Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS271295.roa
File: AS271295.roa (raw, json)
Hash identifier: 8mTaDJC0B9K1BxnR++cn/73HvOjXvUs3DQaR+xN/Cbs=
Subject key identifier: E1:92:BA:37:AD:69:90:40:D5:5F:6C:8A:F4:1D:26:4A:4A:21:EA:68
Certificate issuer: /CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Certificate serial: 71C970B609DB93F51E634835122929A946DB1895
Authority key identifier: 1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS271295.roa
Signing time: Tue 12 Sep 2023 14:16:03 +0000
ROA not before: Tue 12 Sep 2023 14:11:03 +0000
ROA not after: Tue 10 Sep 2024 14:16:03 +0000
asID: 271295
IP address blocks: 190.52.72.0/24 maxlen: 24
190.52.73.0/24 maxlen: 24
190.52.74.0/24 maxlen: 24
190.52.75.0/24 maxlen: 24
2804:7944:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c9:70:b6:09:db:93:f5:1e:63:48:35:12:29:29:a9:46:db:18:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Validity
Not Before: Sep 12 14:11:03 2023 GMT
Not After : Sep 10 14:16:03 2024 GMT
Subject: CN=E192BA37AD699040D55F6C8AF41D264A4A21EA68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:6f:11:75:06:39:27:65:88:2e:14:78:ea:
c4:5d:f3:a9:e4:da:e5:c6:9a:37:0c:5c:e9:2e:dd:
e9:71:b3:e0:c3:ad:c8:d6:2b:60:69:83:14:69:3d:
8e:5f:fd:69:bc:2b:d1:36:bd:fb:32:14:0c:4c:07:
2c:ee:50:0d:23:ec:07:2f:78:bf:e8:58:ed:0f:49:
2e:23:57:e4:97:8a:f5:16:94:47:bd:df:72:77:10:
87:d7:1e:8b:a1:33:3c:ca:df:8a:c8:d0:54:d0:97:
c0:e3:df:5a:2c:46:5f:c4:e9:b5:c3:9a:b0:06:08:
ec:92:a5:e9:2d:ba:eb:50:f9:dc:7a:81:ab:b8:a3:
2d:3a:f6:36:b6:0a:aa:4f:c4:cf:66:d6:8d:dc:0b:
8d:0e:4a:99:da:ce:03:ec:2e:f9:27:73:1f:d0:f1:
80:37:05:74:e0:a6:5a:37:3d:00:6c:55:e6:6a:92:
9e:2d:0e:a9:76:bf:b6:e3:6b:e8:50:7d:5a:b8:c4:
53:bf:0c:01:75:bb:12:6e:f6:c4:c0:2d:9e:bf:f5:
4c:7a:ac:7d:fb:8c:a2:f1:50:65:7a:a4:56:22:b0:
60:30:a9:f6:ff:62:d9:9d:24:3b:be:a8:04:3b:a5:
0b:e5:5d:24:97:37:92:7e:c3:de:df:00:eb:33:1c:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:92:BA:37:AD:69:90:40:D5:5F:6C:8A:F4:1D:26:4A:4A:21:EA:68
X509v3 Authority Key Identifier:
keyid:1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS271295.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.72.0/22
IPv6:
2804:7944:100::/40
Signature Algorithm: sha256WithRSAEncryption
42:22:d1:ea:13:59:dc:6d:12:01:cc:79:97:90:59:4e:ed:0b:
1e:78:78:9a:79:08:bd:70:24:19:d3:c2:3f:81:02:c7:3e:44:
da:0d:38:15:a3:6f:a8:df:79:96:2e:94:2a:f1:44:e9:da:87:
db:47:1a:58:d2:4d:94:61:5f:a5:98:6d:cd:57:7c:88:de:dc:
14:b5:24:cf:ab:a9:29:69:91:cd:f7:98:49:7b:d4:e5:f3:df:
2d:10:91:12:69:30:f9:f5:c2:14:08:f3:9a:ff:fc:fd:3f:59:
6d:45:0a:9d:54:84:ac:41:06:50:1c:de:7a:eb:60:41:79:4e:
df:71:d5:f8:f4:91:37:2c:2c:13:24:62:ec:bd:1a:fe:7f:a3:
81:41:96:dc:fd:5a:ac:b0:a6:ce:29:aa:9e:0e:08:02:2f:64:
73:ea:ac:4c:36:72:10:df:05:7c:dd:1f:f1:bb:d2:79:43:66:
00:2c:25:af:0a:c2:c2:28:58:d9:2a:2e:4a:76:96:43:48:f7:
ad:f0:8e:d1:27:5e:8f:9a:5f:17:41:12:e6:13:fa:03:7e:96:
a7:14:0b:8b:61:12:36:75:ed:b1:00:a7:a6:c7:a5:6e:7a:72:
50:28:1b:25:b0:34:0a:05:9e:96:90:40:10:4d:58:ab:f6:86:
d1:6e:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org