Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS268613.roa
File: AS268613.roa (raw, json)
Hash identifier: vaCB8DJ5fM+DNxteqSml/ymaygEMGsPkoDDN0FvoGRg=
Subject key identifier: 22:94:DB:0E:2C:4D:35:D4:B2:4C:58:AB:EC:75:F6:4E:8F:8E:D7:A3
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 4CAC64C4CAEAB57213EE99B1C901FCF6868D42E5
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS268613.roa
Signing time: Fri 03 May 2024 22:02:14 +0000
ROA not before: Fri 03 May 2024 21:57:14 +0000
ROA not after: Fri 02 May 2025 22:02:14 +0000
asID: 268613
IP address blocks: 45.164.4.0/22 maxlen: 24
2804:53e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ac:64:c4:ca:ea:b5:72:13:ee:99:b1:c9:01:fc:f6:86:8d:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:14 2024 GMT
Not After : May 2 22:02:14 2025 GMT
Subject: CN=2294DB0E2C4D35D4B24C58ABEC75F64E8F8ED7A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:9f:c5:93:2e:3c:25:cc:2c:dc:d3:66:c0:
db:77:1a:83:01:44:d3:5e:ab:87:01:bc:da:0e:5b:
c7:14:c8:11:4f:45:98:ad:9d:5c:2a:f0:e3:8a:be:
df:5c:92:0c:a6:35:71:66:6a:33:d8:0e:63:98:65:
7f:29:bb:ec:22:15:57:c4:47:a7:2a:0e:55:59:e1:
dd:17:d3:30:2d:7b:1e:46:2a:4f:e6:ab:26:91:ff:
97:2d:07:98:d9:59:c9:0f:3b:ac:fe:87:b3:79:ac:
64:2d:6f:66:82:de:a5:56:cb:d9:60:f0:ae:2c:e7:
61:1a:53:30:20:8b:60:24:8d:b3:b4:8e:7d:67:ce:
fe:c0:49:ff:50:0e:ca:0b:b1:fb:a1:dd:1e:0c:ee:
84:00:54:12:2a:1e:a8:ed:d6:ae:0a:9c:bd:11:99:
ca:3b:ec:5d:3a:65:88:42:4a:1d:04:9f:fb:e0:d3:
50:3a:b3:ab:b0:d8:fd:3e:7f:76:a5:76:98:fe:f1:
fd:b3:95:87:d6:ad:46:4d:cd:f6:8d:35:57:c3:73:
a8:b0:eb:5c:98:ae:c2:11:27:97:80:a5:de:95:bf:
ee:ed:11:1b:ec:3e:45:6f:20:45:32:c7:e3:87:67:
9c:f1:7b:d6:ee:2f:94:c1:f7:ff:32:51:be:45:7d:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:DB:0E:2C:4D:35:D4:B2:4C:58:AB:EC:75:F6:4E:8F:8E:D7:A3
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS268613.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.4.0/22
IPv6:
2804:53e0::/32
Signature Algorithm: sha256WithRSAEncryption
98:fb:0d:0c:ae:a3:fe:b1:35:5e:ea:9d:e4:d7:91:fe:a7:6e:
6a:b8:b4:e3:86:8e:e1:56:35:1e:d7:e2:17:57:bb:71:23:d7:
d4:c6:58:27:4d:39:e3:ba:ea:2e:6b:58:26:98:37:0b:19:56:
77:38:f7:ca:fc:8b:26:6c:f0:ab:3c:e3:c1:14:8d:a3:4d:3e:
e6:63:c3:aa:79:88:fd:bd:e2:c9:af:f3:63:80:29:1d:6e:66:
ac:d9:32:16:1e:b7:2a:c5:b8:44:c1:22:79:ea:73:47:53:63:
14:9e:01:e5:5d:23:ed:43:59:31:96:ee:4c:95:b8:b9:ae:65:
dc:e9:12:05:4b:09:4f:1c:82:cb:b0:40:58:c8:69:8d:9e:c3:
46:91:31:02:0c:5a:a2:55:92:b2:f2:8d:71:a8:0e:57:3e:d5:
6e:27:63:b0:a8:c4:ed:29:4c:15:e4:40:17:c4:de:3b:1e:75:
f9:56:fd:b4:6d:51:c8:5d:83:85:99:24:c9:99:d7:83:84:6e:
b0:4f:a6:5d:4e:2d:8a:08:3b:ba:09:9d:53:ae:c5:16:71:7b:
33:91:71:10:31:f7:39:50:87:35:5d:8a:3c:89:9f:cf:eb:60:
bf:68:cb:43:8b:3b:cc:f6:05:d7:88:bf:16:e3:af:d6:1b:7e:
55:1b:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:47:58 2025 by rpki-client