Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266949.roa
File: AS266949.roa (raw, json)
Hash identifier: BzU4P/WbQt7NM7QQYrgc+42D+Lpr8rvrceFOiRPqVYE=
Subject key identifier: D7:DF:6D:B2:A0:81:3D:81:5A:50:0B:A8:CB:F5:C6:FE:7D:E6:D6:0A
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 76FE88BC597B703C03A709F53E9E10C53ED59095
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266949.roa
Signing time: Fri 03 May 2024 22:02:12 +0000
ROA not before: Fri 03 May 2024 21:57:12 +0000
ROA not after: Fri 02 May 2025 22:02:12 +0000
asID: 266949
IP address blocks: 45.225.196.0/22 maxlen: 24
2804:45c8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:fe:88:bc:59:7b:70:3c:03:a7:09:f5:3e:9e:10:c5:3e:d5:90:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:12 2024 GMT
Not After : May 2 22:02:12 2025 GMT
Subject: CN=D7DF6DB2A0813D815A500BA8CBF5C6FE7DE6D60A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:4e:a7:fd:62:03:ed:5a:82:03:30:63:29:
91:47:3a:a2:ee:30:7c:a8:d4:73:fd:d0:91:a1:63:
b0:6d:98:06:ed:11:a3:45:3f:30:d7:0b:8f:c7:fa:
55:17:0e:a9:25:66:57:39:09:72:d6:bd:a4:d9:d9:
a1:a1:de:09:9f:42:cb:90:05:38:91:0b:2c:b9:b1:
72:5f:11:cf:bb:9f:62:f7:7c:a6:f8:d9:cf:6f:ec:
1a:a8:08:eb:2c:21:b5:28:c9:e6:4f:9f:fe:cd:f4:
bc:a3:83:e7:8d:5e:3f:6d:02:29:d6:a7:aa:4e:56:
66:43:72:47:62:a4:fa:b2:8e:17:f7:88:1f:86:90:
0f:15:b6:6e:be:92:42:d4:af:e7:bf:31:64:63:3b:
93:5b:63:48:03:a0:f2:a7:3d:a6:90:e9:46:3e:07:
dd:ce:97:53:9e:43:ee:bd:b5:30:de:09:5e:85:a1:
e9:2d:89:38:18:05:1a:be:58:0e:ed:14:5c:bc:69:
f4:3b:66:42:14:1b:6b:af:fe:96:32:30:a0:2a:07:
29:64:5f:24:14:38:7d:be:ed:91:df:42:6c:5c:19:
2d:51:d0:d7:57:1e:f1:72:95:52:d5:44:87:13:13:
79:a6:f4:39:46:3e:da:b4:42:ae:43:65:a5:d8:ea:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:6D:B2:A0:81:3D:81:5A:50:0B:A8:CB:F5:C6:FE:7D:E6:D6:0A
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS266949.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.196.0/22
IPv6:
2804:45c8::/32
Signature Algorithm: sha256WithRSAEncryption
1f:4b:fc:70:4f:78:1f:80:f0:f5:fa:aa:c3:8c:e7:9d:ad:8d:
56:61:df:9c:19:22:c5:12:aa:5c:d4:8a:d5:b9:7d:ac:2a:08:
ee:f0:21:f4:76:bb:9f:b7:35:a7:5d:ba:33:dc:d2:c3:cc:f5:
37:51:3d:b1:7e:be:db:0e:c7:40:92:70:58:4e:a1:53:02:65:
eb:5c:02:93:17:dd:af:13:93:ed:81:cc:bb:7b:aa:7f:e6:99:
87:a9:03:4d:f5:10:2f:cb:c2:c7:91:01:af:a6:2a:c9:6e:ef:
f1:cb:00:a2:65:38:84:01:2d:37:28:39:d0:33:b8:25:f7:76:
40:17:b5:dd:d8:b3:01:ee:dd:d5:08:3c:ad:b6:37:a2:a7:66:
c5:ba:7a:9e:f3:71:10:93:80:2b:f4:3d:d3:df:80:83:9e:78:
ee:08:4a:99:74:68:be:28:0d:e4:2c:1a:3a:20:84:b5:9b:90:
f6:0c:17:1f:7c:fb:aa:a5:f5:f2:bd:1c:77:22:c0:87:72:6a:
c5:20:bd:a8:4e:73:8f:0a:58:68:07:b9:9e:18:80:a4:34:0c:
b0:8b:67:2b:45:75:4c:46:f6:42:01:7f:35:13:10:15:8b:0f:
a8:13:35:de:bd:8b:ec:8b:69:d2:0f:dd:3b:1b:cf:76:c8:aa:
cc:49:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:25 2025 by rpki-client