Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53190.roa
File: AS53190.roa (raw, json)
Hash identifier: HMqiJj8I5W/kEcLFxLdZu5InlX+5zU0/ketEPvKSq1s=
Subject key identifier: 04:C8:F7:AD:74:80:8A:CD:E7:E8:7B:E3:BE:AB:E7:BE:AF:24:79:6C
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 617B77C98AF3601981B1291D012B6304FCE2D1F6
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53190.roa
Signing time: Fri 03 May 2024 22:02:08 +0000
ROA not before: Fri 03 May 2024 21:57:08 +0000
ROA not after: Fri 02 May 2025 22:02:08 +0000
asID: 53190
IP address blocks: 138.36.48.0/22 maxlen: 24
186.232.112.0/21 maxlen: 24
2804:21a4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:7b:77:c9:8a:f3:60:19:81:b1:29:1d:01:2b:63:04:fc:e2:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:08 2024 GMT
Not After : May 2 22:02:08 2025 GMT
Subject: CN=04C8F7AD74808ACDE7E87BE3BEABE7BEAF24796C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:3a:15:88:68:98:2f:0b:05:b7:72:f8:a9:
8c:66:2f:2b:f5:06:71:34:a2:45:00:af:bf:90:b0:
1e:c1:61:d6:6a:02:e9:f9:ff:9e:18:ae:f8:c1:c7:
d1:9c:55:7d:ed:33:a1:84:b7:b4:7c:c3:c1:49:44:
74:72:ce:ed:99:37:1d:be:10:2b:72:0b:a5:14:68:
2f:7b:10:06:ce:b7:a5:7e:fb:90:9f:09:74:a1:01:
58:d2:d2:34:2b:02:47:c8:c9:66:52:af:42:0c:ba:
55:00:10:0e:c3:87:a8:cb:82:7f:35:7b:ca:76:e7:
a1:ee:35:39:d8:ee:10:bb:df:b2:25:b2:fd:a4:ce:
7d:4e:fd:44:65:b2:1d:e8:08:4e:fc:09:e2:42:25:
3d:1e:c7:fe:61:30:c7:9b:b1:35:0e:f2:99:83:ed:
ae:5e:ff:8c:35:c6:ca:11:e2:15:54:c1:5e:05:48:
db:20:ba:94:62:40:33:95:52:c7:86:31:3f:1f:a8:
24:6f:00:c4:b0:7b:7e:2c:30:02:5a:50:c1:db:0b:
4c:16:a7:46:49:68:a4:59:69:47:80:58:ff:1c:b1:
44:0c:b1:3a:bd:92:5e:c3:cf:fc:22:0d:bf:c0:14:
8d:82:94:23:08:3d:2c:a3:a1:79:18:2a:4c:6b:38:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:F7:AD:74:80:8A:CD:E7:E8:7B:E3:BE:AB:E7:BE:AF:24:79:6C
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.48.0/22
186.232.112.0/21
IPv6:
2804:21a4::/32
Signature Algorithm: sha256WithRSAEncryption
36:35:c3:6d:4d:ee:5b:5a:4b:61:b0:c9:82:f4:84:a9:c9:a0:
f8:4f:b7:8a:61:fb:8c:9a:fb:e5:fe:cb:bb:fc:82:7d:ac:58:
5e:3e:57:ab:2a:e3:6b:8f:22:7a:e2:a5:d7:b8:20:8e:13:a5:
ff:b1:27:2d:f9:52:7f:2e:7f:77:50:f8:8a:98:77:eb:ba:62:
53:66:b0:26:27:fd:35:ba:db:86:69:48:6e:40:0d:52:cb:35:
c2:87:7b:1e:17:c3:c6:98:60:71:75:ab:07:d1:1f:08:c6:8a:
b4:e8:99:79:f3:16:20:bc:71:07:30:3e:09:05:0c:83:f2:2a:
fd:34:32:21:17:b6:e8:59:c0:63:3f:16:75:c5:70:1d:8a:e7:
86:93:14:6b:10:96:55:8e:a0:07:fb:4b:1c:42:35:88:21:89:
9f:ab:20:39:d7:e8:f0:bc:dd:9a:cc:5e:1d:30:3b:f4:d9:9b:
41:c3:e7:3a:90:13:10:30:d6:87:20:ea:b9:9d:31:92:fb:7f:
3f:6c:22:0c:8d:e9:28:2d:a9:73:80:90:12:03:31:1b:03:5e:
3d:69:7c:1b:43:2a:6e:92:8b:48:b7:74:37:c4:09:63:5e:fb:
40:66:fc:89:d6:07:83:a0:a4:6e:3f:2b:f0:25:0c:1f:50:2a:
7a:48:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:47 2025 by rpki-client