Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263072.roa
File: AS263072.roa (raw, json)
Hash identifier: QkmZ+qgOWexqDRVdOjtB6/ThuoDhwt1edOAo3bR4ebY=
Subject key identifier: 1C:E3:2D:9D:82:70:0E:37:AD:DF:1B:49:C9:B1:1B:C3:17:92:73:1A
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 47A5AE219AB978D1C868D4048840B53045CA8F93
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263072.roa
Signing time: Fri 03 May 2024 22:02:10 +0000
ROA not before: Fri 03 May 2024 21:57:10 +0000
ROA not after: Fri 02 May 2025 22:02:10 +0000
asID: 263072
IP address blocks: 168.121.16.0/22 maxlen: 24
186.195.80.0/20 maxlen: 24
2804:950::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a5:ae:21:9a:b9:78:d1:c8:68:d4:04:88:40:b5:30:45:ca:8f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:10 2024 GMT
Not After : May 2 22:02:10 2025 GMT
Subject: CN=1CE32D9D82700E37ADDF1B49C9B11BC31792731A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:37:27:5b:fc:57:01:c3:5d:aa:b7:cc:92:
ee:ca:c7:ca:a0:d4:34:ff:50:98:cd:7b:ae:f0:3a:
d9:ad:99:ec:b3:fb:16:b2:83:8a:3e:97:32:ba:db:
e8:7b:72:fd:0d:e4:00:8d:d5:53:d0:f0:56:28:5c:
eb:58:bc:2c:05:68:1a:dd:fc:2c:0a:bb:43:1c:76:
e9:78:ab:45:7a:70:49:5f:35:e8:7f:38:c0:59:e7:
97:e4:ed:4c:e6:f8:b1:9a:db:e8:2f:cd:d9:bd:68:
c1:c0:02:94:d8:3c:80:d5:6c:6e:00:5c:8b:e2:40:
7b:af:7b:cc:6d:f4:ee:e2:49:f4:84:7f:02:4d:31:
f5:c0:d7:cf:af:e1:fe:28:66:9d:83:77:02:56:f7:
10:c8:52:11:71:f1:94:42:cf:0f:b3:81:ed:b9:2b:
91:a6:e9:bc:04:a5:e7:ef:3a:40:70:d8:e3:2f:a9:
0e:35:00:af:16:0b:61:53:d0:71:95:65:01:46:7a:
7f:8c:02:c7:65:0b:02:d4:72:13:ac:68:84:4b:60:
be:31:71:aa:01:0a:cb:77:6c:c1:e9:88:bc:26:26:
1c:c0:1b:62:d3:37:b4:d1:c3:39:3b:19:ee:74:d2:
d8:8c:7f:a6:a9:bd:8f:bc:f0:aa:77:e5:aa:59:d1:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E3:2D:9D:82:70:0E:37:AD:DF:1B:49:C9:B1:1B:C3:17:92:73:1A
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263072.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.16.0/22
186.195.80.0/20
IPv6:
2804:950::/32
Signature Algorithm: sha256WithRSAEncryption
79:44:e0:c7:68:b7:0c:bc:08:7d:2e:7a:fc:52:d3:d8:34:5e:
3d:e0:20:59:a5:ae:59:0b:14:88:9b:11:37:5b:b3:c3:1d:c7:
a5:b7:e1:e5:a3:8f:a4:cc:bf:47:68:c5:bc:25:4c:45:68:28:
bf:a1:d9:12:75:65:c2:2a:f4:4a:9f:ca:36:a8:44:f0:54:28:
b5:4b:ac:c5:9d:6b:d1:b6:2a:43:39:e1:e0:3c:c6:97:b9:56:
2c:14:5b:15:22:46:47:fb:3f:39:72:42:82:40:86:61:fd:7a:
02:c6:62:f5:e2:48:7c:1f:d8:51:bf:cb:98:cc:e5:de:51:ae:
2e:ed:98:34:7e:f3:cc:7a:1e:8a:24:be:ea:c1:d1:9a:ce:6f:
f7:c6:1c:2b:8e:f5:32:b9:1d:9b:9a:87:4d:1b:dd:9c:ab:96:
f4:bd:8b:c4:b3:ef:60:32:ea:3c:0c:ff:b1:5b:57:52:57:51:
62:62:d9:04:b9:9b:dd:a3:eb:35:f0:6e:8d:47:a4:ce:29:c5:
27:c8:e6:02:5d:fa:e3:b0:a9:d3:00:94:b1:04:0e:f7:e8:bc:
8f:e6:8a:37:2e:b0:96:54:94:6b:d6:d5:6d:0a:12:83:6f:21:
d2:15:90:c6:ce:bb:15:88:d9:af:f4:1f:05:de:5c:3d:4e:f5:
e9:c4:dc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org