Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS271443.roa
File: AS271443.roa (raw, json)
Hash identifier: WyP6J3WD0eCR9jjO/BYJSF/wQIpvw4ldhdWQPwSGajs=
Subject key identifier: 09:66:B3:42:A4:12:28:26:11:BB:E9:3A:A4:CF:C2:F3:2A:F7:E5:50
Certificate issuer: /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial: 13F713C61D5FE165F57732F5A9B9136CE2047CFD
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS271443.roa
Signing time: Thu 16 Mar 2023 19:13:24 +0000
ROA not before: Thu 16 Mar 2023 19:08:24 +0000
ROA not after: Thu 14 Mar 2024 19:13:24 +0000
asID: 271443
IP address blocks: 179.0.72.0/22 maxlen: 22
179.0.72.0/24 maxlen: 24
179.0.73.0/24 maxlen: 24
179.0.74.0/24 maxlen: 24
179.0.75.0/24 maxlen: 24
2804:7ba0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f7:13:c6:1d:5f:e1:65:f5:77:32:f5:a9:b9:13:6c:e2:04:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
Validity
Not Before: Mar 16 19:08:24 2023 GMT
Not After : Mar 14 19:13:24 2024 GMT
Subject: CN=0966B342A412282611BBE93AA4CFC2F32AF7E550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:aa:fc:a7:fd:10:c4:34:f2:9e:5a:85:71:
57:a9:77:bc:3b:da:8e:7c:8d:82:a5:ec:ba:55:ca:
b7:9c:ee:23:82:dd:f0:bd:22:5c:6c:78:d0:43:fa:
b8:1b:42:d5:e8:08:f5:56:08:23:9b:7d:db:57:fb:
08:c5:5e:2c:50:e7:ab:20:f7:8f:19:5a:fb:2e:7f:
31:5b:50:76:1e:bb:69:5c:b5:85:1e:5d:63:51:ee:
d9:cd:9b:2a:fe:5a:1d:f5:d8:1c:2b:59:dd:97:9c:
2f:55:f8:39:ba:56:7b:56:e2:6e:41:5a:f9:49:77:
92:e6:b6:e0:0b:d8:00:e4:b4:d9:37:2c:e8:7f:17:
a3:29:71:64:0c:b8:ea:55:20:22:96:5a:22:3d:e5:
1b:dc:4b:fe:a6:a6:98:35:84:e5:1c:f3:16:59:c2:
c6:6b:c7:87:d7:1c:51:7b:c3:74:aa:0b:68:8e:0f:
04:76:9b:0c:73:17:51:16:6f:d4:99:48:72:31:e7:
52:54:ec:28:94:1c:f7:ac:24:ef:8d:22:8e:ee:eb:
54:1c:a9:91:3d:bd:8c:84:ac:0d:d0:08:d4:4f:16:
41:d2:97:88:d2:43:49:0e:36:d2:2e:cb:8b:8c:d7:
8b:85:d3:8c:40:77:40:77:69:17:6d:41:78:32:4a:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:B3:42:A4:12:28:26:11:BB:E9:3A:A4:CF:C2:F3:2A:F7:E5:50
X509v3 Authority Key Identifier:
keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/AS271443.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.72.0/22
IPv6:
2804:7ba0::/32
Signature Algorithm: sha256WithRSAEncryption
29:5b:ed:01:3c:70:df:84:eb:eb:d1:ab:3f:a8:2a:a5:56:5a:
31:06:b5:32:77:82:15:ff:3e:00:77:41:9d:21:a3:27:9f:15:
2c:0b:23:5a:79:5b:ae:28:c0:ed:a1:72:67:5a:de:2a:d6:e6:
2c:cf:44:65:d9:38:34:09:68:40:ef:86:ab:58:3a:fd:01:a4:
f8:f0:5c:56:35:6b:3b:53:f9:ee:4f:b0:68:e8:12:57:9b:ef:
50:da:48:5d:aa:29:34:95:0b:63:95:50:6e:8a:08:11:80:04:
f7:ab:47:05:e0:b9:82:68:60:57:a1:8e:84:c0:80:54:de:e1:
8f:4e:df:d9:65:9f:a9:08:e9:9c:ab:e9:40:19:16:b0:5c:b1:
86:6f:58:b4:d8:0b:a9:a4:48:51:8a:0c:75:7b:51:39:70:ff:
0d:9a:11:e6:84:55:92:ef:8a:3c:a9:57:55:20:42:33:d9:b2:
bd:4a:35:13:12:c8:f0:ef:81:08:bf:be:e3:94:68:91:01:d4:
9b:bf:a3:8e:78:fb:bb:98:55:8e:91:6a:f4:22:63:f9:65:99:
f0:b0:33:93:f5:b9:a1:7c:b0:6a:8c:c5:ed:1a:e9:e4:c5:15:
1f:4d:c0:47:52:62:2d:79:f4:ae:44:3a:91:17:19:79:18:3b:
1e:bb:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:56 2025 by rpki-client