Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263864.roa
File: AS263864.roa (raw, json)
Hash identifier: 3W6PhyHMT1opwMTsBZMs3NfX4XG6hYLUPeBYLKjqPVI=
Subject key identifier: CA:06:C4:39:FC:78:C5:74:06:1B:B4:08:B6:CA:C5:15:8F:D3:37:DC
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 6E71BE3E840ABC48E156600E456FDB30855C53E9
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263864.roa
Signing time: Fri 03 May 2024 22:02:09 +0000
ROA not before: Fri 03 May 2024 21:57:09 +0000
ROA not after: Fri 02 May 2025 22:02:09 +0000
asID: 263864
IP address blocks: 138.186.164.0/22 maxlen: 24
170.79.220.0/22 maxlen: 24
2804:26ec::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:71:be:3e:84:0a:bc:48:e1:56:60:0e:45:6f:db:30:85:5c:53:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:09 2024 GMT
Not After : May 2 22:02:09 2025 GMT
Subject: CN=CA06C439FC78C574061BB408B6CAC5158FD337DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:6f:56:88:89:c6:41:65:5c:15:51:e0:04:
b3:0b:2a:0a:be:56:cb:4c:bb:16:e0:6c:87:ae:4a:
91:b0:62:a6:0f:b8:c5:ef:1d:e2:1e:7c:ed:82:a6:
8e:1a:f8:f1:48:b6:17:2c:c0:dd:61:94:e6:68:99:
fc:2b:b1:52:f5:6c:db:de:26:88:a5:b0:c8:3c:7c:
8d:8a:de:db:cb:99:7b:71:26:cc:c3:de:6f:f4:3e:
00:e8:6b:c3:34:59:cc:42:d2:ea:fd:6f:36:d7:01:
9c:9f:55:11:96:f0:ac:00:14:61:a1:16:8d:90:ce:
b4:8b:c3:41:5a:15:2e:3b:09:f5:76:85:86:af:d9:
88:5e:16:65:72:9b:3d:99:d0:34:cb:ec:59:24:ee:
77:30:ba:7a:b7:1c:5e:90:5c:d3:66:6e:85:c5:cb:
a7:ad:21:ad:e7:86:25:be:c8:f1:15:24:13:49:45:
3f:cd:be:74:94:d9:c7:94:2b:fc:b4:95:39:ae:73:
bf:ce:bc:c6:5b:40:a3:57:74:d7:79:dd:6b:31:28:
0d:5a:94:d0:a5:67:6c:89:5e:86:99:30:9d:be:83:
fc:f0:3e:c8:8b:98:aa:a6:d3:5a:fd:89:14:4f:40:
82:68:de:20:0f:22:2e:6a:39:4d:03:36:b9:fe:ce:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:06:C4:39:FC:78:C5:74:06:1B:B4:08:B6:CA:C5:15:8F:D3:37:DC
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS263864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.164.0/22
170.79.220.0/22
IPv6:
2804:26ec::/32
Signature Algorithm: sha256WithRSAEncryption
07:f9:a1:ae:17:c5:14:45:cb:a4:8b:5f:b0:62:83:cf:6f:85:
b5:b6:90:2e:67:a3:cf:a0:bb:e8:af:ad:e9:87:9f:69:3f:31:
f2:e9:38:be:dc:fe:6d:65:6d:fb:70:35:a1:df:f0:da:21:0c:
b3:49:78:ff:a8:d6:b0:6f:9d:32:49:b0:f4:dc:0c:3e:91:25:
a7:f5:38:65:e7:a4:58:ad:08:4d:88:19:0e:1d:a8:b7:db:67:
a3:a2:d0:e3:c3:4d:13:38:46:a0:dc:cb:aa:b5:50:af:4b:5a:
b0:45:e6:11:67:fd:8e:fc:e2:27:80:27:62:c3:ce:65:42:70:
2a:3c:41:11:f2:e3:c7:11:6f:9a:ed:93:f5:6a:f2:b2:a9:f3:
b2:5c:e3:ff:dd:f5:0b:e6:e2:84:33:3e:e7:15:b1:6e:a4:aa:
c7:24:bf:b6:b3:b7:82:2c:93:e7:cf:85:af:74:0a:6d:0c:36:
11:62:60:59:25:36:53:ec:b7:9b:f3:7d:6d:6f:b6:f0:7f:e5:
1d:a8:8e:e9:a2:27:51:d3:02:0b:9d:e9:03:fb:0a:45:a3:45:
2a:7b:95:c9:29:fe:fe:aa:ea:af:62:c7:3b:40:7a:d9:e1:a0:
40:c1:83:59:4c:9d:cc:7f:de:6d:32:e1:11:72:e9:88:a0:c6:
3f:06:1b:58
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUbnG+PoQKvEjhVmAORW/bMIVcU+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTU3MDlaFw0yNTA1MDIyMjAyMDlaMDMxMTAvBgNV
BAMTKENBMDZDNDM5RkM3OEM1NzQwNjFCQjQwOEI2Q0FDNTE1OEZEMzM3REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfW9WiInGQWVcFVHgBLMLKgq+
VstMuxbgbIeuSpGwYqYPuMXvHeIefO2Cpo4a+PFIthcswN1hlOZomfwrsVL1bNve
JoilsMg8fI2K3tvLmXtxJszD3m/0PgDoa8M0WcxC0ur9bzbXAZyfVRGW8KwAFGGh
Fo2QzrSLw0FaFS47CfV2hYav2YheFmVymz2Z0DTL7Fkk7ncwunq3HF6QXNNmboXF
y6etIa3nhiW+yPEVJBNJRT/NvnSU2ceUK/y0lTmuc7/OvMZbQKNXdNd53WsxKA1a
lNClZ2yJXoaZMJ2+g/zwPsiLmKqm01r9iRRPQIJo3iAPIi5qOU0DNrn+zmbnAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUygbEOfx4xXQGG7QItsrFFY/TN9wwHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK
NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8wL0FTMjYz
ODY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/
BCUwIzASBAIAATAMAwQCirqkAwQCqk/cMA0EAgACMAcDBQAoBCbsMA0GCSqGSIb3
DQEBCwUAA4IBAQAH+aGuF8UURcuki1+wYoPPb4W1tpAuZ6PPoLvor63ph59pPzHy
6Ti+3P5tZW37cDWh3/DaIQyzSXj/qNawb50ySbD03Aw+kSWn9Thl56RYrQhNiBkO
Hai322ejotDjw00TOEag3MuqtVCvS1qwReYRZ/2O/OIngCdiw85lQnAqPEER8uPH
EW+a7ZP1avKyqfOyXOP/3fUL5uKEMz7nFbFupKrHJL+2s7eCLJPnz4WvdAptDDYR
YmBZJTZT7Leb831tb7bwf+UdqI7poidR0wILnekD+wpFo0Uqe5XJKf7+quqvYsc7
QHrZ4aBAwYNZTJ3Mf95tMuERcumIoMY/BhtY
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:21:57 2025 by rpki-client