f9:7c:7f:a5:15:a7:
a7:92:59:b0:42:03:11:c0:45:2f:52:f6:ff:4c:52:f8:aa:90:
39:d3:cb:d2:9f:a7:6c:dd:4e:e3:19:d7:90:a0:83:4a:ee:4c:
08:90:64:e8:d5:c5:2a:39:bd:ba:b4:f6:1e:91:4d:48:5b:82:
50:e2:ab:9c:23:c6:e7:c3:8a:67:78:39:14:b0:d6:d1:30:d7:
46:d3:5d:01:b0:52:cd:8f:37:d2:71:ed:8a:4a:bb:7c:7a:93:
6f:b9:5d:19:d2:44:f4:a9:77:f4:7a:b3:d9:6d:2d:b9:1d:f7:
37:77:21:0b:c8:1c:61:22:0e:39:c3:56:23:8e:93:78:d7:e5:
be:42:6d:12:cd:76:4d:c3:54:7d:a0:5f:6b:e0:bf:41:bd:15:
f7:94:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org