Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262671.roa
File: AS262671.roa (raw, json)
Hash identifier: +5iA31s0KYBT3nEYs3guA5EAO6pI5dpYE4iRl0ypT3k=
Subject key identifier: 20:D2:8E:E5:33:83:26:94:2B:17:21:66:75:8F:95:A9:1E:BD:48:3B
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 6EDBE801DD0F9780750C3C640EAEA7A2A5CF50DB
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262671.roa
Signing time: Tue 23 Jul 2024 12:10:29 +0000
ROA not before: Tue 23 Jul 2024 12:05:29 +0000
ROA not after: Tue 22 Jul 2025 12:10:29 +0000
asID: 262671
IP address blocks: 170.82.136.0/22 maxlen: 24
187.73.16.0/20 maxlen: 24
2804:37e8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:db:e8:01:dd:0f:97:80:75:0c:3c:64:0e:ae:a7:a2:a5:cf:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:29 2024 GMT
Not After : Jul 22 12:10:29 2025 GMT
Subject: CN=20D28EE5338326942B172166758F95A91EBD483B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:b6:2c:36:ce:94:39:57:4a:d4:c9:b8:68:
21:2b:0c:ce:60:e7:47:c1:04:21:d9:7b:4d:af:b1:
15:cf:3d:83:21:e7:ab:38:08:0a:3c:bb:d1:e5:70:
f2:7e:9e:08:02:12:f2:4e:cf:1f:7d:d3:8a:16:16:
84:02:5b:03:4f:ab:74:b5:35:ee:d3:8c:08:b3:ba:
a2:6e:38:1a:fd:75:c4:14:ec:c2:5f:cf:72:6b:68:
17:b3:ad:e4:0d:c3:eb:9e:a8:4a:00:9c:19:34:bf:
fc:54:aa:aa:b4:9d:d2:d4:6d:58:66:05:e1:4c:bd:
77:02:91:49:c6:eb:eb:e6:19:5f:3e:a0:ad:0f:12:
90:6d:37:28:1d:62:be:0a:7b:6f:45:59:95:f6:e4:
f4:5e:ae:be:32:09:e0:31:f7:a1:b3:7f:7f:1a:b2:
9a:5b:ee:68:1b:dd:a4:9b:1a:e6:96:6d:60:31:3d:
2e:a5:eb:d5:54:fe:41:e4:36:fc:63:1a:d9:91:94:
ba:3b:cc:4e:8e:8c:f6:ad:d1:67:8a:69:5c:c3:d7:
1c:9d:3d:ed:78:de:79:f9:62:ef:be:37:3f:88:28:
ef:f1:92:e9:34:48:21:6a:a7:0a:44:12:99:50:cc:
5a:2c:e1:6b:03:c4:92:8f:f6:06:f2:94:63:93:49:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:8E:E5:33:83:26:94:2B:17:21:66:75:8F:95:A9:1E:BD:48:3B
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.136.0/22
187.73.16.0/20
IPv6:
2804:37e8::/32
Signature Algorithm: sha256WithRSAEncryption
a5:2d:a4:1c:9c:46:a9:17:d6:98:4e:2d:4b:d2:ca:48:a8:9c:
21:c9:7f:1b:fe:99:a5:84:8c:72:20:09:38:60:b0:1f:c7:84:
94:0b:e5:92:dc:09:3c:a6:ce:26:2d:6c:ee:e3:95:a1:d8:23:
f4:3d:37:b1:bc:ef:19:97:8d:e5:22:64:aa:3e:30:b0:1f:84:
bd:5d:c3:aa:54:7a:d1:d9:0c:dc:3a:5d:21:ed:7c:b4:b3:af:
16:2a:38:1c:c8:72:8e:c4:30:83:23:44:41:60:ab:57:8e:eb:
55:9c:3e:5c:e6:f0:06:63:72:43:a5:ca:0e:ac:90:7c:e7:45:
3e:70:59:7b:65:73:fe:82:af:0b:36:2f:1b:7c:a9:02:36:6a:
e0:e7:6c:6c:66:b0:c0:50:4a:5f:e8:c3:f2:53:3e:b0:d0:81:
74:44:8d:26:a4:61:46:b1:95:cc:d6:8b:54:d1:36:da:d5:b0:
8f:83:12:a2:ea:12:57:d3:68:48:4d:fa:6e:f0:47:bd:0d:76:
09:30:72:f4:7b:48:d2:65:aa:3c:0f:fb:ce:f1:cf:d3:43:4b:
f4:84:db:19:93:0d:fb:e9:6f:73:c5:8e:1b:ed:8f:c0:a5:a1:
c6:52:dc:22:e9:bb:b5:a4:ee:32:6b:2d:8f:61:b6:6e:c7:da:
9c:17:67:e2
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUbtvoAd0Pl4B1DDxkDq6noqXPUNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdCODZCNUI2RTA2NzdFRUQ4OUEzNzY3MEUxRDA0Q0U3
NTlFRkIyNjAeFw0yNDA3MjMxMjA1MjlaFw0yNTA3MjIxMjEwMjlaMDMxMTAvBgNV
BAMTKDIwRDI4RUU1MzM4MzI2OTQyQjE3MjE2Njc1OEY5NUE5MUVCRDQ4M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GLYsNs6UOVdK1Mm4aCErDM5g
50fBBCHZe02vsRXPPYMh56s4CAo8u9HlcPJ+nggCEvJOzx9904oWFoQCWwNPq3S1
Ne7TjAizuqJuOBr9dcQU7MJfz3JraBezreQNw+ueqEoAnBk0v/xUqqq0ndLUbVhm
BeFMvXcCkUnG6+vmGV8+oK0PEpBtNygdYr4Ke29FWZX25PRerr4yCeAx96Gzf38a
sppb7mgb3aSbGuaWbWAxPS6l69VU/kHkNvxjGtmRlLo7zE6OjPat0WeKaVzD1xyd
Pe143nn5Yu++Nz+IKO/xkuk0SCFqpwpEEplQzFos4WsDxJKP9gbylGOTSSCnAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUINKO5TODJpQrFyFmdY+VqR69SDswHwYDVR0j
BBgwFoAU17hrW24Gd+7YmjdnDh0EznWe+yYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMi9EN0I4NkI1QjZFMDY3N0VFRDg5QTM3NjcwRTFEMDRDRTc1OUVGQjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3Qjg2QjVCNkUwNjc3RUVE
ODlBMzc2NzBFMUQwNENFNzU5RUZCMjYuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK
NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8yL0FTMjYy
NjcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/
BCUwIzASBAIAATAMAwQCqlKIAwQEu0kQMA0EAgACMAcDBQAoBDfoMA0GCSqGSIb3
DQEBCwUAA4IBAQClLaQcnEapF9aYTi1L0spIqJwhyX8b/pmlhIxyIAk4YLAfx4SU
C+WS3Ak8ps4mLWzu45Wh2CP0PTexvO8Zl43lImSqPjCwH4S9XcOqVHrR2QzcOl0h
7Xy0s68WKjgcyHKOxDCDI0RBYKtXjutVnD5c5vAGY3JDpcoOrJB850U+cFl7ZXP+
gq8LNi8bfKkCNmrg52xsZrDAUEpf6MPyUz6w0IF0RI0mpGFGsZXM1otU0Tba1bCP
gxKi6hJX02hITfpu8Ee9DXYJMHL0e0jSZao8D/vO8c/TQ0v0hNsZkw376W9zxY4b
7Y/ApaHGUtwi6bu1pO4yay2PYbZux9qcF2fi
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:07 2025 by rpki-client