Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS52866.roa
File: AS52866.roa (raw, json)
Hash identifier: MN9gOMbxTHlEa1/36X2Pdq11UeD5AXBCMlQCkleqgCk=
Subject key identifier: 53:1A:5E:90:72:32:A6:5D:83:30:58:CE:C0:80:44:74:AB:05:F2:CF
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 295C5D7EC847B1AAE4078B3F4A5C1B585F414707
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS52866.roa
Signing time: Wed 10 Apr 2024 22:11:50 +0000
ROA not before: Wed 10 Apr 2024 22:06:50 +0000
ROA not after: Wed 09 Apr 2025 22:11:50 +0000
asID: 52866
IP address blocks: 131.100.128.0/22 maxlen: 24
138.94.112.0/22 maxlen: 24
170.81.244.0/22 maxlen: 24
177.125.24.0/22 maxlen: 24
186.233.220.0/22 maxlen: 24
2804:bdc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5c:5d:7e:c8:47:b1:aa:e4:07:8b:3f:4a:5c:1b:58:5f:41:47:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Apr 10 22:06:50 2024 GMT
Not After : Apr 9 22:11:50 2025 GMT
Subject: CN=531A5E907232A65D833058CEC0804474AB05F2CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:e6:20:13:97:38:3f:81:d4:a7:3a:5e:7a:
ea:ed:a8:c9:5c:eb:0a:ad:3b:b5:32:66:ae:8e:47:
c2:a1:b7:0d:28:34:03:56:c7:26:48:f5:28:35:64:
4c:c6:fd:11:ee:07:24:50:01:23:16:95:5f:1e:ae:
78:8e:bf:ac:18:6c:3d:d0:a9:1b:16:70:50:89:27:
03:7f:18:b6:9d:30:4c:c1:d9:24:46:ce:22:55:bd:
ec:01:78:1c:f3:95:4e:46:b3:6b:60:bc:34:ec:75:
5c:24:16:b9:5a:60:5a:11:3f:5b:7b:81:27:f9:0f:
72:d2:60:de:d3:64:c7:88:cd:a5:8d:6f:cb:a8:22:
87:b1:f2:09:fb:32:09:1e:8f:45:52:2a:30:00:8b:
96:a9:c0:71:74:4e:40:ed:c5:35:b0:77:06:72:5f:
d8:e6:d2:12:d9:b3:0e:3d:b0:32:0e:20:ec:ee:2a:
e4:35:0d:23:8a:78:5b:d2:ff:23:77:23:60:9e:01:
92:51:0e:d6:82:db:79:05:34:b8:f7:f8:f5:10:90:
b6:d9:40:3d:da:7d:b6:98:a6:b1:89:e2:56:66:f6:
df:f0:e3:88:25:5c:27:1e:7c:61:73:8a:11:0f:f6:
b2:f7:e9:5a:d0:5b:01:bf:cd:b5:07:90:ee:28:53:
5a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:5E:90:72:32:A6:5D:83:30:58:CE:C0:80:44:74:AB:05:F2:CF
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/AS52866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.128.0/22
138.94.112.0/22
170.81.244.0/22
177.125.24.0/22
186.233.220.0/22
IPv6:
2804:bdc::/32
Signature Algorithm: sha256WithRSAEncryption
8c:a5:48:ac:99:e5:16:f7:26:77:a3:28:95:87:f8:f4:f9:58:
49:8c:ed:40:d3:35:ae:93:e0:3a:9a:ab:fc:86:49:02:71:a3:
05:6e:63:cd:a1:bd:8d:70:40:7e:a3:e1:96:b1:7e:cd:cf:03:
ee:09:7e:5a:97:6c:a0:6f:99:f3:a1:76:86:b2:4e:5c:c7:21:
50:50:f5:a5:e4:b1:f4:45:58:7b:c5:6a:10:f4:23:05:ed:16:
70:51:5e:6e:9f:07:94:e2:cc:cb:b8:68:fb:a6:31:e6:f6:2f:
eb:66:15:c5:05:1f:2d:d2:97:08:26:56:8d:aa:8d:2c:9b:6b:
f9:f4:e8:a7:70:c3:8d:38:07:0e:d9:3c:6d:87:c2:34:7f:5d:
0b:83:c7:74:57:2c:cf:f5:2e:c5:ff:7b:bd:c4:bf:d4:26:3d:
7f:8b:48:9f:c9:54:b9:48:8a:d0:83:6b:40:64:ce:25:f3:93:
cb:d8:13:3a:f5:ba:b0:6a:df:24:b6:de:9d:99:9d:8c:10:1f:
00:69:02:d5:36:a3:96:12:94:dc:fa:7b:b1:20:0b:48:49:50:
5d:ae:a5:44:d8:8b:f0:b2:2b:d0:40:47:53:1e:cf:47:8b:91:
40:12:66:0d:2d:5c:99:7c:8a:05:fc:41:a7:2d:9d:06:1d:9e:
85:6e:ff:b0
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUKVxdfshHsarkB4s/SlwbWF9BRwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY4RTQ4NTVFOEFGNDY4MENDMzgyN0M1RjU0OEQxMUFG
RUVDOTE3ODAeFw0yNDA0MTAyMjA2NTBaFw0yNTA0MDkyMjExNTBaMDMxMTAvBgNV
BAMTKDUzMUE1RTkwNzIzMkE2NUQ4MzMwNThDRUMwODA0NDc0QUIwNUYyQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmOYgE5c4P4HUpzpeeurtqMlc
6wqtO7UyZq6OR8Khtw0oNANWxyZI9Sg1ZEzG/RHuByRQASMWlV8erniOv6wYbD3Q
qRsWcFCJJwN/GLadMEzB2SRGziJVvewBeBzzlU5Gs2tgvDTsdVwkFrlaYFoRP1t7
gSf5D3LSYN7TZMeIzaWNb8uoIoex8gn7Mgkej0VSKjAAi5apwHF0TkDtxTWwdwZy
X9jm0hLZsw49sDIOIOzuKuQ1DSOKeFvS/yN3I2CeAZJRDtaC23kFNLj3+PUQkLbZ
QD3afbaYprGJ4lZm9t/w44glXCcefGFzihEP9rL36VrQWwG/zbUHkO4oU1qVAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUUxpekHIypl2DMFjOwIBEdKsF8s8wHwYDVR0j
BBgwFoAUxo5IVeivRoDMOCfF9UjRGv7skXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMC9DNjhFNDg1NUU4QUY0NjgwQ0MzODI3QzVGNTQ4RDExQUZFRUM5MTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M2OEU0ODU1RThBRjQ2ODBD
QzM4MjdDNUY1NDhEMTFBRkVFQzkxNzguY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8wL0FTNTI4
NjYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAKDZIADBAKKXnADBAKqUfQDBAKxfRgDBAK66dwwDQQCAAIw
BwMFACgEC9wwDQYJKoZIhvcNAQELBQADggEBAIylSKyZ5Rb3JnejKJWH+PT5WEmM
7UDTNa6T4Dqaq/yGSQJxowVuY82hvY1wQH6j4Zaxfs3PA+4JflqXbKBvmfOhdoay
TlzHIVBQ9aXksfRFWHvFahD0IwXtFnBRXm6fB5TizMu4aPumMeb2L+tmFcUFHy3S
lwgmVo2qjSyba/n06Kdww404Bw7ZPG2HwjR/XQuDx3RXLM/1LsX/e73Ev9QmPX+L
SJ/JVLlIitCDa0BkziXzk8vYEzr1urBq3yS23p2ZnYwQHwBpAtU2o5YSlNz6e7Eg
C0hJUF2upUTYi/CyK9BAR1Mez0eLkUASZg0tXJl8igX8QactnQYdnoVu/7A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org