Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS53191.roa
File: AS53191.roa (raw, json)
Hash identifier: jdTJSP075Z4Bn5w7HiQz2iUY1ToRQ9x7JSkWUM13+CY=
Subject key identifier: 75:B5:DD:25:D4:44:35:FC:D4:E8:19:C1:DF:30:E7:86:89:BD:BF:D1
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 3C26F4A56AFE79DF8460145BB84063D0FE0072D3
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS53191.roa
Signing time: Tue 23 Jul 2024 12:10:30 +0000
ROA not before: Tue 23 Jul 2024 12:05:30 +0000
ROA not after: Tue 22 Jul 2025 12:10:30 +0000
asID: 53191
IP address blocks: 177.8.216.0/22 maxlen: 24
186.232.128.0/21 maxlen: 24
2804:f2c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:26:f4:a5:6a:fe:79:df:84:60:14:5b:b8:40:63:d0:fe:00:72:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:30 2024 GMT
Not After : Jul 22 12:10:30 2025 GMT
Subject: CN=75B5DD25D44435FCD4E819C1DF30E78689BDBFD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:38:51:8d:9d:24:b4:a4:34:af:59:ee:fc:
42:ce:21:aa:42:22:7f:0e:a6:16:5e:40:3b:19:cc:
81:a5:bc:26:85:8b:50:f9:dd:ed:36:96:af:d4:39:
32:e4:d8:97:b6:19:ce:1d:7e:6f:0a:58:df:de:92:
d2:b2:aa:4c:59:90:35:b4:ef:05:58:06:28:f5:d4:
bc:39:7c:a2:ea:39:79:de:2d:d8:3b:ba:32:98:37:
a7:38:4f:dd:02:ab:2c:7a:59:af:f4:4d:8f:69:04:
6d:4e:da:5c:2b:74:cd:06:24:49:fd:4a:eb:b2:6d:
4f:b3:7a:25:c1:4c:df:3a:12:43:b9:32:4f:27:4e:
ac:0b:c1:2d:0a:5d:48:13:1c:98:f8:97:9b:f2:cc:
52:c3:cb:59:94:ad:0c:bf:3c:40:35:a1:6f:14:f1:
26:02:61:8f:55:ec:63:c9:05:ee:d6:db:b7:6c:e9:
60:a2:3e:16:00:1b:8f:59:b6:0a:ad:71:11:99:c1:
a2:7c:87:d2:46:48:4a:bf:d8:23:63:49:12:cd:ff:
6f:f4:d5:13:1c:a1:bc:2d:08:d4:67:c8:57:66:a2:
90:6c:4d:ba:8c:7c:ba:35:2c:93:b5:b4:78:e3:9e:
b0:80:86:84:37:c5:59:7f:31:1f:9d:a6:75:de:1e:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:DD:25:D4:44:35:FC:D4:E8:19:C1:DF:30:E7:86:89:BD:BF:D1
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS53191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.216.0/22
186.232.128.0/21
IPv6:
2804:f2c::/32
Signature Algorithm: sha256WithRSAEncryption
0b:08:43:53:04:a7:30:17:66:d1:70:92:24:dd:58:ce:6c:65:
6e:b3:9a:72:41:74:ce:06:4f:1e:50:6d:6f:ff:21:cf:60:ae:
77:76:49:39:48:b0:ac:fa:d1:95:f1:be:d9:1b:9a:c7:ba:73:
cb:f7:95:e2:f2:37:3f:ca:fd:99:ae:80:b4:23:58:6d:c5:f7:
5b:18:92:db:58:76:7b:7a:1a:fa:4a:b0:ac:e5:d0:02:9d:8c:
2e:21:45:10:2d:65:75:ff:de:67:d7:75:9a:f4:31:e1:00:57:
5d:57:78:fe:a4:e8:97:69:86:25:94:61:75:9a:b4:24:67:da:
18:67:72:c8:2a:aa:74:87:7c:01:5d:81:f8:a4:17:05:dc:73:
17:b8:79:5b:65:97:82:db:d9:d6:2c:bf:44:ef:ab:13:5b:97:
35:7e:31:08:50:27:dc:c4:ce:6e:21:0d:14:60:d2:23:5e:95:
93:94:5c:5a:21:32:c0:a3:e9:d4:08:fd:c7:00:77:90:c7:e1:
88:21:ea:36:98:4a:d2:27:bb:f8:98:64:42:be:a2:e6:b7:62:
e9:30:af:fc:f5:51:4c:02:a2:4b:ef:79:ef:c5:80:fe:9f:57:
1e:14:b5:bf:17:a3:1f:f1:7c:65:27:8e:4a:c7:2a:aa:27:6e:
89:61:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:45 2025 by rpki-client