Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS268193.roa
File: AS268193.roa (raw, json)
Hash identifier: hQRyZgxnfgEvezmY7y0Qn9X5lpT9j7k6jTmCPvk5t5I=
Subject key identifier: 52:44:F5:48:91:CA:E6:62:1B:0D:53:69:6A:1A:3C:F0:68:12:68:FC
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 134011A3CE25B62E5C34EFD44549FB19D608F6FC
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS268193.roa
Signing time: Wed 10 Apr 2024 22:51:45 +0000
ROA not before: Wed 10 Apr 2024 22:46:45 +0000
ROA not after: Wed 09 Apr 2025 22:51:45 +0000
asID: 268193
IP address blocks: 45.235.168.0/22 maxlen: 24
2804:4d64::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:40:11:a3:ce:25:b6:2e:5c:34:ef:d4:45:49:fb:19:d6:08:f6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Apr 10 22:46:45 2024 GMT
Not After : Apr 9 22:51:45 2025 GMT
Subject: CN=5244F54891CAE6621B0D53696A1A3CF0681268FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:b8:d5:ce:06:0a:0f:e6:3e:f5:62:d0:32:
f7:44:06:67:04:ec:cc:e5:50:97:61:c9:6f:e8:93:
8a:62:10:2c:8c:4f:e7:41:71:69:5f:bf:2c:a2:9f:
5f:85:1c:e2:a1:11:1f:21:79:d3:13:7d:58:15:c4:
13:d7:70:c4:32:47:e9:3e:ee:8f:93:49:c6:41:72:
c2:08:a2:fc:c4:2e:a4:95:70:63:5c:84:77:95:6f:
cf:fa:59:8a:ad:7a:0c:d7:8c:a6:b0:df:ab:5d:00:
33:f2:a1:d5:58:02:1e:1f:bd:77:e1:9e:04:e3:2c:
aa:8f:19:a6:fb:b7:35:6b:8d:2f:02:ae:49:41:9a:
6a:2d:28:7f:38:dc:83:76:37:ee:ef:13:52:96:75:
1a:a1:18:02:11:65:3d:10:b5:74:5f:0d:ca:e8:37:
27:a1:e9:34:c7:87:34:21:d8:8f:e0:f8:b0:66:16:
b5:20:39:64:78:43:c5:d5:5d:81:d2:c6:c6:69:78:
75:ba:2c:97:0f:94:d2:73:35:b3:67:c1:d8:d8:30:
6b:81:22:ea:95:fe:c1:1d:92:8d:66:a5:ed:90:13:
96:90:17:e4:fa:ab:5e:e6:0a:65:ab:de:f8:34:ec:
32:8f:44:20:71:2c:26:ce:9d:09:58:32:58:6e:92:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:44:F5:48:91:CA:E6:62:1B:0D:53:69:6A:1A:3C:F0:68:12:68:FC
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS268193.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.168.0/22
IPv6:
2804:4d64::/32
Signature Algorithm: sha256WithRSAEncryption
a1:22:9f:f0:57:ae:69:cf:e3:78:25:5f:13:43:6d:ee:6f:38:
2b:9a:4b:bb:8d:67:1b:ee:46:7c:c2:e5:64:b1:41:6b:e1:52:
00:cc:5a:49:7e:b2:27:73:94:10:ab:04:5b:1d:44:20:e8:fb:
2e:f9:ce:5e:ad:96:ac:0d:ef:fb:be:d1:e8:58:f4:1e:8e:af:
7e:db:0a:c9:6f:e7:49:74:ec:9e:b1:93:25:e1:16:0e:8d:92:
a9:72:6b:9f:43:f9:13:64:b9:df:c4:39:4d:7d:a3:47:ac:d2:
68:71:50:6d:c2:38:6b:39:3e:ac:da:67:69:98:ae:dd:f7:02:
28:3b:e6:19:d5:f3:cf:b8:28:ec:93:0b:2c:0d:fb:bc:de:1b:
d3:2f:01:31:cf:cf:d7:b3:33:e9:14:ed:32:64:be:83:db:3c:
3e:56:bd:f1:b4:b3:9d:d2:42:d4:05:18:22:64:da:ea:ff:25:
be:77:68:78:c9:3f:ae:b5:4f:7b:b7:21:07:74:58:29:c1:4b:
ff:37:1a:65:b9:33:9c:09:4f:1d:f4:7b:c8:2d:59:53:96:72:
d7:65:19:57:66:1f:ff:30:19:a2:83:e6:c4:95:1a:45:bf:90:
bd:92:d9:ad:53:f0:e8:03:5a:9d:9d:a1:78:dc:78:f9:0e:d4:
3c:97:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org