Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS264228.roa
File: AS264228.roa (raw, json)
Hash identifier: BXiwn4VKikeMqQcTQFYYegp1cEUi3h4Jn/Z/w139YzY=
Subject key identifier: 2E:BF:E2:94:18:21:F7:E1:F8:BB:6D:79:C0:90:26:36:09:A1:CF:06
Certificate issuer: /CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Certificate serial: 694AA9BAE4BD63EE2DAE76E92440A86ABA0C4471
Authority key identifier: 1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS264228.roa
Signing time: Tue 12 Sep 2023 14:16:03 +0000
ROA not before: Tue 12 Sep 2023 14:11:03 +0000
ROA not after: Tue 10 Sep 2024 14:16:03 +0000
asID: 264228
IP address blocks: 168.195.100.0/22 maxlen: 22
168.195.100.0/23 maxlen: 23
168.195.100.0/24 maxlen: 24
168.195.101.0/24 maxlen: 24
168.195.102.0/23 maxlen: 23
168.195.102.0/24 maxlen: 24
168.195.103.0/24 maxlen: 24
190.109.64.0/22 maxlen: 22
190.109.64.0/23 maxlen: 23
190.109.64.0/24 maxlen: 24
190.109.65.0/24 maxlen: 24
190.109.66.0/23 maxlen: 23
190.109.66.0/24 maxlen: 24
190.109.67.0/24 maxlen: 24
2804:2488::/32 maxlen: 32
2804:2488::/36 maxlen: 36
2804:2488::/48 maxlen: 48
2804:2488:10::/48 maxlen: 48
2804:2488:505::/48 maxlen: 48
2804:2488:506::/48 maxlen: 48
2804:2488:1000::/36 maxlen: 36
2804:2488:2000::/36 maxlen: 36
2804:2488:3000::/36 maxlen: 36
2804:2488:5000::/36 maxlen: 36
2804:2488:6000::/36 maxlen: 36
2804:2488:6080::/44 maxlen: 44
2804:2488:7000::/36 maxlen: 36
2804:2488:7080::/44 maxlen: 44
2804:2488:8000::/36 maxlen: 36
2804:2488:9000::/36 maxlen: 36
2804:2488:9080::/44 maxlen: 44
2804:2488:a000::/36 maxlen: 36
2804:2488:a080::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4a:a9:ba:e4:bd:63:ee:2d:ae:76:e9:24:40:a8:6a:ba:0c:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Validity
Not Before: Sep 12 14:11:03 2023 GMT
Not After : Sep 10 14:16:03 2024 GMT
Subject: CN=2EBFE2941821F7E1F8BB6D79C090263609A1CF06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:a2:fa:7f:77:e7:85:ca:46:f9:7b:e6:93:
81:de:25:a4:7e:aa:10:f7:0c:02:55:a5:f1:e6:1d:
87:57:38:99:12:b9:50:d4:72:e8:ee:52:1c:d6:db:
fa:5d:7e:71:85:c3:86:21:36:93:1d:f0:d1:01:b5:
6d:c4:96:d4:45:fd:e3:8b:5f:4e:6e:d8:37:bb:85:
24:be:c5:b0:c9:f3:46:31:fe:4d:ad:28:3a:d2:fc:
9a:19:fb:d4:14:f2:c5:c3:67:a0:a5:90:6f:a9:e4:
c8:b7:89:c6:3f:97:35:36:2f:1d:6e:ff:1a:9e:1f:
9f:1e:36:de:66:2b:a0:b8:fa:45:20:dc:b4:a1:a5:
62:5d:34:0c:a9:3b:f7:a4:4b:05:f4:54:06:b4:04:
59:94:a7:8f:d2:f1:22:95:21:2d:d4:e6:d0:bf:a3:
c1:af:1b:93:fa:a9:7a:53:9c:7b:12:15:7f:2e:04:
58:e6:e9:63:27:3e:cf:40:17:70:6d:99:43:4c:24:
17:af:22:ec:53:c5:f8:bf:a1:d7:09:b4:56:37:b2:
71:98:db:fb:d2:7a:18:7b:f6:9f:f3:ff:ac:13:0b:
19:34:e2:92:aa:84:b1:ff:e8:6c:9a:60:21:d8:be:
f9:3a:30:80:6b:bc:e1:29:1e:c7:f0:aa:4d:db:fd:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:E2:94:18:21:F7:E1:F8:BB:6D:79:C0:90:26:36:09:A1:CF:06
X509v3 Authority Key Identifier:
keyid:1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS264228.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.100.0/22
190.109.64.0/22
IPv6:
2804:2488::/32
Signature Algorithm: sha256WithRSAEncryption
01:52:09:e6:e6:11:c4:53:b0:a1:6c:a6:a8:b0:5d:c5:54:dc:
0f:cf:6d:dc:f3:a1:e1:56:9a:8e:ac:e3:6e:d7:9d:81:76:a8:
27:87:4c:a2:7e:56:e3:30:dd:2b:a0:9d:a2:3b:7f:e3:77:22:
86:2c:d2:c4:66:82:a1:77:44:41:bc:cd:6d:8b:f1:15:b3:3d:
01:e4:85:e9:5f:30:fc:04:ab:b3:c6:27:45:d0:9e:17:d7:51:
98:9a:f9:7d:f7:a3:91:b7:70:31:5d:6d:16:3a:be:15:9d:59:
9a:df:58:e2:dd:5b:ad:64:f1:52:52:ce:cb:6d:37:a2:c7:0f:
64:cc:70:c1:f0:16:f6:5f:f5:e5:e4:e3:5a:28:5e:2a:a3:b8:
51:13:dd:4f:58:41:8c:52:7c:be:b4:7b:15:32:f2:f2:3b:1c:
89:bd:1f:4a:f1:45:aa:3a:16:6e:a2:c6:04:87:2f:0f:65:a2:
cb:33:04:b4:a1:05:1d:57:8e:91:1d:a2:c2:4f:57:44:8e:2e:
ad:3d:e0:7c:48:2a:4d:c0:99:03:e6:3d:ab:6f:73:59:97:2d:
21:98:c4:02:cd:11:29:e8:65:53:60:3e:22:11:fd:b0:5c:3b:
38:17:1b:f8:6c:57:c9:51:d4:7b:84:0f:05:d4:1b:c9:8a:73:
63:d4:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org