Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266201.roa
File: AS266201.roa (raw, json)
Hash identifier: z8oPExgzZUC0O2xbfOwYzHw5s19tRtpUTykrivt/tdA=
Subject key identifier: C0:50:2B:0A:A6:65:D0:FD:24:1F:76:70:8E:B4:6E:67:C2:3B:15:5E
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 6D1930B1D1DD460E217699CD799D97E7133C4CA2
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266201.roa
Signing time: Fri 03 May 2024 22:02:10 +0000
ROA not before: Fri 03 May 2024 21:57:10 +0000
ROA not after: Fri 02 May 2025 22:02:10 +0000
asID: 266201
IP address blocks: 138.94.32.0/22 maxlen: 24
192.140.32.0/22 maxlen: 24
2804:3c48::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:19:30:b1:d1:dd:46:0e:21:76:99:cd:79:9d:97:e7:13:3c:4c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:10 2024 GMT
Not After : May 2 22:02:10 2025 GMT
Subject: CN=C0502B0AA665D0FD241F76708EB46E67C23B155E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:8c:3e:75:3f:9f:f6:ed:81:26:ad:24:56:
fc:e5:02:61:bc:88:68:ff:64:d8:c4:ee:0e:c1:13:
10:96:45:1c:1e:72:e2:10:1b:c4:56:e5:7c:01:11:
5c:49:95:41:cd:53:67:18:20:69:2d:ab:d2:64:b4:
09:86:a9:a5:9a:b9:d9:e0:fe:4a:92:c3:86:b7:88:
57:ed:64:2e:00:b6:c3:45:b2:20:20:02:72:bf:00:
b7:1e:62:77:60:2a:d1:ab:04:36:8d:74:48:49:b5:
6d:f6:13:4a:8d:e1:cc:f0:8d:07:63:93:c6:0c:d9:
5c:48:66:cf:e7:9f:73:78:9f:e9:ed:2b:41:07:4a:
ea:2c:3f:a3:df:1a:18:cb:37:d8:1a:73:a0:0d:6d:
a0:b3:e1:9c:97:7c:48:66:82:be:b8:a7:50:ed:bc:
14:ff:7b:f3:ce:36:1a:e8:4f:4e:4f:13:44:cf:a7:
8b:96:fe:0b:cd:b6:e8:70:5a:18:4d:4e:02:50:db:
a0:37:98:45:f0:3e:5f:33:54:aa:04:5c:07:b1:8e:
c3:b0:e3:1a:83:a5:f9:c8:9e:6f:b2:fd:ad:d9:28:
8a:3f:10:b1:41:21:42:45:9b:ce:95:f0:f1:a7:87:
74:22:b7:9f:c1:73:c7:c5:a1:2e:54:91:00:17:00:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:50:2B:0A:A6:65:D0:FD:24:1F:76:70:8E:B4:6E:67:C2:3B:15:5E
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266201.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.32.0/22
192.140.32.0/22
IPv6:
2804:3c48::/32
Signature Algorithm: sha256WithRSAEncryption
8f:6a:eb:85:7a:cc:2d:53:70:bd:27:fc:cb:2f:ed:08:d1:6e:
12:58:00:17:19:96:90:e3:7d:53:4d:71:c7:87:63:e6:ab:e3:
a2:67:0c:89:2b:61:62:c1:86:d7:07:c9:15:29:f7:44:3f:e8:
04:e9:39:09:73:ec:0b:bc:5b:a8:c6:d4:d0:4c:88:1a:61:ea:
71:f7:37:d3:0c:e6:31:43:f6:6f:48:53:bf:98:fa:3d:91:4a:
84:91:d0:47:e3:12:02:70:33:71:10:53:ad:4c:3a:3e:de:a5:
f9:34:2d:58:a4:00:b4:a3:71:89:6d:39:ef:31:56:96:33:30:
4c:86:76:8e:5a:ab:56:e4:4e:af:e6:bf:4d:49:b6:f4:ff:21:
df:15:e3:ca:0f:a6:82:45:ab:09:22:03:5c:11:73:5b:6a:8c:
a9:09:3c:00:92:6c:07:e5:eb:31:1f:8b:5d:8d:91:81:b7:07:
3d:76:8d:e1:9f:d3:04:85:28:fc:25:1f:ec:3b:fb:58:f3:c7:
eb:84:8f:7d:07:dd:cb:af:f5:5c:7c:c5:e8:35:d8:2f:5b:c1:
cc:13:b1:07:5c:1c:b0:45:92:c2:f1:7e:a9:75:21:d2:b2:12:
e2:ad:c3:06:c3:68:9d:2c:f9:82:e5:fd:2f:83:67:7d:cf:da:
8d:6e:b6:95
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUbRkwsdHdRg4hdpnNeZ2X5xM8TKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTU3MTBaFw0yNTA1MDIyMjAyMTBaMDMxMTAvBgNV
BAMTKEMwNTAyQjBBQTY2NUQwRkQyNDFGNzY3MDhFQjQ2RTY3QzIzQjE1NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwow+dT+f9u2BJq0kVvzlAmG8
iGj/ZNjE7g7BExCWRRwecuIQG8RW5XwBEVxJlUHNU2cYIGktq9JktAmGqaWaudng
/kqSw4a3iFftZC4AtsNFsiAgAnK/ALceYndgKtGrBDaNdEhJtW32E0qN4czwjQdj
k8YM2VxIZs/nn3N4n+ntK0EHSuosP6PfGhjLN9gac6ANbaCz4ZyXfEhmgr64p1Dt
vBT/e/PONhroT05PE0TPp4uW/gvNtuhwWhhNTgJQ26A3mEXwPl8zVKoEXAexjsOw
4xqDpfnInm+y/a3ZKIo/ELFBIUJFm86V8PGnh3Qit5/Bc8fFoS5UkQAXAL7NAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUwFArCqZl0P0kH3ZwjrRuZ8I7FV4wHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK
NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8wL0FTMjY2
MjAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/
BCUwIzASBAIAATAMAwQCil4gAwQCwIwgMA0EAgACMAcDBQAoBDxIMA0GCSqGSIb3
DQEBCwUAA4IBAQCPauuFeswtU3C9J/zLL+0I0W4SWAAXGZaQ431TTXHHh2Pmq+Oi
ZwyJK2FiwYbXB8kVKfdEP+gE6TkJc+wLvFuoxtTQTIgaYepx9zfTDOYxQ/ZvSFO/
mPo9kUqEkdBH4xICcDNxEFOtTDo+3qX5NC1YpAC0o3GJbTnvMVaWMzBMhnaOWqtW
5E6v5r9NSbb0/yHfFePKD6aCRasJIgNcEXNbaoypCTwAkmwH5esxH4tdjZGBtwc9
do3hn9MEhSj8JR/sO/tY88frhI99B93Lr/VcfMXoNdgvW8HME7EHXBywRZLC8X6p
dSHSshLircMGw2idLPmC5f0vg2d9z9qNbraV
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:29:31 2025 by rpki-client