Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263297.roa
File: AS263297.roa (raw, json)
Hash identifier: WagBF01QPf04W+iIsPGO1Swnwc+7uIKQtRqfKBwiZZs=
Subject key identifier: 1D:1F:3A:6F:13:F7:3A:CF:60:C9:6C:09:93:64:BA:1B:44:ED:91:78
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 1736625B8805A9368A99A7BAE80B8D6B8964108A
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263297.roa
Signing time: Fri 03 May 2024 22:02:12 +0000
ROA not before: Fri 03 May 2024 21:57:12 +0000
ROA not after: Fri 02 May 2025 22:02:12 +0000
asID: 263297
IP address blocks: 45.230.116.0/22 maxlen: 24
131.255.124.0/22 maxlen: 24
143.202.168.0/22 maxlen: 24
167.249.92.0/22 maxlen: 24
168.0.124.0/22 maxlen: 24
170.82.196.0/22 maxlen: 24
191.6.136.0/22 maxlen: 24
2804:13d0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:36:62:5b:88:05:a9:36:8a:99:a7:ba:e8:0b:8d:6b:89:64:10:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:12 2024 GMT
Not After : May 2 22:02:12 2025 GMT
Subject: CN=1D1F3A6F13F73ACF60C96C099364BA1B44ED9178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:07:05:2d:5d:a3:1d:15:7a:4c:90:f8:41:80:
c4:0c:92:a6:ff:ce:cc:d8:a6:84:46:46:01:d4:69:
80:26:4f:a0:65:e2:4d:f9:40:33:22:d9:d6:30:99:
f5:1e:ad:8f:3c:39:b5:8d:18:7a:6f:3c:0a:d9:67:
ca:91:67:98:49:53:9b:eb:3e:cd:d1:87:2e:8d:88:
47:69:47:df:d9:b0:f3:96:d5:ca:66:e5:a6:42:89:
18:30:d5:17:09:09:87:24:ee:98:5c:3a:64:e7:23:
9b:e0:19:cb:6f:d4:c2:28:10:c3:47:54:70:db:16:
19:78:64:9e:bf:e1:b5:9a:37:96:61:7d:ee:1e:bf:
6d:31:09:bc:3a:13:da:74:29:80:c7:56:a4:ad:d7:
cf:d8:43:8c:0f:68:6f:3e:48:98:5d:7c:b1:be:05:
a8:f1:52:19:b5:e4:85:69:17:02:1e:1e:66:b2:43:
c1:7b:2e:6a:9f:61:c4:11:d8:6c:62:b7:01:9c:c1:
41:4a:a9:06:dc:b6:24:bc:97:f9:4f:76:d4:ab:e6:
38:6e:3d:91:a1:1a:a3:4a:64:3e:10:9a:af:3f:83:
e1:70:3d:cc:0d:d1:a4:0d:2e:90:1f:70:4e:43:2c:
81:b3:b2:a4:b5:92:27:60:63:ac:93:3e:bf:36:05:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:3A:6F:13:F7:3A:CF:60:C9:6C:09:93:64:BA:1B:44:ED:91:78
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263297.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.116.0/22
131.255.124.0/22
143.202.168.0/22
167.249.92.0/22
168.0.124.0/22
170.82.196.0/22
191.6.136.0/22
IPv6:
2804:13d0::/32
Signature Algorithm: sha256WithRSAEncryption
30:92:88:59:f9:9c:43:25:fc:c3:7d:45:f4:22:f6:35:07:f3:
1e:64:3d:b2:eb:b4:0d:6e:6f:66:6c:ee:67:c0:b8:1c:90:d1:
64:fa:ca:81:26:fc:e4:36:7b:11:1f:41:b5:0f:fd:d5:9d:03:
aa:0d:1c:9c:bf:df:91:52:cb:4c:f6:52:3e:23:7c:1d:a7:98:
12:24:10:bf:64:4b:ca:3f:f5:f1:c1:b8:37:e8:e2:51:4c:21:
77:18:e3:ef:4d:a7:f2:88:29:10:1c:45:29:35:0b:1a:ca:0c:
e4:de:47:aa:24:b7:01:e2:ec:1a:b8:af:19:ab:da:21:4c:56:
e3:57:8d:06:86:84:0a:51:62:76:ce:e4:24:c7:87:13:68:a3:
8d:08:e6:1f:5a:dc:7f:aa:47:38:e2:24:46:db:55:1d:31:d1:
52:74:32:dc:f0:18:48:63:f0:2d:2a:8b:04:c8:2e:64:5b:9c:
aa:2e:30:4f:23:c1:f7:a8:0f:53:25:08:1e:6f:1d:73:c1:4d:
25:af:2f:6b:42:ff:7a:bb:04:06:9d:d4:96:6f:af:c7:c2:0b:
fd:2e:68:cb:6e:92:e0:35:5f:27:d2:cf:5d:30:1e:6e:8d:54:
79:2e:d1:5e:37:c4:69:7d:b2:f4:08:bc:60:8a:cb:52:c5:03:
d7:04:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org