Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS52674.roa
File: AS52674.roa (raw, json)
Hash identifier: UvoNRaXmOIz69AsJ5/+H7e+H5Le6VWrdeLGt6W57K1M=
Subject key identifier: CD:90:07:3C:53:71:98:E8:37:56:7E:86:02:9B:E8:C0:8E:21:FB:D5
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 64E2FA0E46A047D2E8C9B887E8F1022D11B550D0
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS52674.roa
Signing time: Wed 10 Apr 2024 22:01:13 +0000
ROA not before: Wed 10 Apr 2024 21:56:13 +0000
ROA not after: Wed 09 Apr 2025 22:01:13 +0000
asID: 52674
IP address blocks: 131.161.40.0/22 maxlen: 24
168.227.236.0/22 maxlen: 24
177.67.88.0/22 maxlen: 24
2804:1d40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e2:fa:0e:46:a0:47:d2:e8:c9:b8:87:e8:f1:02:2d:11:b5:50:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Apr 10 21:56:13 2024 GMT
Not After : Apr 9 22:01:13 2025 GMT
Subject: CN=CD90073C537198E837567E86029BE8C08E21FBD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:d5:cf:b0:10:5d:50:43:d2:86:fe:c1:26:
64:38:0d:23:e1:f7:db:6b:aa:32:37:71:e0:7d:88:
dc:77:bb:8c:41:ff:e5:fe:0d:d4:6b:a1:43:27:f0:
7d:e1:28:ee:e7:12:92:3c:f7:7d:f5:05:6e:01:b3:
2a:77:52:25:71:a2:80:71:15:a8:f4:3a:ce:26:97:
cf:2e:22:52:58:d6:f0:8c:b7:9b:a1:48:55:cd:a5:
1f:62:51:96:0a:f2:a8:54:35:86:cd:67:57:12:57:
46:33:23:ea:6e:78:ea:5a:df:3e:de:9d:56:f6:c8:
77:49:7e:f1:3d:cf:9b:a7:87:98:ef:6f:1a:b5:1e:
7e:f1:e8:52:fe:24:2a:cd:5e:af:d8:20:24:7f:fb:
13:f1:d2:3e:94:e3:09:35:8d:d2:23:3b:1a:e2:20:
93:0c:fe:21:8a:47:a5:79:84:f0:bf:cc:d6:54:23:
55:eb:d5:2a:30:09:ef:5e:48:11:4f:18:e2:78:68:
e1:57:5c:1d:89:9a:9c:10:44:ff:a4:76:8f:6e:2c:
f8:25:1c:88:42:83:c4:3c:f3:28:85:40:b0:8d:79:
f2:99:8a:be:d7:37:2b:16:d6:c1:a6:9c:8c:ab:05:
24:71:82:f3:5a:e6:41:65:91:a8:76:0a:36:14:f6:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:90:07:3C:53:71:98:E8:37:56:7E:86:02:9B:E8:C0:8E:21:FB:D5
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS52674.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.40.0/22
168.227.236.0/22
177.67.88.0/22
IPv6:
2804:1d40::/32
Signature Algorithm: sha256WithRSAEncryption
75:28:11:cd:28:f0:7d:b0:23:b7:fd:90:56:4f:69:0a:b2:68:
d2:92:50:e2:fd:75:09:3a:75:ce:2f:b2:ab:1f:e6:ab:90:cf:
b9:a8:a9:39:62:72:de:d1:98:12:bd:1b:ee:b3:6d:30:85:a5:
b6:c2:d3:e9:e5:12:e6:93:7a:b3:ce:37:eb:fc:2c:32:51:e4:
28:07:a7:5e:f8:3e:96:1c:61:aa:bf:9b:b4:8a:f2:08:72:44:
82:ed:96:93:18:fa:03:ea:fc:49:63:33:ab:36:20:cc:72:ef:
c3:a1:f8:1c:4b:01:62:79:bb:b2:d5:2e:39:a7:15:be:65:86:
d4:64:91:92:15:7a:45:50:f4:50:bc:46:ec:ed:96:1c:b7:67:
23:1c:57:0e:36:7d:78:b8:76:88:58:bc:3d:bb:4c:d4:a7:93:
08:05:45:b1:6d:1d:a8:26:2f:42:13:41:6d:85:7b:54:b9:2f:
b8:a5:dc:61:fc:e1:fc:7d:44:35:fe:dd:ea:24:06:54:6d:d7:
c5:17:46:59:2d:63:97:a5:0c:99:7e:2d:07:a7:20:f6:1a:ab:
d2:bb:34:ee:e8:7e:06:8f:ef:67:67:c9:2e:05:a5:da:ed:e2:
e6:70:ce:96:02:0e:6a:4c:a6:fc:f8:d9:b2:ee:5f:3f:78:26:
22:20:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org