Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262481.roa
File: AS262481.roa (raw, json)
Hash identifier: uGSYK8ypWA4XLLRYtlNiGVfbTagjaEIg+tPNXDFhtXU=
Subject key identifier: 29:87:48:B0:1F:FA:39:44:43:04:C2:B5:E7:8E:57:03:DD:70:85:A9
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 58DC8ABCC3497028E6617AC6DF9353FC6E7E6818
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262481.roa
Signing time: Tue 23 Jul 2024 12:10:34 +0000
ROA not before: Tue 23 Jul 2024 12:05:34 +0000
ROA not after: Tue 22 Jul 2025 12:10:34 +0000
asID: 262481
IP address blocks: 45.160.88.0/22 maxlen: 24
45.166.204.0/22 maxlen: 24
45.237.108.0/22 maxlen: 24
143.137.72.0/22 maxlen: 24
161.22.56.0/21 maxlen: 24
170.245.12.0/22 maxlen: 24
177.53.240.0/21 maxlen: 24
191.37.240.0/21 maxlen: 24
191.37.248.0/22 maxlen: 24
2804:1530::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:dc:8a:bc:c3:49:70:28:e6:61:7a:c6:df:93:53:fc:6e:7e:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:34 2024 GMT
Not After : Jul 22 12:10:34 2025 GMT
Subject: CN=298748B01FFA39444304C2B5E78E5703DD7085A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:ed:36:a6:05:46:a1:c5:02:f1:37:14:8a:
02:70:1e:df:b4:95:94:e8:fb:b2:67:cc:44:36:0f:
3c:8e:11:b9:3c:81:ad:3d:d7:40:41:ac:52:c5:8d:
b6:aa:28:8e:da:3a:c4:b9:f6:75:d0:4b:78:97:81:
b7:a2:a6:7e:5b:4e:cc:02:e3:02:78:8e:58:72:5f:
a7:d2:99:60:59:e2:14:fd:5a:f2:bb:75:e4:44:0e:
bb:5b:fb:c1:e4:5b:8f:19:f0:01:f1:86:f7:15:6c:
81:a5:c5:17:73:ed:fa:2f:52:8f:64:71:5b:16:23:
a4:1b:7a:3b:0d:7f:93:a8:16:7d:36:d2:ea:71:d1:
4b:9d:3d:91:c9:88:7f:72:72:10:d0:5c:3b:cf:e4:
32:6a:5f:4a:a8:23:7a:d9:73:61:13:e8:fc:1e:62:
e1:c4:62:6c:dd:b5:bf:04:b6:35:69:22:9a:ca:20:
2c:ab:69:80:4a:d3:1c:29:77:b5:8c:12:77:e9:23:
99:ff:2b:69:9b:20:59:64:88:84:5b:46:56:94:18:
d1:68:15:1c:fd:f9:2c:da:95:dc:ed:26:f1:f7:e3:
21:48:8b:71:de:81:12:63:26:01:b7:35:32:f3:c1:
c3:cc:44:01:f6:a8:29:53:54:fe:b7:68:37:a4:8d:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:87:48:B0:1F:FA:39:44:43:04:C2:B5:E7:8E:57:03:DD:70:85:A9
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.88.0/22
45.166.204.0/22
45.237.108.0/22
143.137.72.0/22
161.22.56.0/21
170.245.12.0/22
177.53.240.0/21
191.37.240.0-191.37.251.255
IPv6:
2804:1530::/32
Signature Algorithm: sha256WithRSAEncryption
58:e8:44:98:e4:9d:24:d5:a0:1f:e3:11:15:78:45:8c:ee:5b:
1c:ae:05:d1:27:65:dd:76:e4:0f:de:7f:38:09:7b:63:60:b8:
c3:cd:b2:e3:33:c9:3d:70:95:a9:db:24:b4:b4:1f:00:a7:4e:
62:ea:f4:ba:6d:a7:2d:6d:22:41:63:fb:f8:a6:1d:11:5c:8b:
bb:aa:6e:c3:2b:85:8c:b2:78:d1:d5:06:ed:00:3c:07:4c:8c:
c4:6f:09:de:ef:a1:cb:b4:83:04:ef:17:1c:dc:db:2e:7d:db:
73:49:08:af:f3:11:34:3b:3c:bd:9f:c8:ab:97:03:77:6d:a6:
de:3d:23:02:20:13:4d:e9:7d:16:10:f8:a1:ee:0f:73:b6:39:
24:7a:15:92:3b:87:6c:1e:db:e5:cf:c4:85:3e:bd:d2:c2:4f:
54:5b:ba:ea:09:42:42:8b:0d:4d:6b:a8:3a:63:9e:1f:d9:95:
e3:84:7d:30:da:63:4e:a1:f0:62:c9:d4:66:5d:1c:1c:c0:22:
9c:8a:84:7d:24:06:2b:9a:c9:80:e9:21:3e:91:59:66:35:5b:
22:53:d2:5f:ea:4c:8c:f7:a2:3f:35:05:f2:39:c5:ed:f9:bb:
b9:b9:f6:42:13:7a:96:dc:29:e4:9f:5c:0e:5a:2a:25:88:90:
02:61:38:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org