Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263032.roa
File: AS263032.roa (raw, json)
Hash identifier: UNDoPFK9Vu/WD1p2ReyFYaZkcMZlaV0x/3bL4E9tRYY=
Subject key identifier: 65:44:60:32:1D:3C:52:88:F9:57:41:FB:12:99:EA:97:AC:83:B1:CC
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: E5A19018FBF9D83A42C8704EBB2CADFC224634
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263032.roa
Signing time: Fri 03 May 2024 22:02:09 +0000
ROA not before: Fri 03 May 2024 21:57:09 +0000
ROA not after: Fri 02 May 2025 22:02:09 +0000
asID: 263032
IP address blocks: 168.90.44.0/22 maxlen: 24
170.238.192.0/22 maxlen: 24
177.137.56.0/21 maxlen: 24
186.250.36.0/22 maxlen: 24
2804:2d24::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e5:a1:90:18:fb:f9:d8:3a:42:c8:70:4e:bb:2c:ad:fc:22:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:09 2024 GMT
Not After : May 2 22:02:09 2025 GMT
Subject: CN=654460321D3C5288F95741FB1299EA97AC83B1CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0d:6c:b8:c9:43:5e:d8:d0:31:32:d9:b6:19:
ae:73:6b:e4:b5:f9:84:9a:68:e3:31:eb:82:4b:7a:
71:5d:f0:91:b4:24:72:91:e8:9e:0a:46:38:40:37:
1b:2d:21:bd:d9:07:e1:7a:44:3d:52:08:1f:6e:01:
ad:4d:a9:d3:d6:51:42:d9:06:b4:0b:9e:ff:4f:2b:
3f:7c:68:c5:a1:3f:40:11:79:db:ca:77:e1:f5:46:
98:2c:eb:ba:c9:cf:ca:fd:fe:91:f2:32:2b:43:7e:
8c:04:73:e7:50:a6:49:8e:9d:cc:8c:41:a0:45:75:
0b:5f:1b:f3:a5:e2:45:69:11:54:6a:13:a7:f2:73:
47:b3:64:3f:20:8a:fa:59:1f:48:7a:a6:9d:b8:74:
7d:01:f0:a9:ee:42:bd:9b:5e:6b:d2:bc:de:82:ad:
c6:3c:b8:20:a1:ab:4d:ba:66:65:90:2c:29:fb:5b:
21:e6:df:4b:bb:d8:cc:94:29:0f:cd:2c:b2:cd:b3:
59:39:bd:9d:4d:b7:38:b3:5a:17:7d:e0:69:6d:29:
a8:be:07:4f:96:e0:2e:04:62:db:dc:04:c1:90:78:
cc:29:08:8b:83:f7:c0:c9:ea:94:f2:51:9c:0d:9f:
e1:ad:1d:05:ff:bd:62:fd:1c:68:57:3f:58:8a:00:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:60:32:1D:3C:52:88:F9:57:41:FB:12:99:EA:97:AC:83:B1:CC
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.44.0/22
170.238.192.0/22
177.137.56.0/21
186.250.36.0/22
IPv6:
2804:2d24::/32
Signature Algorithm: sha256WithRSAEncryption
a3:34:44:1a:cb:2f:fa:5c:c2:f3:d3:98:39:81:77:73:25:b3:
2a:f8:75:83:53:7b:67:17:71:03:9d:72:f9:0e:f9:73:e3:ba:
08:0e:9c:ec:53:5a:0c:4a:47:f6:5f:39:09:b1:b8:a2:c5:93:
71:d3:67:65:f6:0a:93:90:c4:a5:a8:15:7c:56:6a:b8:1a:6e:
0d:12:b8:57:11:4a:12:7c:51:7b:ec:5a:7e:36:f1:3f:00:37:
90:d7:54:f5:40:17:b8:4d:5d:d2:e4:b3:10:56:42:e3:44:e7:
21:5a:21:97:73:83:95:b1:b1:6a:97:f0:19:ab:1d:7e:60:0e:
79:89:2c:48:48:68:9d:80:c7:4f:aa:dd:41:06:1f:9d:c9:50:
ce:7f:03:36:cc:5a:5f:84:9c:bd:40:8a:1d:b8:14:30:cc:7f:
33:02:86:64:18:ce:0e:19:9e:71:25:3f:6d:f9:7b:21:13:57:
43:64:ec:b2:15:8d:0f:5f:ca:4f:31:41:0c:81:48:20:1e:39:
cc:24:f2:58:e6:1c:26:a0:06:db:2a:d5:fd:69:47:b6:ff:e9:
3f:28:30:9f:05:07:0f:86:66:e5:16:f0:22:a4:c0:e7:00:da:
16:db:f4:4b:b0:b8:59:0f:a9:1f:70:30:33:a5:e6:05:e1:6e:
cb:e2:63:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:51 2025 by rpki-client