Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53191.roa
File: AS53191.roa (raw, json)
Hash identifier: vhBKhdUYYoDHimVKqNos+x8CK7fvpKV2wtcezlWrk3g=
Subject key identifier: 21:25:9A:95:E0:42:50:08:EC:95:D8:AC:EC:90:37:54:17:0C:91:9B
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 38DD2D08E02058DBE6716EACA0B753113F2431AB
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53191.roa
Signing time: Fri 03 May 2024 22:02:15 +0000
ROA not before: Fri 03 May 2024 21:57:15 +0000
ROA not after: Fri 02 May 2025 22:02:15 +0000
asID: 53191
IP address blocks: 177.8.216.0/22 maxlen: 24
186.232.128.0/21 maxlen: 24
2804:f2c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:dd:2d:08:e0:20:58:db:e6:71:6e:ac:a0:b7:53:11:3f:24:31:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:15 2024 GMT
Not After : May 2 22:02:15 2025 GMT
Subject: CN=21259A95E0425008EC95D8ACEC903754170C919B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:64:7c:f2:74:00:9b:29:12:9c:9c:1e:74:
39:3c:5c:29:d7:0f:c4:c8:a9:28:91:f0:f9:7e:09:
cd:bf:74:54:26:d8:09:8a:a4:e9:69:ea:d6:94:1b:
74:7a:cc:09:62:a8:96:f0:e9:ad:46:c4:de:15:c0:
d6:c3:21:22:da:35:7e:76:f1:58:2f:73:bd:83:eb:
ca:c2:29:9c:07:8a:ca:06:c3:95:3b:28:ca:c8:33:
25:d2:69:99:00:6a:3e:c6:77:fa:c5:55:48:48:fd:
b9:dd:db:ac:8f:63:b1:b7:b1:1d:1d:35:00:31:fb:
db:92:1d:7e:3b:29:fa:4c:a9:fa:32:eb:81:c6:a2:
65:9d:ab:ca:2e:c7:f0:a2:39:e6:3c:92:d0:1a:7d:
d0:25:77:e0:9d:c6:62:a5:6e:69:23:72:d1:9b:4e:
b0:ca:6f:18:5d:fa:44:3f:7a:49:47:c3:41:db:79:
54:78:e6:bb:0b:f1:e9:50:02:70:50:45:55:32:56:
80:49:1f:94:83:40:cb:73:53:48:a8:41:9d:9a:ed:
0b:53:bb:2e:fc:27:87:7b:42:89:6d:7d:3f:d3:5a:
ef:a2:57:45:5a:d6:e5:5d:1b:bf:fa:d4:1c:1e:9f:
4c:c4:38:cd:2c:95:99:a4:d2:6b:24:26:5d:2b:37:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:25:9A:95:E0:42:50:08:EC:95:D8:AC:EC:90:37:54:17:0C:91:9B
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS53191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.216.0/22
186.232.128.0/21
IPv6:
2804:f2c::/32
Signature Algorithm: sha256WithRSAEncryption
8b:61:c9:91:3e:28:d5:c0:60:21:4f:a6:27:8e:85:7e:22:3e:
42:eb:c4:52:18:1e:62:a8:0a:cf:76:1b:ab:d9:11:6b:3f:3a:
57:d6:78:26:0b:d2:d8:8b:41:17:08:9d:40:58:e6:ca:35:2e:
df:bb:26:32:ac:49:88:d5:88:64:e5:3e:e5:cd:9b:c3:2a:5d:
92:f4:40:db:90:80:12:0f:12:55:17:ec:22:61:3f:01:41:9b:
d2:0e:23:a6:60:05:aa:24:ef:5f:aa:28:a3:f7:28:8d:57:4d:
61:8a:15:43:69:4b:45:84:22:c1:57:f6:a8:0a:a1:3b:ae:f3:
26:3f:34:38:01:83:42:35:39:83:75:85:08:b0:c9:1b:c4:0d:
76:e7:33:e3:a1:3f:48:9a:60:e1:8c:b1:97:ff:cc:ea:b5:36:
bf:a1:9d:69:9c:09:25:f2:92:ec:2e:96:11:85:04:c5:ba:fb:
1e:c4:87:e5:8c:32:2a:15:05:95:02:4b:f3:92:91:f8:da:52:
29:c5:bf:25:aa:29:65:69:87:3e:16:7c:4d:74:a0:7e:c4:e0:
26:df:5c:e8:44:b6:e0:82:6a:56:20:b9:7a:e8:8b:e9:67:cf:
a0:75:f0:7f:d3:06:e3:fa:77:7a:dd:6e:89:74:b9:4f:e5:7c:
f5:d7:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org