Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS262907.roa
File: AS262907.roa (raw, json)
Hash identifier: WyML96Bv6hSxaTDINYyjzA6Vz5d62Rnzm1Ua3wQ5LyM=
Subject key identifier: 5B:E0:4C:E4:AE:8F:FE:90:22:19:C5:83:C3:D8:20:48:61:0C:6C:08
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 5C97A2739E594A4EDC4F879B63E4F390AE380921
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS262907.roa
Signing time: Wed 10 Apr 2024 22:01:13 +0000
ROA not before: Wed 10 Apr 2024 21:56:13 +0000
ROA not after: Wed 09 Apr 2025 22:01:13 +0000
asID: 262907
IP address blocks: 45.178.40.0/22 maxlen: 24
45.184.148.0/22 maxlen: 24
45.226.16.0/22 maxlen: 24
45.237.80.0/22 maxlen: 24
131.161.0.0/22 maxlen: 24
131.221.52.0/22 maxlen: 24
143.208.76.0/22 maxlen: 24
168.0.88.0/22 maxlen: 24
168.0.160.0/22 maxlen: 24
168.121.92.0/22 maxlen: 24
168.197.252.0/22 maxlen: 24
168.227.168.0/22 maxlen: 24
170.83.72.0/22 maxlen: 24
170.254.188.0/22 maxlen: 24
177.11.192.0/21 maxlen: 24
177.11.200.0/21 maxlen: 24
177.36.32.0/20 maxlen: 24
177.44.192.0/20 maxlen: 24
177.66.176.0/22 maxlen: 24
177.72.96.0/21 maxlen: 24
177.87.184.0/22 maxlen: 24
177.87.188.0/22 maxlen: 24
177.87.216.0/21 maxlen: 24
177.92.168.0/21 maxlen: 24
177.104.96.0/20 maxlen: 24
177.130.32.0/20 maxlen: 24
177.155.102.0/23 maxlen: 24
177.155.104.0/22 maxlen: 24
177.185.124.0/22 maxlen: 24
186.195.16.0/20 maxlen: 24
186.209.80.0/21 maxlen: 24
186.251.168.0/22 maxlen: 24
187.16.224.0/20 maxlen: 24
187.49.156.0/22 maxlen: 24
187.60.96.0/20 maxlen: 24
187.60.176.0/20 maxlen: 24
187.84.48.0/20 maxlen: 24
191.6.160.0/22 maxlen: 24
191.253.192.0/20 maxlen: 24
200.18.112.0/20 maxlen: 24
201.87.192.0/20 maxlen: 24
2804:297c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:97:a2:73:9e:59:4a:4e:dc:4f:87:9b:63:e4:f3:90:ae:38:09:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Apr 10 21:56:13 2024 GMT
Not After : Apr 9 22:01:13 2025 GMT
Subject: CN=5BE04CE4AE8FFE902219C583C3D82048610C6C08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:96:cd:66:72:49:0b:b3:91:9d:1b:49:07:
3f:c0:6f:7d:10:ed:a9:0a:8c:81:24:ae:fc:40:ae:
42:ad:d2:4b:7a:39:c8:bc:32:0f:72:29:c0:7d:e6:
e7:53:10:71:85:20:41:9e:84:48:93:37:ae:ce:1e:
66:15:03:cc:c4:71:c7:bb:f7:c1:c3:27:de:f8:d3:
15:f0:6b:52:f4:24:ff:49:7a:90:66:6b:87:f4:4f:
01:c8:7e:ff:e9:c3:b4:96:11:53:dc:b0:79:10:18:
68:53:de:49:a1:4e:a7:26:7b:6b:38:62:e4:b1:5a:
31:b7:14:47:65:8e:04:81:dc:62:da:e5:b8:c3:df:
78:1a:be:ee:fb:df:ae:95:77:9b:3b:13:c4:8e:37:
e7:15:62:81:59:3c:82:62:b4:c1:db:40:f4:64:37:
86:95:1b:d1:95:c3:e9:63:5a:13:ee:85:9e:4c:d2:
f6:44:8d:6e:14:43:37:fe:cd:96:2d:ef:15:e7:3d:
d0:77:0c:39:70:82:51:06:c4:60:c8:45:a7:2c:f4:
28:d9:c8:6b:b1:0c:6c:c1:e4:b5:66:7b:51:0e:34:
ee:25:47:90:a8:94:db:94:ba:55:7e:91:0c:9e:11:
aa:d3:62:87:69:60:26:5f:64:90:cc:c0:d8:2b:d8:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E0:4C:E4:AE:8F:FE:90:22:19:C5:83:C3:D8:20:48:61:0C:6C:08
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS262907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.40.0/22
45.184.148.0/22
45.226.16.0/22
45.237.80.0/22
131.161.0.0/22
131.221.52.0/22
143.208.76.0/22
168.0.88.0/22
168.0.160.0/22
168.121.92.0/22
168.197.252.0/22
168.227.168.0/22
170.83.72.0/22
170.254.188.0/22
177.11.192.0/20
177.36.32.0/20
177.44.192.0/20
177.66.176.0/22
177.72.96.0/21
177.87.184.0/21
177.87.216.0/21
177.92.168.0/21
177.104.96.0/20
177.130.32.0/20
177.155.102.0-177.155.107.255
177.185.124.0/22
186.195.16.0/20
186.209.80.0/21
186.251.168.0/22
187.16.224.0/20
187.49.156.0/22
187.60.96.0/20
187.60.176.0/20
187.84.48.0/20
191.6.160.0/22
191.253.192.0/20
200.18.112.0/20
201.87.192.0/20
IPv6:
2804:297c::/32
Signature Algorithm: sha256WithRSAEncryption
46:16:78:57:70:d9:a7:0c:49:58:72:ea:26:a4:e8:16:33:b4:
c6:fa:4d:7b:17:28:79:43:46:81:3c:9f:dd:51:42:54:0d:34:
b0:92:f3:1f:c3:73:1b:37:cf:93:59:c5:0b:bd:6f:9f:0f:e8:
2c:6d:74:52:7c:c3:c5:87:25:4f:a8:cd:a8:eb:c1:04:f6:e1:
a8:95:f3:f8:10:bf:8f:d7:67:ca:a6:ee:e9:44:21:a7:e1:73:
68:2b:30:e5:42:b1:5a:40:8b:74:7e:4b:0f:b7:9b:8e:26:96:
11:7d:c5:80:64:68:8c:88:63:0a:43:1f:e9:7d:19:ce:73:f4:
b5:5a:7b:20:14:5e:61:5e:8f:d6:a1:8a:95:2b:83:c7:3d:3c:
7e:3c:04:14:5a:4a:3e:df:18:45:4f:a8:df:23:8e:76:39:72:
94:7c:20:b6:7f:d5:1e:f6:e1:57:9a:db:8d:25:d9:5e:ba:85:
ec:5b:db:8f:46:d6:4c:7e:23:14:ae:3f:31:02:1c:23:0d:f7:
3f:00:bb:83:76:b6:d8:62:85:37:29:dd:a0:f0:7f:fc:c8:35:
4a:ca:86:3a:61:ac:74:35:41:4a:b4:4d:3b:19:f7:8e:96:43:
2b:cb:b2:25:bb:ab:0b:73:58:99:1e:2d:7a:0e:9b:83:f7:47:
92:76:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org