Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS262527.roa
File: AS262527.roa (raw, json)
Hash identifier: aPItMMO/swidtcAYHv6smDF/eU98mIxDIMKuS0YbDso=
Subject key identifier: 22:3B:FA:EB:EF:4D:A5:35:29:58:39:E6:58:07:6A:EF:26:70:A7:03
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 37A8726EC293A8D24D2AA272D4082AF15D92F7D5
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS262527.roa
Signing time: Wed 10 Apr 2024 22:21:24 +0000
ROA not before: Wed 10 Apr 2024 22:16:24 +0000
ROA not after: Wed 09 Apr 2025 22:21:24 +0000
asID: 262527
IP address blocks: 177.67.208.0/21 maxlen: 24
2804:59c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a8:72:6e:c2:93:a8:d2:4d:2a:a2:72:d4:08:2a:f1:5d:92:f7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Apr 10 22:16:24 2024 GMT
Not After : Apr 9 22:21:24 2025 GMT
Subject: CN=223BFAEBEF4DA535295839E658076AEF2670A703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:04:5a:fd:0a:65:7d:83:49:c2:a2:35:e8:
74:50:d9:a9:d0:9c:8d:a6:d2:5b:58:94:85:26:a8:
94:4f:f2:e5:5a:61:23:ab:9a:c5:76:68:6e:c2:2c:
99:62:7f:bc:af:5c:59:07:ed:4b:64:34:11:7c:d6:
ca:44:90:b1:d5:9a:b6:3f:42:d0:ff:3e:1b:94:03:
11:47:cf:3e:5e:a8:17:7e:6e:8f:13:33:77:dc:9c:
b7:8d:5a:b8:8e:13:52:bd:13:fa:76:a9:f8:9f:e9:
ee:da:6a:c0:ee:77:59:ea:30:3b:95:2b:b2:7b:d2:
a9:5e:52:cd:26:ce:b5:61:eb:a0:27:71:19:50:a2:
05:f1:de:1b:63:87:08:43:05:89:8a:7c:58:38:39:
25:87:04:63:15:47:c4:7e:43:a4:36:f9:d4:88:c2:
3d:4a:f9:77:14:2c:ff:b0:51:10:6b:0a:af:9b:ad:
45:af:35:51:f8:d3:3e:f4:cb:ed:4a:db:23:9d:7d:
25:7c:8e:99:b5:61:01:df:04:4c:ae:10:85:3c:8c:
84:c1:bc:6a:0f:56:f0:c6:17:cb:17:e4:17:f8:c3:
cc:d9:19:8b:13:dc:c6:e7:55:56:6e:db:d2:d0:be:
85:d5:0d:6c:be:f2:67:c9:f1:24:b0:68:9f:15:47:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3B:FA:EB:EF:4D:A5:35:29:58:39:E6:58:07:6A:EF:26:70:A7:03
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS262527.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.208.0/21
IPv6:
2804:59c::/32
Signature Algorithm: sha256WithRSAEncryption
12:4f:5a:6a:95:a2:af:15:5b:4a:39:aa:46:ed:a8:11:ca:67:
9a:a0:36:d1:ce:ee:fa:3d:ba:5b:ab:c9:1b:fb:4e:a4:58:98:
d4:a3:1e:c5:88:76:dc:95:57:b1:46:97:10:26:5b:04:68:38:
44:eb:6f:b8:58:31:d3:d5:b5:76:17:3e:2a:2b:66:ed:69:f5:
36:f7:de:53:48:a5:b9:d7:af:ba:9d:a0:38:0f:c1:81:38:91:
12:b3:1e:39:33:ca:a1:2c:d9:03:5b:e8:9f:48:73:0b:cd:76:
8d:e3:e2:8a:3d:81:ce:45:b0:d6:cf:58:8e:18:57:8d:9e:8e:
87:40:e7:26:d1:fc:6e:67:f4:10:08:9c:c5:55:97:8c:8e:82:
10:06:b4:7d:72:9b:70:24:22:38:15:ae:4c:7a:66:9c:2a:c0:
86:84:0a:b3:cb:55:79:36:9b:13:91:2c:ec:cd:c3:fe:69:1f:
1d:0b:ac:04:b4:8c:d4:cf:ab:75:f2:82:c6:10:e7:07:95:72:
e4:14:e8:38:d7:48:23:8c:cb:64:07:38:5c:e0:b2:ba:52:4a:
fb:39:f0:c9:04:c8:de:b3:fd:5c:b4:0d:50:e4:53:9b:59:36:
0e:1a:49:e6:b5:38:af:83:eb:31:ad:89:ec:5b:75:60:ad:8d:
48:39:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:05 2025 by rpki-client