Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS265303.roa
File: AS265303.roa (raw, json)
Hash identifier: ista3wynqf3b2uVjwBytZtcDI4rPsYjJbchnhOqrgCs=
Subject key identifier: 55:8D:1F:18:98:77:97:31:BD:C4:C1:2E:D2:7D:59:B2:1C:CE:5F:B9
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 6EBC3FDDD8A5F9361B9A0500ADE68CA293C1DE1B
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS265303.roa
Signing time: Wed 10 Apr 2024 22:46:24 +0000
ROA not before: Wed 10 Apr 2024 22:41:24 +0000
ROA not after: Wed 09 Apr 2025 22:46:24 +0000
asID: 265303
IP address blocks: 168.0.172.0/22 maxlen: 24
177.126.1.0/24 maxlen: 24
177.126.6.0/24 maxlen: 24
177.126.8.0/24 maxlen: 24
177.126.10.0/23 maxlen: 24
177.126.13.0/24 maxlen: 24
177.126.15.0/24 maxlen: 24
187.120.12.0/24 maxlen: 24
189.39.216.0/22 maxlen: 24
200.150.164.0/23 maxlen: 24
200.150.167.0/24 maxlen: 24
200.150.169.0/24 maxlen: 24
200.150.170.0/24 maxlen: 24
200.150.172.0/24 maxlen: 24
200.150.174.0/23 maxlen: 24
201.87.128.0/24 maxlen: 24
201.87.131.0/24 maxlen: 24
201.87.133.0/24 maxlen: 24
201.87.134.0/23 maxlen: 24
201.87.136.0/23 maxlen: 24
201.87.139.0/24 maxlen: 24
201.87.140.0/23 maxlen: 24
201.87.142.0/24 maxlen: 24
201.87.144.0/24 maxlen: 24
201.87.146.0/23 maxlen: 24
201.87.148.0/23 maxlen: 24
201.87.150.0/24 maxlen: 24
201.87.152.0/23 maxlen: 24
201.87.157.0/24 maxlen: 24
2804:2dc8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:bc:3f:dd:d8:a5:f9:36:1b:9a:05:00:ad:e6:8c:a2:93:c1:de:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Apr 10 22:41:24 2024 GMT
Not After : Apr 9 22:46:24 2025 GMT
Subject: CN=558D1F1898779731BDC4C12ED27D59B21CCE5FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:40:1c:2b:3c:57:c9:a7:46:54:3b:33:ce:
f3:87:74:e5:76:21:f4:f3:81:10:b5:7a:e3:27:0c:
06:ad:53:a6:59:c7:41:78:d5:8a:7d:f0:ea:f1:68:
32:18:eb:37:fc:da:db:fb:6b:1c:0d:c8:ea:50:ab:
ac:a9:29:67:1d:fc:d0:78:0c:67:7a:57:b9:32:e9:
ff:be:63:af:ce:fd:75:74:c7:35:2a:db:d4:e1:6c:
95:1f:a7:c9:b9:63:b0:ea:64:7e:f5:7a:a0:dc:23:
ef:35:ca:3e:f2:8f:ea:0e:2f:0f:bc:9f:d4:d0:8a:
1e:b2:f2:bd:27:6d:01:92:57:1f:03:ad:2b:d3:69:
32:82:9c:34:c4:f1:92:91:0a:c5:b8:39:69:83:c0:
c3:15:f2:f4:40:89:57:fe:7f:16:b8:05:ea:4a:2e:
80:06:6b:c1:ab:0d:05:2c:5d:ee:68:22:e0:f6:9f:
a3:e5:d2:04:3b:c8:06:48:60:21:1a:83:e5:f8:d4:
d5:2a:ae:dd:39:f8:aa:ae:ff:7a:89:23:f2:3a:f1:
f8:b5:98:52:f7:af:3a:3f:df:5c:2b:93:57:bb:e4:
a6:95:30:8e:f8:bd:c4:fd:22:21:ae:e0:d2:66:d1:
6a:39:0b:24:48:c1:16:07:f3:c7:68:69:ad:2d:5a:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8D:1F:18:98:77:97:31:BD:C4:C1:2E:D2:7D:59:B2:1C:CE:5F:B9
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS265303.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.172.0/22
177.126.1.0/24
177.126.6.0/24
177.126.8.0/24
177.126.10.0/23
177.126.13.0/24
177.126.15.0/24
187.120.12.0/24
189.39.216.0/22
200.150.164.0/23
200.150.167.0/24
200.150.169.0-200.150.170.255
200.150.172.0/24
200.150.174.0/23
201.87.128.0/24
201.87.131.0/24
201.87.133.0-201.87.137.255
201.87.139.0-201.87.142.255
201.87.144.0/24
201.87.146.0-201.87.150.255
201.87.152.0/23
201.87.157.0/24
IPv6:
2804:2dc8::/32
Signature Algorithm: sha256WithRSAEncryption
49:e9:99:2d:82:5b:bb:ae:8d:1f:c6:22:d7:f7:b2:43:ea:51:
ed:06:7a:c5:fb:11:c5:bb:d5:af:80:17:5a:10:90:da:12:67:
58:0e:86:30:4b:d5:e0:60:55:ab:c9:63:89:bf:d2:12:88:3c:
90:33:77:65:18:76:68:82:6e:0f:b2:8e:ca:16:5a:ea:74:83:
73:94:f7:34:2e:9f:be:0b:0b:34:d4:12:01:44:af:09:76:af:
76:ce:75:1b:79:61:cd:16:54:59:54:43:cf:5c:ee:e3:09:7a:
5f:6a:c9:66:fc:52:e6:24:c2:25:f2:71:1b:67:02:36:f7:99:
42:3a:d7:19:3f:b7:4d:9d:af:fa:a7:88:80:7f:ed:3e:46:a9:
08:0b:fd:85:72:ae:5e:1b:e1:e5:5a:40:ee:79:22:1d:09:87:
5b:2d:27:5b:8f:45:71:b4:ba:5a:75:ea:61:b7:c5:4e:74:41:
61:73:59:de:20:64:ef:92:b0:f9:0e:f9:a5:72:84:a1:b0:a2:
8d:2a:cb:7d:99:ce:1a:68:66:9b:c0:d5:af:2e:6a:4d:03:43:
bc:a2:97:c2:16:4b:1d:9e:9a:15:94:fe:21:0e:23:25:82:f5:
df:e1:82:c7:da:6b:f5:34:25:06:01:e0:b1:c9:b1:cc:f5:65:
3e:7c:c6:5d
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIUbrw/3dil+TYbmgUAreaMopPB3hswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDA0MTAyMjQxMjRaFw0yNTA0MDkyMjQ2MjRaMDMxMTAvBgNV
BAMTKDU1OEQxRjE4OTg3Nzk3MzFCREM0QzEyRUQyN0Q1OUIyMUNDRTVGQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjW0AcKzxXyadGVDszzvOHdOV2
IfTzgRC1euMnDAatU6ZZx0F41Yp98OrxaDIY6zf82tv7axwNyOpQq6ypKWcd/NB4
DGd6V7ky6f++Y6/O/XV0xzUq29ThbJUfp8m5Y7DqZH71eqDcI+81yj7yj+oOLw+8
n9TQih6y8r0nbQGSVx8DrSvTaTKCnDTE8ZKRCsW4OWmDwMMV8vRAiVf+fxa4BepK
LoAGa8GrDQUsXe5oIuD2n6Pl0gQ7yAZIYCEag+X41NUqrt05+Kqu/3qJI/I68fi1
mFL3rzo/31wrk1e75KaVMI74vcT9IiGu4NJm0Wo5CyRIwRYH88doaa0tWtDDAgMB
AAGjggLOMIICyjAdBgNVHQ4EFgQUVY0fGJh3lzG9xMEu0n1ZshzOX7kwHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8wL0FTMjY1
MzAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHQBggrBgEFBQcBBwEB
/wSBwDCBvTCBqwQCAAEwgaQDBAKoAKwDBACxfgEDBACxfgYDBACxfggDBAGxfgoD
BACxfg0DBACxfg8DBAC7eAwDBAK9J9gDBAHIlqQDBADIlqcwDAMEAMiWqQMEAMiW
qgMEAMiWrAMEAciWrgMEAMlXgAMEAMlXgzAMAwQAyVeFAwQByVeIMAwDBADJV4sD
BADJV44DBADJV5AwDAMEAclXkgMEAMlXlgMEAclXmAMEAMlXnTANBAIAAjAHAwUA
KAQtyDANBgkqhkiG9w0BAQsFAAOCAQEASemZLYJbu66NH8Yi1/eyQ+pR7QZ6xfsR
xbvVr4AXWhCQ2hJnWA6GMEvV4GBVq8ljib/SEog8kDN3ZRh2aIJuD7KOyhZa6nSD
c5T3NC6fvgsLNNQSAUSvCXavds51G3lhzRZUWVRDz1zu4wl6X2rJZvxS5iTCJfJx
G2cCNveZQjrXGT+3TZ2v+qeIgH/tPkapCAv9hXKuXhvh5VpA7nkiHQmHWy0nW49F
cbS6WnXqYbfFTnRBYXNZ3iBk75Kw+Q75pXKEobCijSrLfZnOGmhmm8DVry5qTQND
vKKXwhZLHZ6aFZT+IQ4jJYL13+GCx9pr9TQlBgHgscmxzPVlPnzGXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org