Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262673.roa
File: AS262673.roa (raw, json)
Hash identifier: YFiRJBNFvyNdbitnWf4ri+Pp/1td1qPp+IWY10zl02Q=
Subject key identifier: 28:DF:C2:FD:11:05:C0:F6:C4:17:A3:CB:8F:21:74:91:68:31:8D:5A
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 70FACFF536325CA8AB338ECF1785DF6CD531FEDD
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262673.roa
Signing time: Tue 23 Jul 2024 12:10:31 +0000
ROA not before: Tue 23 Jul 2024 12:05:31 +0000
ROA not after: Tue 22 Jul 2025 12:10:31 +0000
asID: 262673
IP address blocks: 177.184.96.0/20 maxlen: 24
177.184.112.0/20 maxlen: 24
186.235.192.0/20 maxlen: 24
186.235.208.0/20 maxlen: 24
187.73.64.0/19 maxlen: 24
201.162.64.0/18 maxlen: 24
2804:187c::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fa:cf:f5:36:32:5c:a8:ab:33:8e:cf:17:85:df:6c:d5:31:fe:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:31 2024 GMT
Not After : Jul 22 12:10:31 2025 GMT
Subject: CN=28DFC2FD1105C0F6C417A3CB8F21749168318D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:ad:8e:89:6b:98:15:b8:a2:ae:d2:0f:be:
ad:56:58:52:4e:10:ab:8c:14:42:24:e8:4d:08:f4:
55:36:76:24:98:e3:45:2a:ce:a5:78:97:70:64:0a:
21:85:32:8a:08:9a:bc:d6:e5:6c:36:c9:9f:c6:1a:
ff:be:0c:c5:d4:c3:30:d6:01:c0:2e:87:db:d1:57:
10:e9:26:71:40:b9:cf:e7:67:e8:21:bf:fa:7b:5e:
2d:bd:7d:41:02:e4:60:27:37:c7:7a:4c:57:1b:d2:
00:8e:3c:92:5e:16:d5:20:3e:cf:ce:52:ea:75:5b:
39:25:e0:f8:13:e5:bb:b0:35:3c:5a:47:8b:41:4e:
60:bd:56:02:2a:18:3e:d5:85:3a:a5:37:08:9e:dc:
cd:49:3d:e6:18:28:44:83:20:ab:fa:37:78:c4:44:
db:ca:9f:af:f2:a7:f7:4d:68:ac:a7:8c:f6:72:e7:
5e:4e:e2:2b:60:63:49:f8:88:d2:8d:26:7d:d5:5f:
24:5d:0c:3e:bf:41:52:bf:b8:51:56:c6:05:ce:c1:
72:fc:08:6c:04:24:bf:d9:d5:f5:36:d1:31:5d:cb:
7d:4c:83:c6:81:49:17:43:29:a6:17:f4:ff:95:f0:
21:c8:ec:16:f6:b9:2d:09:5a:6e:23:6a:33:5b:a3:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:C2:FD:11:05:C0:F6:C4:17:A3:CB:8F:21:74:91:68:31:8D:5A
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS262673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.184.96.0/19
186.235.192.0/19
187.73.64.0/19
201.162.64.0/18
IPv6:
2804:187c::/32
Signature Algorithm: sha256WithRSAEncryption
76:ca:0a:f2:d7:93:95:9d:12:18:8c:47:f7:6c:7d:3b:7f:a2:
e5:e1:36:46:77:c9:e1:1a:c2:2c:d8:fa:57:45:90:9f:03:c6:
33:f7:c6:26:8c:8d:23:48:f3:66:78:a5:a6:32:1c:c2:09:8c:
4e:cf:50:d4:1d:8b:17:49:eb:d2:27:24:de:0a:ae:2d:c3:79:
21:73:c4:2d:61:ef:6d:49:6f:ea:f7:24:22:79:db:d4:26:d9:
81:7f:72:90:e5:67:1a:cd:6e:88:70:23:51:5e:86:86:13:2d:
6f:5c:74:57:46:0c:a2:77:63:b5:49:c0:84:08:34:35:cc:f1:
a5:7d:17:3f:47:4e:65:7c:46:de:33:0e:c7:12:be:20:e1:f0:
22:a7:d4:fb:e1:4a:61:ed:b4:a9:e8:98:01:00:bd:0c:95:e9:
84:3d:09:af:3b:b1:05:78:1d:b2:2c:a9:4f:b2:f0:d1:12:a0:
b5:f4:a3:68:99:62:67:f6:8b:73:58:8e:26:f0:a0:d3:ca:24:
56:ef:b7:38:97:eb:c8:fe:13:f3:a6:73:f6:e4:b0:8d:70:9a:
f8:2e:1d:f9:b8:b5:2b:39:d8:d6:a4:25:b7:20:f3:d6:e9:47:
72:4b:66:a9:19:8d:79:de:57:c9:bf:58:f7:1c:39:4b:c2:b7:
81:f0:b7:e2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcPrP9TYyXKirM47PF4XfbNUx/t0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdCODZCNUI2RTA2NzdFRUQ4OUEzNzY3MEUxRDA0Q0U3
NTlFRkIyNjAeFw0yNDA3MjMxMjA1MzFaFw0yNTA3MjIxMjEwMzFaMDMxMTAvBgNV
BAMTKDI4REZDMkZEMTEwNUMwRjZDNDE3QTNDQjhGMjE3NDkxNjgzMThENUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV7K2OiWuYFbiirtIPvq1WWFJO
EKuMFEIk6E0I9FU2diSY40UqzqV4l3BkCiGFMooImrzW5Ww2yZ/GGv++DMXUwzDW
AcAuh9vRVxDpJnFAuc/nZ+ghv/p7Xi29fUEC5GAnN8d6TFcb0gCOPJJeFtUgPs/O
Uup1Wzkl4PgT5buwNTxaR4tBTmC9VgIqGD7VhTqlNwie3M1JPeYYKESDIKv6N3jE
RNvKn6/yp/dNaKynjPZy515O4itgY0n4iNKNJn3VXyRdDD6/QVK/uFFWxgXOwXL8
CGwEJL/Z1fU20TFdy31Mg8aBSRdDKaYX9P+V8CHI7Bb2uS0JWm4jajNbo3J1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUKN/C/REFwPbEF6PLjyF0kWgxjVowHwYDVR0j
BBgwFoAU17hrW24Gd+7YmjdnDh0EznWe+yYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMi9EN0I4NkI1QjZFMDY3N0VFRDg5QTM3NjcwRTFEMDRDRTc1OUVGQjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3Qjg2QjVCNkUwNjc3RUVE
ODlBMzc2NzBFMUQwNENFNzU5RUZCMjYuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK
NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8yL0FTMjYy
NjczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/
BDEwLzAeBAIAATAYAwQFsbhgAwQFuuvAAwQFu0lAAwQGyaJAMA0EAgACMAcDBQAo
BBh8MA0GCSqGSIb3DQEBCwUAA4IBAQB2ygry15OVnRIYjEf3bH07f6Ll4TZGd8nh
GsIs2PpXRZCfA8Yz98YmjI0jSPNmeKWmMhzCCYxOz1DUHYsXSevSJyTeCq4tw3kh
c8QtYe9tSW/q9yQiedvUJtmBf3KQ5WcazW6IcCNRXoaGEy1vXHRXRgyid2O1ScCE
CDQ1zPGlfRc/R05lfEbeMw7HEr4g4fAip9T74Uph7bSp6JgBAL0MlemEPQmvO7EF
eB2yLKlPsvDREqC19KNomWJn9otzWI4m8KDTyiRW77c4l+vI/hPzpnP25LCNcJr4
Lh35uLUrOdjWpCW3IPPW6UdyS2apGY153lfJv1j3HDlLwreB8Lfi
-----END CERTIFICATE-----
Generated at Wed Nov 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org