Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS262605.roa
File: AS262605.roa (raw, json)
Hash identifier: J90gObX8CR4c0zIUaDEiFw2f5MGvp6J+L7kRmxjClTA=
Subject key identifier: 20:DD:08:17:D3:A5:9B:36:E6:E7:D4:9E:9F:E9:A0:38:8D:6E:96:E8
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 2DB031801DC5D6460FE55231F1014053F30097BC
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS262605.roa
Signing time: Wed 10 Apr 2024 22:01:13 +0000
ROA not before: Wed 10 Apr 2024 21:56:13 +0000
ROA not after: Wed 09 Apr 2025 22:01:13 +0000
asID: 262605
IP address blocks: 132.255.252.0/22 maxlen: 24
138.99.84.0/22 maxlen: 24
143.202.108.0/22 maxlen: 24
170.80.104.0/22 maxlen: 24
177.84.232.0/22 maxlen: 24
177.128.44.0/22 maxlen: 24
177.184.248.0/21 maxlen: 24
186.250.8.0/22 maxlen: 24
186.250.12.0/22 maxlen: 24
2804:24c::/32 maxlen: 48
2804:da8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b0:31:80:1d:c5:d6:46:0f:e5:52:31:f1:01:40:53:f3:00:97:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Apr 10 21:56:13 2024 GMT
Not After : Apr 9 22:01:13 2025 GMT
Subject: CN=20DD0817D3A59B36E6E7D49E9FE9A0388D6E96E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:cc:51:2b:47:ad:ad:10:f2:a6:42:3c:b8:
38:ba:59:39:9e:a1:fd:71:af:33:54:5f:cd:82:4f:
c3:64:87:e6:a4:e1:a2:90:e1:f5:2b:1c:ad:db:64:
ef:7f:59:39:08:b0:a8:c0:60:e9:42:ce:c8:40:57:
2e:46:1a:ed:fd:aa:37:82:9d:a3:a6:82:5c:30:4f:
24:6a:a0:6d:f1:27:b5:19:7f:c1:0d:99:b6:37:ab:
80:99:66:bf:f2:39:10:ff:44:5a:9f:d0:89:1f:86:
b6:bf:8d:d0:69:fb:f8:8d:03:9e:58:4c:29:7e:b6:
0f:37:b6:f5:68:6b:c5:97:91:1e:6b:be:9a:2b:13:
22:ab:25:ef:83:7d:9b:17:da:8f:e1:50:6c:e4:dc:
c9:a1:b3:ff:24:b7:26:47:9a:8e:40:82:85:5d:9c:
d1:e8:11:86:9c:42:1d:08:7b:95:a1:e6:24:d6:12:
67:e0:47:bc:4c:34:97:86:b9:6e:a5:8a:25:56:4e:
36:18:ba:36:41:61:80:2a:b5:45:c4:9a:3d:6a:67:
25:a6:2c:d6:f0:2f:5b:84:41:83:79:57:61:5e:15:
bc:cd:d7:6d:a1:55:c5:74:3c:06:55:96:6f:81:23:
f1:a4:ce:32:18:a7:e7:ed:f6:cb:a9:8a:76:ec:74:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:08:17:D3:A5:9B:36:E6:E7:D4:9E:9F:E9:A0:38:8D:6E:96:E8
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS262605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.252.0/22
138.99.84.0/22
143.202.108.0/22
170.80.104.0/22
177.84.232.0/22
177.128.44.0/22
177.184.248.0/21
186.250.8.0/21
IPv6:
2804:24c::/32
2804:da8::/32
Signature Algorithm: sha256WithRSAEncryption
9f:6e:4c:b8:06:ce:00:50:24:27:74:c6:67:21:fd:6e:9f:36:
ef:31:62:4b:62:3c:21:ad:d3:2b:44:9e:57:c8:26:4e:1b:91:
b7:1f:e6:87:c1:a5:de:19:3d:ae:fa:e3:c2:24:f4:f7:8f:c4:
86:89:07:1c:46:94:12:31:cf:94:6a:c1:f0:6a:97:05:61:3a:
ec:f5:a9:99:18:ae:48:b2:33:36:9f:b2:9b:25:8e:77:ef:1a:
67:fa:18:c4:b4:40:28:3d:bf:25:1f:99:d2:77:e2:cc:e8:8a:
fa:0c:01:9a:04:32:9a:98:2e:b0:31:43:9b:3a:05:95:5c:f1:
1b:b0:71:e9:bb:01:90:92:61:9e:ef:96:0f:5f:5a:fa:fa:b6:
42:c9:be:52:fd:1b:b8:c2:83:6f:4f:7f:45:db:b9:0b:57:3a:
1c:6d:cc:05:ef:d4:4c:bb:94:9e:bb:88:20:71:14:4f:4a:0d:
04:62:5e:cc:d1:b2:4b:4c:7a:12:da:42:8d:98:ad:76:90:35:
e1:78:6e:99:07:c6:e4:50:51:e7:45:7f:2f:db:20:39:d5:bd:
94:2c:6e:cd:6b:ad:d6:44:f9:03:2b:4e:03:51:00:54:4e:dd:
8d:52:32:f4:2f:c3:3d:78:0d:cd:57:ab:02:9f:21:cd:d8:b7:
ef:fc:de:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:04:06 2025 by rpki-client