Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53085.roa
File: AS53085.roa (raw, json)
Hash identifier: eyo0H4opabZXz61SURsaMVI+Uqt1zmNIQF3bGzpTkUQ=
Subject key identifier: 50:06:9F:4A:98:DD:04:97:5D:8E:86:25:93:2D:3E:2D:18:2B:42:FD
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 027CE85E4EBBBFC04765D8A0D07C1C8CBE54C435
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53085.roa
Signing time: Fri 03 May 2024 22:02:08 +0000
ROA not before: Fri 03 May 2024 21:57:08 +0000
ROA not after: Fri 02 May 2025 22:02:08 +0000
asID: 53085
IP address blocks: 132.255.148.0/22 maxlen: 24
187.33.160.0/20 maxlen: 24
191.5.144.0/20 maxlen: 24
2804:1790::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7c:e8:5e:4e:bb:bf:c0:47:65:d8:a0:d0:7c:1c:8c:be:54:c4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:08 2024 GMT
Not After : May 2 22:02:08 2025 GMT
Subject: CN=50069F4A98DD04975D8E8625932D3E2D182B42FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:63:72:e6:d5:2e:dc:02:16:9a:26:29:e6:
fe:5a:81:24:38:81:11:1f:f7:d0:64:04:cc:ac:43:
14:e8:06:3b:2b:f1:2a:ce:f9:28:3d:1e:b1:cf:91:
0a:d6:a9:97:e6:41:6a:aa:1e:7c:6b:35:24:f8:45:
6e:7f:ff:be:87:19:18:1f:eb:60:da:17:73:fc:99:
7b:e5:0e:0a:92:80:83:c2:39:9e:ae:c1:69:dc:1e:
c7:7d:38:e3:bc:90:87:eb:d6:01:0f:da:b8:a3:e5:
0f:7e:f3:66:7f:18:03:1f:8f:7a:12:94:ad:c3:aa:
46:91:cb:9d:47:6b:ae:93:ff:45:12:60:1d:34:72:
4c:73:d5:31:da:92:30:3b:d0:b6:fd:fd:a1:99:1e:
bc:b6:ed:5b:45:51:ce:14:3b:02:ba:61:76:79:9e:
cc:d1:0b:44:1c:13:d5:db:59:6f:8c:28:58:60:23:
d3:26:dd:75:2f:18:53:d8:ea:2d:88:91:f4:a3:4d:
79:65:b7:e8:4c:d5:4b:ac:66:b4:b8:f7:65:a5:b5:
62:5f:f0:4a:d7:b5:4d:0a:8c:7e:2c:df:51:77:fd:
36:f7:0c:b4:ae:0d:50:2b:30:66:85:aa:4d:a0:7d:
f1:c0:27:e3:96:bb:5c:61:9a:cd:d2:58:f0:c6:5c:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:9F:4A:98:DD:04:97:5D:8E:86:25:93:2D:3E:2D:18:2B:42:FD
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.148.0/22
187.33.160.0/20
191.5.144.0/20
IPv6:
2804:1790::/32
Signature Algorithm: sha256WithRSAEncryption
97:23:9a:7b:c3:90:d0:09:2d:3c:c3:04:2a:aa:40:ab:d3:07:
fe:84:ac:6c:be:81:c3:9c:6b:00:e8:74:ec:91:9a:c0:11:56:
a0:91:b7:db:1a:8e:3a:22:c7:a0:81:09:3e:9e:1a:8f:59:26:
72:b4:ee:36:01:48:d9:7a:b6:02:9d:83:69:d7:21:7b:9c:75:
a9:dd:74:a1:22:e5:18:4f:f4:03:ce:74:6b:3a:de:0f:59:ab:
97:6c:8c:52:48:8f:66:d9:b9:de:43:69:3c:bc:ba:74:ae:e9:
ee:6d:6c:0d:bb:3b:ba:cd:43:d5:16:6d:1b:42:e4:ef:70:a7:
84:1b:07:0a:bc:09:0c:01:68:1c:80:be:a2:cf:85:67:6d:66:
47:36:45:7f:5f:12:40:69:01:cc:9f:37:24:17:03:c3:17:0f:
2b:84:f3:77:01:16:36:fa:58:70:8e:3d:c6:fd:fc:09:75:a7:
ea:92:5d:2b:7e:c6:78:35:a8:fc:2a:03:2e:a7:88:75:d9:0a:
a8:58:0b:75:d5:60:69:d8:60:20:f4:e4:16:0a:f6:ac:04:e2:
d5:ed:fd:78:cf:0f:9f:e7:72:b4:74:90:2c:42:56:6d:83:93:
8c:d8:4f:c6:7a:c7:aa:ff:5b:10:df:62:46:37:d7:5c:ca:cc:
de:a0:95:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:20 2025 by rpki-client