Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS267085.roa
File: AS267085.roa (raw, json)
Hash identifier: IAuTv9II+N3dIppo6lvahybjjOcT9ull6j2Jlt322Qk=
Subject key identifier: 78:63:47:64:DA:F2:81:1D:9E:9E:07:56:4B:7F:54:8D:DB:16:AE:A0
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 3D881DE896786971260C30D02EA0360E753F1182
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS267085.roa
Signing time: Fri 03 May 2024 22:03:24 +0000
ROA not before: Fri 03 May 2024 21:58:24 +0000
ROA not after: Fri 02 May 2025 22:03:24 +0000
asID: 267085
IP address blocks: 45.228.240.0/22 maxlen: 24
2804:47ec::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:88:1d:e8:96:78:69:71:26:0c:30:d0:2e:a0:36:0e:75:3f:11:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:58:24 2024 GMT
Not After : May 2 22:03:24 2025 GMT
Subject: CN=78634764DAF2811D9E9E07564B7F548DDB16AEA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:ca:4b:eb:7a:e5:97:64:78:7e:44:7d:7b:
10:5a:96:e6:7a:00:35:ee:5b:d5:4d:16:f0:41:26:
ab:43:94:57:2b:77:6e:bb:85:a3:72:68:ef:ee:ca:
15:4c:bb:0c:70:89:5f:9d:8e:7c:af:5a:48:72:ab:
28:b3:64:a1:2d:ad:79:54:49:b6:3f:73:c1:61:28:
fd:bf:1c:ae:37:6c:3e:a3:45:8d:cc:a8:b7:78:02:
d0:0d:fc:32:2e:c6:71:aa:c6:69:5c:11:09:2f:27:
69:68:2e:7f:18:d4:b5:e5:6f:ae:60:ab:23:df:f4:
e9:b1:c9:53:ee:cd:4a:fe:a5:71:6f:1a:35:03:17:
29:76:f4:c7:32:57:94:30:3e:a5:f2:cc:47:49:42:
78:84:70:92:5d:76:47:12:12:71:21:81:89:9a:14:
b8:54:b3:db:eb:fe:a4:58:9a:8f:58:9a:f7:a1:a9:
96:8a:f9:89:14:17:c0:be:f5:03:64:38:b0:8b:58:
8d:d0:f7:08:09:9d:c8:d9:21:38:04:43:77:e1:f3:
b8:a6:90:57:13:c3:29:43:81:69:42:db:88:e7:1e:
a7:37:4d:91:58:79:3f:b8:e6:6c:b6:f9:bf:f7:92:
f2:2a:b6:02:56:93:f9:58:b0:2f:e5:d2:fc:0a:22:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:47:64:DA:F2:81:1D:9E:9E:07:56:4B:7F:54:8D:DB:16:AE:A0
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS267085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.240.0/22
IPv6:
2804:47ec::/32
Signature Algorithm: sha256WithRSAEncryption
b2:59:20:9a:4e:9c:47:47:5e:d0:d7:bb:7d:10:30:2c:55:77:
24:c6:2c:4e:ab:bc:b8:c1:c8:79:b0:cc:55:2b:e1:46:e1:f7:
72:7d:ed:46:b1:51:8f:9f:25:a9:9b:cd:bf:4c:f7:99:a6:38:
97:4d:3a:82:02:7a:8c:97:7d:4d:fb:0d:72:54:1d:00:d0:47:
c9:19:3a:92:7f:16:1e:b1:32:a9:85:94:65:cf:41:e3:6b:b9:
27:2d:51:ef:c6:d4:60:5f:15:ea:4c:3a:a6:82:f6:63:62:61:
b5:74:ca:84:98:cc:2c:e4:84:50:80:db:72:01:cf:f0:cd:2b:
db:15:b5:87:c3:14:62:25:6a:4c:14:67:43:f0:3f:5a:da:97:
44:f6:35:93:6e:e3:54:6a:dc:4b:38:88:52:81:a5:95:d7:79:
f2:02:22:41:90:e7:e8:61:ce:8b:d5:9b:cc:6f:7b:ae:31:14:
68:21:37:36:e7:59:3b:0a:15:a3:db:44:74:22:75:bb:d8:ef:
ba:79:dd:ce:6c:99:fc:85:3d:4d:36:ba:f8:b9:dd:ca:e4:32:
5b:b5:9a:cc:64:1f:1d:d5:62:59:fc:b3:f4:6c:e1:2f:6e:5a:
f7:2e:5a:32:a9:1c:cf:80:47:00:0d:e4:cf:04:8d:3e:ea:e3:
e4:bb:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org